Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/28GUm6MyGmDzZNaWznfWcQv0e_Y.roa
File: 28GUm6MyGmDzZNaWznfWcQv0e_Y.roa (raw, json)
Hash identifier: C7L+FDUEfqbFey+e0t8jNl/x+IFvC1I+YVSxl7oinY0=
Subject key identifier: DB:C1:94:9B:A3:32:1A:60:F3:64:D6:96:CE:77:D6:71:0B:F4:7B:F6
Certificate issuer: /CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
Certificate serial: 019426D9F5F71FC178E135395B7D36047A3A
Authority key identifier: 93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/28GUm6MyGmDzZNaWznfWcQv0e_Y.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215833
IP address blocks: 2001:67c:2b44::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f5:f7:1f:c1:78:e1:35:39:5b:7d:36:04:7a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbc1949ba3321a60f364d696ce77d6710bf47bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:50:8c:d1:dd:ea:3d:53:e8:ae:f5:0d:4b:
5e:50:94:61:9c:79:80:af:a3:c3:74:4f:19:4e:e9:
3a:d5:ed:1c:58:41:9b:29:ee:c2:5f:89:68:2f:41:
1b:4f:b8:21:05:05:3e:34:b1:f3:4e:e1:45:90:ea:
45:21:a9:58:3f:a2:b2:66:a3:52:cd:5a:b0:12:fd:
bf:c2:97:79:99:a1:28:54:05:fa:ad:37:48:46:ad:
90:cf:a7:40:de:a8:e0:c0:e8:13:22:62:4e:00:81:
f2:6b:b8:7d:e3:96:b9:67:6d:31:7b:5d:4c:47:7d:
7a:2a:66:13:50:93:37:7a:7f:db:7d:fe:3d:29:ae:
78:6f:ea:bd:64:5f:a9:c0:85:df:2d:08:52:d9:a9:
01:76:f5:f0:fa:86:11:46:c2:df:63:3b:5e:63:02:
3e:e3:3e:e3:35:42:b9:d8:04:e9:f9:68:a3:b2:69:
41:79:72:e6:65:f1:3c:02:74:7a:56:73:21:70:73:
62:8f:a4:e5:0e:d5:20:9e:b3:3d:ba:29:e2:80:04:
82:50:60:b3:b7:e7:44:c0:9e:1e:02:7b:b6:1f:31:
a9:31:cf:e3:4b:ae:57:79:73:19:a3:13:92:f8:d2:
77:1a:53:3a:d0:b3:6d:d7:98:2d:84:62:68:76:85:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C1:94:9B:A3:32:1A:60:F3:64:D6:96:CE:77:D6:71:0B:F4:7B:F6
X509v3 Authority Key Identifier:
keyid:93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/28GUm6MyGmDzZNaWznfWcQv0e_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2b44::/48
Signature Algorithm: sha256WithRSAEncryption
61:d7:95:29:b6:36:c1:d6:bb:ba:52:b8:cd:e0:29:be:84:61:
44:f0:83:55:57:46:06:4d:70:da:52:42:ca:df:dd:c9:d0:aa:
32:83:f5:ab:7b:0b:22:6f:ff:26:75:c9:8b:bd:94:a8:26:24:
33:db:48:64:69:9c:0f:8d:c7:de:40:fd:98:45:55:0d:45:26:
de:f5:35:ea:03:f1:4f:b5:c0:62:2a:a5:fa:53:17:c1:13:ed:
81:18:fa:38:3f:97:c8:56:2b:a2:2f:6a:69:8a:1f:86:ab:e9:
6e:ce:56:6b:ab:06:dd:2f:b9:67:58:44:1f:c5:e7:ea:67:7f:
1c:a0:44:e7:f2:74:f1:a8:a5:0e:56:a1:6c:bd:5c:a0:45:45:
26:bf:71:c1:cb:78:89:99:c5:66:19:85:5e:b2:89:74:21:2e:
fc:a3:20:c9:aa:67:35:b6:5f:53:2f:1a:56:0b:ef:8c:c8:43:
dd:21:16:74:12:b2:c3:7e:23:a3:1a:71:0f:b1:91:8e:ed:1c:
0d:50:0c:a1:75:0c:64:a7:97:7a:8f:70:84:78:bb:16:6a:49:
6f:14:a6:d6:f0:2a:a8:b4:ba:4a:42:b6:b8:a9:32:e6:03:61:
e0:5b:db:89:b9:05:4c:9b:cf:c1:f1:cf:c5:81:69:2c:53:ba:
84:69:b8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:34:34 2025 by rpki-client