Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/nE37WTmzmt9WWjxoey3lfIQz1xg.roa
File: nE37WTmzmt9WWjxoey3lfIQz1xg.roa (raw, json)
Hash identifier: 288rn9iBt4mx/lEPqWVCgDJJjF5ST3fEeQyV9vBNZmY=
Subject key identifier: 9C:4D:FB:59:39:B3:9A:DF:56:5A:3C:68:7B:2D:E5:7C:84:33:D7:18
Certificate issuer: /CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Certificate serial: 01942826F937B7AF7834F4E7D13BC4F535A3
Authority key identifier: 4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/nE37WTmzmt9WWjxoey3lfIQz1xg.roa
Signing time: Thu 02 Jan 2025 17:53:50 +0000
ROA not before: Thu 02 Jan 2025 17:53:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214380
IP address blocks: 2001:67c:139c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:f9:37:b7:af:78:34:f4:e7:d1:3b:c4:f5:35:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cef78082c07292aaae240f6ecfd3afdba78b8ca
Validity
Not Before: Jan 2 17:53:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c4dfb5939b39adf565a3c687b2de57c8433d718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:9b:e0:3e:cb:f5:80:31:97:d7:62:60:c2:
94:99:8e:34:b7:a6:2e:57:b9:83:cf:eb:73:85:25:
dc:4f:d7:76:45:d1:f1:53:3b:3f:97:3b:35:37:8a:
68:65:e8:02:0a:c7:83:f5:66:8e:ca:6c:4a:02:5d:
a3:fe:15:75:d7:3b:1f:ab:88:94:05:14:99:83:06:
da:88:43:62:49:5a:5d:61:55:61:14:a9:8a:26:1c:
c3:c0:7a:b6:48:7c:68:84:e5:15:8b:f4:91:ab:dc:
75:16:b3:8f:7a:a9:1f:4a:7c:bb:df:61:33:59:94:
58:23:75:8d:c0:b1:a2:3f:ba:61:ec:34:4e:c3:ae:
6c:58:56:b6:85:73:2c:67:cf:7a:df:83:be:db:7a:
41:66:b0:27:ca:2a:51:bf:cb:43:1c:23:a9:0a:fa:
7b:97:40:1a:4c:6d:9b:58:de:66:b0:fa:25:e5:09:
e6:bb:ab:1f:42:38:bc:b8:bd:c6:0b:ff:d8:39:7a:
d4:a0:6f:ff:7e:de:09:7a:f0:f7:a0:bc:58:21:05:
01:c6:50:5c:3b:b2:54:d2:f6:f4:de:b6:ba:e0:ad:
6f:9f:bd:5b:cf:a8:64:0e:9a:0e:ef:f9:46:44:c6:
98:08:6f:b9:c3:ca:27:92:a2:ef:38:1b:fa:35:dd:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4D:FB:59:39:B3:9A:DF:56:5A:3C:68:7B:2D:E5:7C:84:33:D7:18
X509v3 Authority Key Identifier:
keyid:4C:EF:78:08:2C:07:29:2A:AA:E2:40:F6:EC:FD:3A:FD:BA:78:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO94CCwHKSqq4kD27P06_bp4uMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/nE37WTmzmt9WWjxoey3lfIQz1xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/TO94CCwHKSqq4kD27P06_bp4uMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:139c::/48
Signature Algorithm: sha256WithRSAEncryption
43:a4:91:98:f0:42:36:60:55:51:5a:56:e6:78:24:d1:8a:94:
45:57:f1:62:41:ac:14:a9:89:5b:fd:0f:1c:54:6b:36:d9:cf:
98:37:c9:29:10:95:b3:7f:62:33:f7:47:d0:73:e1:72:e3:14:
42:10:84:fa:9e:bb:f8:78:48:7c:8f:3d:56:ba:d3:67:ac:3a:
dc:6c:0c:59:80:49:06:ad:ea:36:a7:5a:2c:fd:5a:fe:5d:28:
14:55:2c:a8:66:a1:22:a9:22:f0:74:7a:06:b4:b4:19:69:70:
d4:a3:c8:d5:f6:80:27:6f:c3:63:26:68:df:0e:d2:8e:59:75:
51:f3:ed:3c:82:29:0b:fb:2a:e3:4a:e8:6b:1e:19:ce:d5:c3:
9b:94:13:ad:2e:d4:73:1a:2f:af:db:a5:eb:c0:18:84:09:8f:
c7:6c:a2:7d:3e:2b:2f:6e:ef:69:be:5d:0b:ba:0e:9e:3a:1e:
82:1e:2c:a0:be:40:fa:4d:b2:df:ea:c1:19:9b:20:61:e0:10:
34:04:d1:97:e1:a1:1b:c4:f9:e3:de:f0:f1:e2:28:9e:3d:5e:
99:d7:01:9c:4d:42:b4:6b:23:c1:f4:4d:66:b2:c7:ea:ae:a4:
fe:36:2f:06:dd:2c:bf:9b:13:4f:95:c1:65:98:b8:77:b3:ed:
74:22:eb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:45 2025 by rpki-client