Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa
File: x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa (raw, json)
Hash identifier: vQ6QPNwnnIFhCOXdhX1rKb14Trxw+IBL89xByl8hgdM=
Subject key identifier: C7:96:89:CD:43:CC:1C:B2:A1:94:82:89:D1:67:F9:40:C2:46:0B:5C
Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial: 0194266BB711BD7B82D45F31A79AD411F846
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa
Signing time: Thu 02 Jan 2025 09:49:40 +0000
ROA not before: Thu 02 Jan 2025 09:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31317
IP address blocks: 2001:67c:468::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b7:11:bd:7b:82:d4:5f:31:a7:9a:d4:11:f8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
Validity
Not Before: Jan 2 09:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c79689cd43cc1cb2a1948289d167f940c2460b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:c0:ce:32:a5:7f:5c:35:66:4b:c8:5b:28:
e4:5c:b2:a8:0b:23:8e:1b:55:65:63:57:5e:f5:13:
92:77:47:9b:98:6c:e1:85:48:7d:cc:67:ff:5d:c0:
6c:5f:35:ee:df:b9:ca:e4:e0:35:68:47:25:bd:25:
90:43:d9:25:e2:78:a2:5d:c9:11:ea:96:95:18:57:
fe:24:4a:db:e7:1a:bb:58:c3:63:1c:36:c5:d8:c9:
db:f5:c4:a1:52:bc:6d:03:f8:99:6c:65:57:4e:a7:
2c:44:54:36:32:a7:0f:7f:d9:b5:96:99:7d:40:c7:
59:9c:69:9e:f3:8a:30:9a:ba:2c:3b:45:cb:93:7a:
6b:59:f5:b2:bd:2d:b2:80:62:df:b2:cc:3f:e8:8f:
a8:d4:d1:9e:1c:03:bf:99:ae:33:64:05:d5:15:09:
ce:6a:f6:91:6d:64:83:a7:d2:a6:24:d6:89:ff:3d:
b9:e1:48:cf:b8:92:7f:59:b6:3f:09:23:d6:2e:82:
17:f8:f7:11:ab:78:7d:72:e9:fa:46:75:7f:de:90:
66:6f:ab:2b:f5:e5:65:bb:dd:bf:55:a1:dc:bc:e6:
f9:bd:f9:4a:4a:67:be:79:f8:63:e7:9f:1b:17:83:
68:eb:3e:98:03:48:b9:54:2c:65:ae:b5:fd:b5:67:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:96:89:CD:43:CC:1C:B2:A1:94:82:89:D1:67:F9:40:C2:46:0B:5C
X509v3 Authority Key Identifier:
keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:468::/48
Signature Algorithm: sha256WithRSAEncryption
90:08:01:d2:06:02:f0:40:4e:e8:c9:21:a8:31:89:51:c0:a2:
d6:ee:ec:c9:8b:43:b8:5a:50:fe:a5:ac:f0:f9:05:14:1b:b3:
7d:da:20:48:da:71:b7:ff:dd:b2:64:ad:02:c0:23:b7:b3:6c:
af:27:0a:36:41:56:6a:bb:73:a5:19:77:28:2e:4d:b3:d0:87:
2b:4d:0c:b9:7c:e9:f0:8f:6e:b9:f6:e0:a9:e6:06:d4:4b:c7:
ad:9b:34:fd:49:1e:55:6c:75:a9:a4:81:6e:1d:cc:c8:2a:88:
69:6c:ec:20:bd:c3:e9:96:74:3a:64:56:52:e8:be:ad:c0:38:
85:3f:00:a6:4d:0c:72:aa:13:02:48:7f:2c:6d:5f:fd:ce:7e:
3e:14:85:c0:db:0d:d6:6a:44:5f:db:a1:3f:a9:d0:54:8c:ae:
6b:48:ad:45:34:40:11:02:17:f5:61:5a:a7:cd:6b:ec:5d:96:
ce:5d:d2:89:d9:ca:08:f6:a9:15:f0:87:51:94:3a:c6:6a:49:
99:9f:14:8b:97:bc:d2:dc:fa:5d:90:9d:ac:e1:56:4b:23:d7:
9f:79:35:35:8c:04:7c:48:bc:e9:1d:8e:19:54:3d:9e:2d:cd:
b5:63:ca:d6:ce:4b:77:79:cc:c1:c2:ac:37:da:28:42:e8:b9:
d3:b0:cc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:58:28 2025 by rpki-client