Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/SlgBQGuoqHoQ9kJYGrngKlQfii8.roa
File: SlgBQGuoqHoQ9kJYGrngKlQfii8.roa (raw, json)
Hash identifier: INZc7izRGRYMu5pgl/EaUS+Y4UxOOzVRJwZNpW79h8c=
Subject key identifier: 4A:58:01:40:6B:A8:A8:7A:10:F6:42:58:1A:B9:E0:2A:54:1F:8A:2F
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0194BD834DA1F8C4787615584C2954C2D98D
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/SlgBQGuoqHoQ9kJYGrngKlQfii8.roa
Signing time: Fri 31 Jan 2025 17:58:06 +0000
ROA not before: Fri 31 Jan 2025 17:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a09:2983::/32 maxlen: 32
2a0e:3f46::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:83:4d:a1:f8:c4:78:76:15:58:4c:29:54:c2:d9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 31 17:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a5801406ba8a87a10f642581ab9e02a541f8a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:eb:f9:5c:9b:4e:36:7a:13:ce:97:4a:d1:e2:
66:ac:1c:d8:b8:da:b0:9e:c0:aa:96:a9:99:40:a3:
5b:4e:eb:ee:0e:79:7f:ad:01:f6:63:e1:b0:70:cf:
fe:0a:c2:00:27:45:b5:c9:f5:41:b9:38:c0:4d:d6:
a8:70:39:8a:bb:c8:5c:dc:ed:f5:25:85:53:ef:fd:
86:56:60:50:38:16:5b:ca:05:7d:61:0b:6f:39:d1:
20:48:21:09:22:c8:70:84:7b:03:24:ef:6f:fb:2e:
37:f4:d0:0e:f4:46:da:5b:89:29:c3:80:4d:f9:e3:
ec:54:6d:69:6c:83:a7:bc:65:19:a3:f3:db:cb:6b:
a3:17:fb:20:17:e5:ab:4c:f4:58:f8:27:4a:1f:7f:
1c:bd:f4:f7:38:59:07:2e:95:0e:10:cb:f1:ae:64:
15:f2:a2:1d:fd:ee:92:41:38:d6:de:4c:1c:d2:f5:
a1:a0:e7:2f:2c:11:f7:fe:33:bc:e1:f9:7b:eb:ec:
0d:7e:6a:23:c7:45:5e:13:47:a9:46:0b:87:43:0d:
67:33:4f:4d:66:cb:6e:58:05:7e:9a:94:be:3e:61:
24:37:6a:2e:fa:fb:f2:38:1c:6b:d4:a9:06:c2:a1:
71:20:28:1d:20:ef:29:55:cc:2c:c9:8b:fc:9c:de:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:58:01:40:6B:A8:A8:7A:10:F6:42:58:1A:B9:E0:2A:54:1F:8A:2F
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/SlgBQGuoqHoQ9kJYGrngKlQfii8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2983::/32
2a0e:3f46::/32
Signature Algorithm: sha256WithRSAEncryption
c4:e8:29:ea:43:ef:63:ea:50:a4:35:62:14:f2:6f:71:3b:0b:
c0:b2:1b:d5:8e:1f:db:c5:e3:3d:58:3a:bf:31:f6:02:24:cc:
1c:90:8d:23:c7:28:bf:ce:f4:cb:2b:04:4b:b4:94:84:65:ec:
05:63:e3:39:91:2f:9e:47:28:b6:13:b3:c1:75:73:04:f1:e0:
1d:ab:83:6a:1a:67:13:d2:33:77:75:99:da:90:11:6f:8d:a6:
e6:43:d2:b8:88:d8:7a:f5:96:3b:61:bf:04:6c:34:99:78:66:
38:ea:87:b5:22:0a:70:5b:a3:4b:69:a0:e3:08:2f:9d:4c:ee:
48:7d:79:f4:09:a2:18:ad:94:02:f3:d6:ae:60:d3:a1:32:2b:
20:5a:e1:b4:d4:6f:d5:c5:df:14:57:e8:44:4f:b7:77:72:7e:
a8:e9:15:8f:85:67:90:3d:05:2b:bf:6d:ef:bd:71:53:56:c3:
f3:10:29:01:40:b9:88:0a:5c:6d:9d:76:d8:39:f6:51:12:00:
c2:79:66:a6:44:e4:85:73:ec:60:b4:28:75:35:76:81:a8:85:
f5:58:52:02:94:32:2b:f5:79:c5:1b:ab:e2:c8:c5:e0:21:06:
22:b4:d1:b6:e3:2a:5c:86:08:46:eb:7a:5c:71:c3:5e:c4:d7:
23:6d:8e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:31:21 2025 by rpki-client