Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/3cL278tMfhHRt0jMeGBsuK_6tdE.roa
File: 3cL278tMfhHRt0jMeGBsuK_6tdE.roa (raw, json)
Hash identifier: 9Jvsf+gu/Bz99BEJw/Qs3de4jjh1Gye98YTVVsGjiIs=
Subject key identifier: DD:C2:F6:EF:CB:4C:7E:11:D1:B7:48:CC:78:60:6C:B8:AF:FA:B5:D1
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143B5D02E34E906D4FEB013EC3A9BAC
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/3cL278tMfhHRt0jMeGBsuK_6tdE.roa
Signing time: Wed 01 Jan 2025 09:47:53 +0000
ROA not before: Wed 01 Jan 2025 09:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52153
IP address blocks: 2001:a10:186::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b5:d0:2e:34:e9:06:d4:fe:b0:13:ec:3a:9b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddc2f6efcb4c7e11d1b748cc78606cb8affab5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:46:3d:97:c1:02:cb:db:bb:45:84:8a:9c:
80:cc:42:15:21:e7:e5:31:67:e7:02:45:ba:ea:bc:
09:a4:9e:67:8d:f5:7b:18:3b:56:e0:78:87:98:6e:
d8:5c:a8:ac:bc:37:0b:bd:67:2f:ea:17:43:5b:82:
bb:5c:dc:f0:1c:8c:0c:86:0e:33:ce:8a:3e:28:5e:
36:8f:a4:c4:35:ff:27:87:22:b1:ba:54:16:68:5e:
73:17:71:80:d2:04:ba:02:20:b4:c1:b6:29:ca:bc:
0a:4e:50:e3:78:29:b3:17:72:06:29:7b:ec:72:71:
a9:e2:12:cd:b1:c2:61:b5:26:01:7f:8d:e4:1a:ef:
f5:9b:1f:54:3c:87:e8:17:7b:d4:09:a8:44:4d:4e:
fc:7d:c8:d5:ad:c9:3a:7d:51:89:cf:87:99:87:f9:
3f:73:4d:9d:be:ea:49:5e:93:5b:7b:24:4e:59:cf:
ee:7a:68:a8:24:9c:5c:dd:4e:6f:15:a5:c9:72:83:
db:ab:6f:66:7d:ef:3f:35:60:c6:93:08:6f:bf:f9:
38:01:98:5a:4d:37:f3:c4:b9:e7:08:61:a5:55:db:
b6:27:99:74:e3:7d:be:0e:e2:d8:90:50:88:f8:a3:
f4:4d:9d:2c:ce:37:cc:9e:c1:84:4e:72:13:a1:4b:
da:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C2:F6:EF:CB:4C:7E:11:D1:B7:48:CC:78:60:6C:B8:AF:FA:B5:D1
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/3cL278tMfhHRt0jMeGBsuK_6tdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:a10:186::/48
Signature Algorithm: sha256WithRSAEncryption
71:d6:19:28:a7:ff:91:fd:00:e8:24:db:76:ef:6c:96:10:30:
c5:3c:53:1f:7e:c5:d6:75:51:66:c0:62:4f:36:4f:f0:ba:7e:
2c:2b:bd:04:84:db:aa:19:d3:5a:ae:5d:b1:d9:e9:8f:65:04:
bd:31:66:7f:bd:98:5d:ef:0b:10:f6:4b:1b:16:00:f1:94:0e:
d9:68:77:98:c1:c4:a4:60:80:33:44:31:ee:b6:0e:7a:52:f4:
fd:1f:20:35:42:4b:95:73:e7:43:3a:54:bf:da:50:ca:1d:d8:
94:5d:a9:36:55:c8:9a:e3:f3:e3:3f:5e:b8:f3:09:bd:3c:1d:
f9:3b:3c:51:60:e3:e7:4b:0c:ff:ae:18:f6:dd:5e:8b:38:95:
6f:05:6e:00:06:f6:93:49:c2:e5:9c:b5:71:4b:68:18:9b:80:
89:13:f3:bb:fa:2d:ba:2e:e7:29:6b:30:57:90:49:11:58:0f:
b7:7e:06:bd:d4:3f:27:f2:74:ea:95:94:5c:5c:47:d8:43:54:
d8:6d:4f:bc:4c:5a:78:3f:4b:bb:74:73:41:63:10:87:8c:f0:
d4:f0:dd:fd:35:7f:a3:c5:ec:1b:90:b7:fc:3d:f7:ad:ce:f8:
ac:49:32:f5:39:dd:44:e0:79:77:5c:8b:ef:c5:27:3a:53:1b:
25:64:75:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:47 2025 by rpki-client