Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/26-qfn9ODUHJpEH89Qt0MRaUhuA.roa
File: 26-qfn9ODUHJpEH89Qt0MRaUhuA.roa (raw, json)
Hash identifier: 2YdYGfBZn6lY/AbZT0o2XAew8LsHFvDqQ6x2hV85Y5I=
Subject key identifier: DB:AF:AA:7E:7F:4E:0D:41:C9:A4:41:FC:F5:0B:74:31:16:94:86:E0
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 0194206819E571D9BD93AB7CCB9A7E01FBE2
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/26-qfn9ODUHJpEH89Qt0MRaUhuA.roa
Signing time: Wed 01 Jan 2025 05:48:00 +0000
ROA not before: Wed 01 Jan 2025 05:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199789
IP address blocks: 2001:67c:b98::/48 maxlen: 48
2001:67c:29a4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:19:e5:71:d9:bd:93:ab:7c:cb:9a:7e:01:fb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Jan 1 05:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbafaa7e7f4e0d41c9a441fcf50b7431169486e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:c2:27:a7:a5:ed:5a:51:cc:13:54:58:5c:
a9:42:6f:52:63:93:5f:cd:98:ef:7f:35:8f:f9:be:
11:15:0b:ef:77:d8:8a:15:f5:2a:da:b1:a6:8e:97:
6d:e3:aa:cb:fd:9d:fc:9e:59:2b:8f:72:96:ca:eb:
9e:c4:60:f3:2f:a7:e6:59:6f:94:56:14:a0:81:84:
a9:7e:f6:9e:07:48:6e:6c:06:5b:ec:18:92:42:67:
e6:82:fa:fe:81:5b:fd:dd:fa:00:bf:cc:86:b6:a5:
e5:6d:78:9d:86:61:3e:23:54:47:ac:07:9d:e8:5a:
15:7a:74:4e:c3:83:c6:3f:2a:3d:d5:fa:68:ce:e9:
a4:3d:ae:62:27:83:4c:8f:52:aa:e8:eb:b6:3f:6d:
c0:38:f0:37:3e:81:12:70:27:63:cc:1c:18:a3:1f:
8d:5a:67:42:17:50:52:23:bf:39:03:4e:39:c1:0f:
3e:d4:6d:54:79:5c:00:dc:18:2a:50:e9:f1:cf:46:
f4:c8:cd:0d:6f:1b:f2:ea:f4:65:ee:61:dc:23:4a:
41:e9:11:60:aa:41:a0:cc:46:30:4a:bc:d3:8e:b9:
d1:9a:ea:70:5a:73:6b:3d:22:4b:5d:6c:6e:ec:bd:
03:ff:f9:26:49:62:d6:4c:5b:df:8e:6e:b1:32:76:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AF:AA:7E:7F:4E:0D:41:C9:A4:41:FC:F5:0B:74:31:16:94:86:E0
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/26-qfn9ODUHJpEH89Qt0MRaUhuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b98::/48
2001:67c:29a4::/48
Signature Algorithm: sha256WithRSAEncryption
6f:21:57:a4:ef:09:98:e5:90:f6:42:04:44:74:a6:4a:3d:c5:
ae:b3:d9:61:d4:b5:07:f1:4f:5b:0d:58:00:5a:99:bd:fb:07:
a1:65:eb:0f:21:1e:c6:d3:7e:b7:e8:cf:93:fe:87:6a:ea:d9:
9a:dd:02:b8:4c:a8:6d:a0:7f:90:e5:4a:90:de:9b:17:06:02:
3c:c0:34:f1:e3:f6:32:7a:07:9d:ba:1a:5b:91:64:74:8c:9c:
6c:01:53:65:af:b0:2e:32:62:54:56:c6:06:73:b7:68:8d:3d:
17:9e:73:4b:8c:3f:2b:77:4f:49:16:ff:d5:d9:fa:73:b6:43:
f5:8f:38:0d:28:69:6c:8e:23:f7:fe:3b:ad:da:f8:df:74:a3:
e6:61:6a:f2:12:e7:10:72:2e:48:ab:a9:d8:04:d5:44:de:60:
4e:19:d0:86:e1:7f:34:e4:2f:ed:e0:fc:f2:f4:31:da:a0:e3:
77:7c:4e:f3:ce:ca:48:07:e6:a8:15:35:cd:7e:a3:38:32:d3:
f2:c8:c9:88:cb:4c:18:b8:01:eb:a9:29:61:07:a1:7a:eb:1f:
ac:8c:97:1d:a8:6a:91:9c:eb:fb:32:7e:19:45:32:db:ef:ba:
32:41:c3:b0:92:8e:44:50:db:8f:2e:ef:14:fc:55:be:02:2c:
1a:f5:42:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:08 2025 by rpki-client