Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/5moGvKAoN95-3rdirRXOwCahhvs.roa
File: 5moGvKAoN95-3rdirRXOwCahhvs.roa (raw, json)
Hash identifier: SkhAzMm5Jb5vcIiM14h4SYz3DQTRyqaR2eF+qq4Rdl0=
Subject key identifier: E6:6A:06:BC:A0:28:37:DE:7E:DE:B7:62:AD:15:CE:C0:26:A1:86:FB
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 019427471480A6FDD58C2EB82AA07369C938
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/5moGvKAoN95-3rdirRXOwCahhvs.roa
Signing time: Thu 02 Jan 2025 13:49:17 +0000
ROA not before: Thu 02 Jan 2025 13:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49825
IP address blocks: 2001:67c:12d4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:14:80:a6:fd:d5:8c:2e:b8:2a:a0:73:69:c9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Jan 2 13:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e66a06bca02837de7edeb762ad15cec026a186fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:0c:70:be:d6:97:46:05:f3:0e:ff:d6:06:
c5:ed:b5:fd:ed:a1:a3:c0:38:d7:8e:cf:6f:45:1f:
e2:af:8d:48:bc:b0:a5:5d:03:f3:1a:36:7e:e2:18:
fe:b3:a4:6c:c7:55:e0:c3:35:74:73:e5:09:ac:fc:
2d:81:dd:be:5e:19:a9:26:e2:cc:71:b0:a5:d4:f0:
bb:11:0f:0f:2d:59:47:1f:d2:42:c0:ae:e2:bc:4b:
6f:a4:8d:73:9c:41:ae:6a:14:c8:93:c1:2f:6e:5d:
83:2b:48:61:e9:5b:ff:b3:0c:49:a6:4b:78:c4:2c:
2d:fe:ad:09:48:f3:57:2f:fd:f9:7f:a4:ec:90:8b:
aa:78:76:2c:86:fc:84:53:65:2a:43:42:31:72:68:
17:d5:2e:66:99:5a:c4:74:1c:d7:6f:b4:05:5f:1b:
7f:66:53:be:b8:26:33:6f:28:84:ed:8b:0e:2d:95:
de:52:e6:36:5d:26:30:cf:5b:55:c3:c8:94:a7:27:
a7:98:85:07:b0:7e:35:be:57:68:32:2e:9f:dd:58:
18:79:cf:de:c2:36:3a:b9:53:d5:8d:05:72:dc:d8:
3a:05:04:1f:f5:11:70:df:1b:ee:8b:2f:b8:38:8b:
ad:9e:91:24:0d:1d:d4:7b:18:a4:d1:36:02:fc:c4:
bd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6A:06:BC:A0:28:37:DE:7E:DE:B7:62:AD:15:CE:C0:26:A1:86:FB
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/5moGvKAoN95-3rdirRXOwCahhvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:12d4::/48
Signature Algorithm: sha256WithRSAEncryption
87:cb:69:0a:1e:f7:a3:57:d7:87:65:9b:17:f7:35:0b:82:2f:
8c:26:34:b3:51:ae:c7:0f:df:67:12:13:08:34:49:d2:c2:34:
89:49:d1:bd:8d:08:c7:fb:d4:66:50:ad:4d:fc:e4:78:9f:c1:
b8:88:5a:2c:f3:d4:aa:55:b6:ab:22:ac:89:59:96:18:9d:73:
55:f0:87:c1:ab:42:bb:bd:89:c1:b7:a3:09:45:bf:3c:91:dc:
3a:2a:84:56:bb:f9:b7:86:0f:26:32:4a:49:51:74:ba:66:52:
0b:5f:10:84:8a:29:5f:29:ec:4d:f8:d4:77:71:f2:a3:54:2b:
27:30:f3:4f:1b:d9:63:de:fd:64:9b:d5:59:d9:34:3f:9a:63:
d8:ef:27:dd:07:4d:ae:43:4b:0c:a7:fc:d3:e2:73:27:76:b1:
09:be:2d:65:a7:98:fc:05:be:47:4c:e9:0d:f6:c2:0f:83:a1:
5c:15:ea:08:1d:73:d8:1c:84:a1:84:dd:21:d5:2a:b0:41:16:
03:44:e9:a7:36:6d:45:82:28:1a:93:27:e0:45:1f:c6:a5:10:
b4:9e:f5:46:82:67:8c:3d:6c:f2:58:61:cb:dc:91:1a:5c:9d:
2b:8d:ef:bc:41:07:29:43:47:c7:4b:2b:c7:12:56:60:7c:be:
8e:f6:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:58 2025 by rpki-client