Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/g44wD4exlc1l3mqvr27NiUmB6UU.roa
File: g44wD4exlc1l3mqvr27NiUmB6UU.roa (raw, json)
Hash identifier: O/hdodBPqzpKMCb1MTByZVkRCwAsxnmyTBvaXtpscq8=
Subject key identifier: 83:8E:30:0F:87:B1:95:CD:65:DE:6A:AF:AF:6E:CD:89:49:81:E9:45
Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Certificate serial: 019420D5FE794D221A880F9CE01DE5B2774A
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/g44wD4exlc1l3mqvr27NiUmB6UU.roa
Signing time: Wed 01 Jan 2025 07:48:02 +0000
ROA not before: Wed 01 Jan 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48025
IP address blocks: 2001:678:c98::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fe:79:4d:22:1a:88:0f:9c:e0:1d:e5:b2:77:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Validity
Not Before: Jan 1 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=838e300f87b195cd65de6aafaf6ecd894981e945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:ae:b5:af:c6:ed:f0:4a:28:35:d4:f6:35:
cc:20:ad:cf:e5:66:74:90:19:b2:e3:7d:47:f4:00:
0f:39:f4:c1:8b:28:21:56:76:9b:7c:aa:18:bd:34:
c9:1f:1e:e8:15:1b:6b:98:70:b1:04:0e:47:e8:16:
4d:92:1f:72:27:59:c7:18:ac:ef:ea:f8:29:3b:fb:
0d:34:ca:fb:ba:9f:ee:24:e8:0e:58:e8:e1:f0:ee:
84:10:0a:b3:41:3b:16:c0:5a:b6:8f:86:ab:b3:17:
49:f8:4f:4b:8d:e9:d0:56:0b:3f:4a:e9:e1:20:22:
49:fe:8e:28:86:d3:38:43:6d:5b:c0:76:1d:58:df:
65:43:e8:56:f2:fa:8c:b6:d6:68:c3:04:cd:ec:75:
1d:04:ec:0b:da:08:15:dd:68:a4:d3:7d:23:5d:98:
21:1f:86:0f:eb:9e:56:85:da:d2:40:1e:9f:02:9c:
77:e9:28:c0:d3:04:96:78:d0:be:5b:1d:4a:2e:4f:
56:4c:51:6b:d6:ea:6e:9c:89:93:28:34:b7:2b:ff:
ed:73:80:93:24:2d:7d:60:4b:36:e9:fb:c2:0b:27:
7c:03:90:5f:74:0d:f6:60:77:e9:42:27:7e:7e:3e:
96:d5:e7:d6:21:8a:4f:9b:7e:8f:36:b3:1d:9d:eb:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8E:30:0F:87:B1:95:CD:65:DE:6A:AF:AF:6E:CD:89:49:81:E9:45
X509v3 Authority Key Identifier:
keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/g44wD4exlc1l3mqvr27NiUmB6UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c98::/48
Signature Algorithm: sha256WithRSAEncryption
54:64:af:c3:d6:42:cd:20:83:68:4a:20:68:05:eb:5c:7c:c0:
ba:e6:f2:84:65:bf:a9:95:36:4a:5d:c2:3d:45:f3:36:05:8c:
35:a1:73:16:59:46:60:f2:55:44:f6:a7:d2:34:07:5b:d5:22:
00:5e:56:98:c2:4b:89:b0:4f:c1:98:7c:49:69:a0:8e:92:d3:
9c:83:8d:ae:cf:a8:5e:42:1b:bd:e6:b3:cb:64:5b:e1:cf:3e:
53:5c:b6:4c:d9:b7:c0:60:b8:af:63:29:ff:48:73:91:eb:f4:
23:22:55:2c:c6:69:bf:95:51:20:71:3d:5e:f5:31:b2:66:21:
e3:40:a6:08:04:12:ba:63:aa:b1:ea:f9:74:e3:c0:da:fc:15:
53:55:50:15:15:ef:fd:22:52:01:98:af:cd:a4:84:f8:b1:6e:
06:84:0d:6f:49:12:10:fd:1c:25:a2:34:c6:6a:5f:c5:e4:dd:
e3:46:be:0b:08:fa:8b:53:e1:64:d2:55:9f:f3:83:82:17:1b:
92:cc:e5:db:f4:90:92:0e:d1:e7:60:87:3f:d9:a9:37:9b:93:
d2:fb:77:8d:2b:0b:e0:93:03:91:a9:72:9d:09:b7:09:76:7c:
02:de:aa:fb:c8:71:6d:dc:5d:ae:bf:91:e8:fc:b3:e3:25:34:
fa:22:75:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:06 2025 by rpki-client