Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/aG5rAcUPlfAS33bppi3npjnJwhs.roa
File: aG5rAcUPlfAS33bppi3npjnJwhs.roa (raw, json)
Hash identifier: zJztqNoDduT6a/19sVXNq9OoLdpe05NzflFeIp+fVjM=
Subject key identifier: 68:6E:6B:01:C5:0F:95:F0:12:DF:76:E9:A6:2D:E7:A6:39:C9:C2:1B
Certificate issuer: /CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Certificate serial: 019424B341ACF46EEAF7319B8A1B8BA71C30
Authority key identifier: EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/aG5rAcUPlfAS33bppi3npjnJwhs.roa
Signing time: Thu 02 Jan 2025 01:48:35 +0000
ROA not before: Thu 02 Jan 2025 01:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201057
IP address blocks: 2a03:e581::/48 maxlen: 48
2a03:e581:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:41:ac:f4:6e:ea:f7:31:9b:8a:1b:8b:a7:1c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb612e1f6b4d83f8a5d552cf3b60edd23bfe9f4
Validity
Not Before: Jan 2 01:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=686e6b01c50f95f012df76e9a62de7a639c9c21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:e1:98:9e:98:4f:00:cf:0e:b1:6c:12:ec:
d0:0f:54:2d:5f:3e:57:12:51:19:e2:c8:b0:b0:59:
b9:3b:77:c0:e3:2f:e6:2b:6e:e3:93:36:30:f5:04:
69:1c:17:71:9f:d8:cd:c3:bc:ab:8d:e8:f8:49:ff:
be:17:9a:a4:00:22:b6:2c:c9:a3:0e:d0:e4:3c:c7:
d1:7f:90:43:24:c2:6f:84:43:b9:c6:51:a7:2e:32:
cb:1b:58:c7:99:42:43:42:31:80:43:6d:29:60:d6:
8b:80:4e:e3:90:9b:7e:4c:25:df:ed:b7:4b:78:e4:
f2:41:a8:82:14:1b:27:73:02:49:ab:e0:c9:b8:00:
60:c3:55:6d:58:84:6e:d2:79:d0:4b:fc:c9:1b:45:
4e:8f:3c:f1:ad:30:57:5e:83:a7:1a:0f:55:eb:03:
fa:3d:2e:df:c3:04:94:94:f2:f4:ed:25:4f:9b:cf:
ae:11:18:d4:b3:53:6b:1d:5a:05:cf:12:b4:57:5a:
5b:e3:e9:23:82:31:f8:de:47:c0:db:5e:95:ff:6f:
6d:73:e1:64:b1:96:54:db:0f:e3:c5:d7:94:7a:dd:
81:4e:cf:a8:31:eb:5d:80:b8:47:1b:77:8c:b1:12:
36:8e:19:71:d7:30:f9:11:61:1d:3b:60:3c:f2:c0:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6E:6B:01:C5:0F:95:F0:12:DF:76:E9:A6:2D:E7:A6:39:C9:C2:1B
X509v3 Authority Key Identifier:
keyid:EC:B6:12:E1:F6:B4:D8:3F:8A:5D:55:2C:F3:B6:0E:DD:23:BF:E9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LYS4fa02D-KXVUs87YO3SO_6fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/aG5rAcUPlfAS33bppi3npjnJwhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5cd884-79f5-483d-904a-96fe1911d0b3/1/7LYS4fa02D-KXVUs87YO3SO_6fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:e581::/48
2a03:e581:4::/48
Signature Algorithm: sha256WithRSAEncryption
6d:06:fd:ce:ef:2c:4a:73:1f:92:2f:60:4b:76:51:c2:56:4f:
2f:e1:ae:fd:38:83:7a:f9:a1:b4:16:e9:e1:57:0b:56:99:01:
90:49:9e:2e:b9:76:8d:91:2e:85:37:d4:2c:71:35:ad:6f:50:
92:40:bc:31:38:ee:d6:15:4c:86:0b:52:c2:37:9b:7c:26:97:
62:db:46:b8:11:ae:c8:df:ac:5b:48:8e:b2:53:05:2a:46:89:
38:ec:5b:0a:bd:7f:33:59:4e:37:c2:70:d4:fe:7c:38:75:0a:
33:52:8e:49:ad:53:3c:9b:c6:a4:51:d0:89:aa:2f:e7:8a:00:
48:b4:37:03:f4:19:fb:c1:59:02:7b:e0:ba:c3:b2:58:51:2e:
67:fe:9b:78:e3:73:30:31:67:a4:ae:f9:f9:77:5f:3d:04:4f:
3d:d0:52:8b:3a:8d:f5:e3:92:3c:bd:b8:19:9b:09:18:1c:bc:
38:21:b3:c9:a6:92:85:3b:b7:7a:c1:0f:2c:1e:87:e1:e4:c8:
d2:b3:bf:3c:b0:0e:84:69:cd:5b:b8:5e:f7:b3:52:a6:1a:a8:
d5:df:15:08:c2:30:35:06:ac:54:04:1b:cc:8c:b4:20:d1:a7:
bc:6b:0d:1d:33:05:42:37:df:a5:45:30:83:f8:70:42:e0:b2:
15:05:52:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:29:10 2025 by rpki-client