Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/o1DWDmVaZhm5Thm5lnLsxdCWE2Y.roa
File: o1DWDmVaZhm5Thm5lnLsxdCWE2Y.roa (raw, json)
Hash identifier: VbopfwijRRsIHn78dBzrkEvi3TDRTaUqoMywyYX+I3c=
Subject key identifier: A3:50:D6:0E:65:5A:66:19:B9:4E:19:B9:96:72:EC:C5:D0:96:13:66
Certificate issuer: /CN=722325ecf368c9148a7c41281d607fa6d804a0c9
Certificate serial: 019425FD5B974B957C4C9314AC97E5873B2A
Authority key identifier: 72:23:25:EC:F3:68:C9:14:8A:7C:41:28:1D:60:7F:A6:D8:04:A0:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciMl7PNoyRSKfEEoHWB_ptgEoMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/o1DWDmVaZhm5Thm5lnLsxdCWE2Y.roa
Signing time: Thu 02 Jan 2025 07:49:08 +0000
ROA not before: Thu 02 Jan 2025 07:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211335
IP address blocks: 2a13:e300::/32 maxlen: 32
2a13:e301::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5b:97:4b:95:7c:4c:93:14:ac:97:e5:87:3b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722325ecf368c9148a7c41281d607fa6d804a0c9
Validity
Not Before: Jan 2 07:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a350d60e655a6619b94e19b99672ecc5d0961366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:54:14:0e:73:5a:92:50:23:c7:e6:12:00:
e7:c5:e0:75:03:4d:a1:fa:e6:8b:24:4c:37:32:dc:
2a:06:d6:5a:18:59:96:fc:ab:20:77:de:3e:0b:42:
64:2f:2b:bc:5a:80:e9:1f:2d:20:f1:a8:a1:35:ea:
61:95:08:9f:cf:af:df:6e:f3:d4:7d:48:67:6c:3f:
13:0b:25:ec:10:46:97:69:4d:54:d9:84:b6:9e:32:
26:7d:1b:50:67:25:f1:5a:9f:72:be:85:a6:69:7e:
83:03:24:fc:8b:4b:bc:e9:b7:6c:93:cc:f6:36:71:
74:40:84:a1:58:73:fe:91:b4:d5:53:71:71:1b:39:
75:8e:04:59:2e:f1:8d:c6:e6:7a:7c:93:46:46:72:
65:ac:a3:d2:99:6c:ed:d8:d4:c1:be:b2:1f:7e:10:
6f:aa:ab:95:0a:8b:92:9d:1c:f7:fd:3f:58:b1:59:
6d:21:a2:87:22:e6:26:66:a8:02:21:ad:26:c5:58:
69:d8:d8:2d:cd:d2:f7:52:76:00:b9:61:3c:bf:37:
c0:08:ba:01:56:96:b2:23:e4:8f:a6:ca:25:7b:4b:
a4:d1:8d:d1:4d:13:1e:f3:bf:9f:7a:94:58:78:9a:
e9:14:be:1c:d5:f4:5a:13:ae:7a:11:c8:7f:2c:dc:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:50:D6:0E:65:5A:66:19:B9:4E:19:B9:96:72:EC:C5:D0:96:13:66
X509v3 Authority Key Identifier:
keyid:72:23:25:EC:F3:68:C9:14:8A:7C:41:28:1D:60:7F:A6:D8:04:A0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciMl7PNoyRSKfEEoHWB_ptgEoMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/o1DWDmVaZhm5Thm5lnLsxdCWE2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1c062a-04d4-4c05-a2d2-90bdcc4aa5db/1/ciMl7PNoyRSKfEEoHWB_ptgEoMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e300::/31
Signature Algorithm: sha256WithRSAEncryption
43:83:96:59:19:d9:cd:ad:ff:d4:68:be:4e:02:c3:57:12:dd:
2a:ef:8c:68:8f:c7:ad:23:24:44:39:f7:75:19:41:8a:67:e0:
e9:0c:7f:22:96:ca:58:4f:f4:3f:d7:80:4c:2a:c8:15:89:a9:
35:23:bc:ee:e1:03:7d:02:9c:e0:bc:b3:47:f4:60:79:53:04:
fc:c4:04:17:92:24:ef:bf:db:83:ed:76:fb:db:90:00:78:07:
e8:e0:73:6c:c6:65:d3:a9:2e:54:1b:fe:76:22:9a:0c:f3:51:
06:7f:e9:5d:0a:4a:68:0d:36:c7:98:a1:90:9a:3c:0d:3d:b9:
35:b7:ff:66:88:b8:2d:fa:3d:fa:83:e4:7f:57:9e:42:fe:d8:
9c:4d:9d:a8:68:aa:0f:85:d9:f6:a7:19:ec:d7:4c:d1:ec:20:
e0:d1:bc:22:9c:b7:e4:2f:8d:b4:ca:94:ee:dc:d6:07:55:bc:
85:04:a0:5a:04:e4:32:8c:3d:8c:27:a1:15:54:50:7b:68:81:
a4:4c:7b:e6:14:45:b3:25:ba:fd:54:47:2b:eb:f7:d0:c0:4b:
d6:26:4d:55:1f:9e:19:67:2e:74:9c:20:37:50:82:f3:45:ba:
83:68:3a:e7:2f:2b:34:a1:70:48:9b:34:c1:ce:41:22:35:79:
0d:31:14:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:30:16 2025 by rpki-client