Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/It2aztuCJpeCNkV6Tt-_j3Dmgq4.roa
File: It2aztuCJpeCNkV6Tt-_j3Dmgq4.roa (raw, json)
Hash identifier: Q0aijwyK+3Lz7RSMiUkDkjCn2TiHYUXUBlgZJF8YMiU=
Subject key identifier: 22:DD:9A:CE:DB:82:26:97:82:36:45:7A:4E:DF:BF:8F:70:E6:82:AE
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0194BD84387F10B72594B7D6814B6FC548F3
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/It2aztuCJpeCNkV6Tt-_j3Dmgq4.roa
Signing time: Fri 31 Jan 2025 17:59:06 +0000
ROA not before: Fri 31 Jan 2025 17:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29182
IP address blocks: 2a0f:6fc6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:84:38:7f:10:b7:25:94:b7:d6:81:4b:6f:c5:48:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 31 17:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22dd9acedb8226978236457a4edfbf8f70e682ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:1b:69:83:a0:92:6a:c9:ad:70:60:87:0e:
b5:81:d2:89:20:fc:fd:9c:7f:eb:ab:c5:df:64:ed:
08:45:cd:96:88:df:96:4c:ae:51:b9:d5:29:a7:c1:
b5:a8:cd:c5:90:02:c0:9a:b1:f9:66:26:76:88:0f:
87:ee:5c:c9:1c:5d:8b:09:58:0f:f3:4a:26:d3:f6:
aa:48:c5:a8:71:f1:68:ca:01:27:ea:74:8e:5e:e2:
ca:21:e1:f5:d6:27:f9:c6:98:58:25:09:e7:2d:33:
5d:7e:0f:7d:ad:b3:08:bd:c3:4b:63:80:b0:f1:a0:
cf:ce:df:f3:f3:f9:ae:9d:cf:2a:3c:4d:92:69:5b:
88:f9:db:55:4a:12:29:60:1f:2a:84:34:31:15:f0:
91:d4:57:88:79:4b:a2:0b:d3:c3:e7:32:19:10:2b:
28:53:b7:53:6b:3e:f6:db:97:ac:e3:95:19:2c:80:
66:22:a8:b0:d1:f7:d6:fb:14:bd:33:ee:f2:12:ca:
25:82:f5:23:93:73:5c:77:84:6c:b3:03:b0:84:fa:
b2:d2:20:0c:ce:af:3e:ae:8b:88:79:01:fd:16:0d:
bd:17:ae:57:da:b1:bc:21:1a:e0:73:f4:d1:13:48:
12:8d:dd:38:2b:d1:54:99:17:57:a8:d1:23:8b:72:
72:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DD:9A:CE:DB:82:26:97:82:36:45:7A:4E:DF:BF:8F:70:E6:82:AE
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/It2aztuCJpeCNkV6Tt-_j3Dmgq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6fc6::/32
Signature Algorithm: sha256WithRSAEncryption
54:08:42:ec:40:b6:81:98:37:fb:5f:a4:c3:d9:0f:50:63:a8:
26:bf:a0:79:d2:1b:09:1d:f3:64:86:c3:57:fc:91:df:87:22:
73:a0:18:e8:05:fa:55:a4:3c:dd:6a:85:e7:c7:08:6e:77:a6:
73:ed:16:3f:15:7b:03:04:bc:d3:75:1c:a2:bd:f8:47:80:17:
fb:8f:de:35:d6:95:25:ac:2b:5e:82:fc:98:f2:b7:fe:a7:a1:
93:58:f9:e6:c6:cb:13:e8:ea:0b:bc:f4:d0:42:63:15:ec:fc:
63:bb:8b:f1:77:7e:24:f1:91:42:94:10:b9:b2:0b:5f:96:da:
29:7b:2a:a3:cd:b4:91:9f:ac:56:28:1b:72:f3:bc:a0:c7:75:
ef:6d:e3:07:ab:87:91:7b:61:d9:7d:8c:ee:e9:9d:ed:5e:a7:
fa:a8:1d:86:ee:e1:60:1a:d4:82:9f:34:49:84:22:6c:02:7b:
5f:e3:de:52:54:5f:98:7c:a3:86:7b:7d:91:fc:8c:f0:83:6d:
a6:36:d1:88:ed:06:6d:02:79:d4:3b:8f:bb:7e:95:00:f6:cf:
4d:5f:b1:b6:86:0b:82:bd:b7:13:33:15:84:56:f2:9d:73:e8:
36:79:ae:c5:dd:b1:56:57:d8:52:1d:3a:40:47:d2:96:a9:f2:
27:b6:68:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:27:17 2025 by rpki-client