Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/avjbPkAlTTUDqNOv2jIGjLOGScM.roa
File: avjbPkAlTTUDqNOv2jIGjLOGScM.roa (raw, json)
Hash identifier: NoYFGDs45doeFAf2D++JjK94J0re2CVTVqEaqoaVcGU=
Subject key identifier: 6A:F8:DB:3E:40:25:4D:35:03:A8:D3:AF:DA:32:06:8C:B3:86:49:C3
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 0194258F1C319871F3AD2E9274469C8DD3B3
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/avjbPkAlTTUDqNOv2jIGjLOGScM.roa
Signing time: Thu 02 Jan 2025 05:48:43 +0000
ROA not before: Thu 02 Jan 2025 05:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203496
IP address blocks: 2a13:a207:fff0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:1c:31:98:71:f3:ad:2e:92:74:46:9c:8d:d3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: Jan 2 05:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6af8db3e40254d3503a8d3afda32068cb38649c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:18:39:60:d4:b1:13:bf:e2:c3:80:99:fe:
93:37:83:21:0c:fe:d1:48:a2:79:1e:be:0a:10:a9:
03:b2:f3:70:6f:56:44:8d:39:e6:d3:95:a2:e9:c7:
56:b5:f8:81:87:bd:29:f2:68:cb:fd:f1:fd:53:c8:
ba:70:07:45:70:bd:37:89:b5:58:08:29:1f:a1:64:
f2:30:c7:19:4a:7a:34:81:90:3d:f9:5d:d2:a4:32:
e0:83:57:c6:e2:9b:0c:ba:86:e0:b0:25:58:4b:4e:
99:e0:47:1e:d1:51:b2:4a:ff:b8:f0:af:8e:82:46:
c9:51:a7:ca:d1:45:0f:df:41:96:2d:78:bd:fd:7c:
f7:62:a8:bc:2a:5d:c1:c1:67:53:9c:c9:b3:1b:f2:
f8:17:a6:c7:04:26:8b:aa:b4:9c:7e:ba:81:14:33:
02:64:40:41:24:24:99:1e:d2:47:4b:ff:e1:01:b8:
4b:b2:8c:41:f0:7c:20:b5:b3:16:7b:59:76:fd:f7:
c3:37:c0:4c:2c:9e:74:38:3e:33:a7:bb:2c:f2:8a:
0b:ee:65:c5:cb:24:51:b4:76:c9:8e:5b:e6:10:93:
d5:d3:2d:9c:f7:dc:ff:0f:ae:cd:91:2e:0f:3d:11:
d8:51:12:fb:84:62:fa:74:67:a0:95:78:48:e3:3a:
04:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F8:DB:3E:40:25:4D:35:03:A8:D3:AF:DA:32:06:8C:B3:86:49:C3
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/avjbPkAlTTUDqNOv2jIGjLOGScM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a207:fff0::/44
Signature Algorithm: sha256WithRSAEncryption
44:94:4f:a4:ab:8a:11:ca:43:6d:82:cd:4b:1b:e9:09:01:ba:
79:5d:73:83:3b:5e:8a:b7:0f:58:9b:69:00:a8:26:96:d1:a6:
98:8d:a7:62:ef:0d:45:6c:76:af:b0:6c:4b:13:49:13:e7:44:
67:c9:7b:cf:af:09:75:79:33:67:c4:b5:00:53:bb:58:c2:c4:
f4:2a:28:69:43:05:bd:4d:4f:f5:e8:e7:9d:8b:fb:af:d4:43:
1a:75:8c:c1:e5:af:91:81:5e:db:2b:8f:f8:ff:cc:ad:7b:a3:
1f:00:1e:c4:21:39:94:fb:a0:8e:07:12:78:c7:b5:34:b1:0a:
49:de:cf:91:88:6c:d9:d3:7c:ec:ca:7d:2e:0e:af:7e:56:cc:
d6:aa:7b:4d:6e:79:45:85:99:d9:c9:ec:cd:ec:ef:1b:fd:5a:
63:af:a0:45:70:7f:55:17:92:c1:5b:22:76:68:91:fa:8d:c9:
6e:c6:f1:b3:5a:55:cd:fc:2c:79:81:01:07:ea:ea:ef:6e:50:
73:2a:c5:f9:86:cb:bf:dd:dd:b1:3e:18:4a:a7:9b:44:7e:be:
1e:24:b4:32:fe:62:44:79:02:a9:82:cd:ff:c0:7c:a3:c5:74:
3b:a6:b8:fb:4c:49:39:08:33:58:5f:bc:c7:bf:de:db:8c:79:
98:71:95:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:40 2025 by rpki-client