Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/c6svDOJvCOMtHd0HAkmTUiNPmwY.roa
File: c6svDOJvCOMtHd0HAkmTUiNPmwY.roa (raw, json)
Hash identifier: 6qVcS/FkhUyMMSLQvWkursBUtWD1KPBUHSc/lCRTw4g=
Subject key identifier: 73:AB:2F:0C:E2:6F:08:E3:2D:1D:DD:07:02:49:93:52:23:4F:9B:06
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 0194266C1958F763C58D9675E6AD9762E39A
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/c6svDOJvCOMtHd0HAkmTUiNPmwY.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34164
IP address blocks: 2a01:3e0:402::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:19:58:f7:63:c5:8d:96:75:e6:ad:97:62:e3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73ab2f0ce26f08e32d1ddd0702499352234f9b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:81:44:b5:9e:59:32:4b:02:1c:04:02:a5:03:
1a:d7:e6:04:ea:a0:de:ef:8c:de:e3:7e:17:c7:1d:
f2:f3:b3:72:d9:78:ef:17:0e:7c:e8:eb:f3:5b:94:
c3:74:77:96:7c:11:a8:33:7e:a6:a6:da:d8:f3:14:
67:c0:81:b2:5c:56:f1:f0:ed:f5:4b:9f:86:eb:78:
b9:b5:1e:33:85:f6:38:c3:b4:84:62:dc:61:6a:e4:
7f:bf:71:ae:e5:b9:f7:45:cc:a5:9e:6b:3b:b7:4c:
f5:99:73:01:ef:f7:dd:89:e2:6c:98:ef:c7:f9:47:
42:bf:e3:41:63:03:30:46:2d:d4:e4:17:36:d9:70:
db:c8:29:bd:0d:0c:21:ed:12:ac:f9:25:8c:94:c7:
0f:df:be:0c:1c:16:ae:80:b7:52:9c:e1:72:30:d6:
89:fc:d0:a0:fc:ad:c3:38:6a:83:e4:ce:f8:f3:8d:
c4:af:53:33:4f:f1:aa:c3:ba:32:bf:a5:eb:4a:7d:
21:ef:6e:7b:77:eb:4c:bd:b4:23:55:35:83:37:fd:
d4:23:0a:f7:41:5a:a7:28:45:4c:e9:ad:39:31:d2:
a7:9a:f3:3d:01:b4:3f:6f:c5:14:ea:5a:18:a6:1c:
e4:fb:63:c8:22:58:2c:c1:f4:bd:97:e9:e4:3e:45:
11:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AB:2F:0C:E2:6F:08:E3:2D:1D:DD:07:02:49:93:52:23:4F:9B:06
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/c6svDOJvCOMtHd0HAkmTUiNPmwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:3e0:402::/48
Signature Algorithm: sha256WithRSAEncryption
e7:53:46:d8:bd:79:4f:59:7a:26:67:b6:0d:90:fc:0b:ef:05:
d6:5f:f8:05:13:04:41:c6:0f:fe:22:6b:61:61:31:19:1b:d0:
7a:72:aa:2d:2f:fc:9e:5c:29:ff:50:d6:cb:a9:eb:75:b6:b8:
99:75:27:d5:37:91:d1:29:77:37:81:2d:96:68:c5:07:ed:1d:
25:94:b1:f3:6e:91:57:f9:fa:f7:f0:fb:ea:cd:62:05:d5:f3:
06:78:f3:24:5a:84:43:6c:60:9e:f0:45:74:da:cd:73:f4:56:
4a:6e:d9:10:43:f0:ca:9a:8a:1b:a5:01:de:b5:8c:cf:2c:2d:
88:a0:35:f7:d0:9a:04:f5:e1:f2:44:a4:22:d7:56:39:21:65:
02:27:f3:0a:f4:dd:ec:83:f2:fb:f7:d8:53:76:4a:36:7f:75:
24:93:7f:0b:3b:47:ed:d4:1e:d6:db:5c:c4:79:ca:69:0d:e5:
3b:47:af:29:fa:51:70:e8:10:2b:62:60:81:ed:30:40:ba:bc:
c0:2a:3c:bd:9e:ff:f0:69:92:cb:83:14:e5:6b:29:65:24:02:
cc:11:f9:a5:e9:88:56:ce:f1:0a:9c:fd:8d:fd:76:cb:e8:f9:
15:32:a9:be:75:cb:11:f6:ec:82:00:49:7e:24:fa:6f:1c:6b:
d3:29:42:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:28:43 2025 by rpki-client