Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/J1CKtsXx9r_LHHrlYsJGTJF509U.roa
File: J1CKtsXx9r_LHHrlYsJGTJF509U.roa (raw, json)
Hash identifier: Wy6xl+FAMDx5u89yFxnteVYqnAsEeBLLKMZFfJdUW6I=
Subject key identifier: 27:50:8A:B6:C5:F1:F6:BF:CB:1C:7A:E5:62:C2:46:4C:91:79:D3:D5
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 019425FDC44146DFCF2852547C9ECD8B24D1
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/J1CKtsXx9r_LHHrlYsJGTJF509U.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12998
IP address blocks: 2a0a:2c0:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c4:41:46:df:cf:28:52:54:7c:9e:cd:8b:24:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27508ab6c5f1f6bfcb1c7ae562c2464c9179d3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:09:8f:32:e2:23:b1:7b:f6:89:7a:b8:44:
2c:cb:db:3a:6b:56:51:e4:70:c3:d3:65:05:f4:ea:
4d:53:c7:b4:ae:a0:67:d1:3c:47:2d:4b:23:1c:b9:
63:38:99:6a:6f:be:17:4e:84:0c:bc:be:66:37:36:
95:a9:54:1a:b5:39:89:7e:26:a6:f3:3a:14:5e:b7:
c6:80:09:4b:5e:95:dc:53:76:0d:b8:e1:1c:91:08:
2f:b5:0b:6d:a0:14:54:95:b2:ee:e9:4f:c1:5d:b6:
e2:29:c9:5e:6f:9f:9d:60:0a:0b:58:b6:12:b5:f3:
03:11:6b:1d:5b:3a:3b:d4:84:29:42:98:8f:16:85:
11:6d:f6:c2:e7:60:a2:67:11:9c:a7:b6:a4:7b:5c:
e8:f6:d6:2e:0f:1b:18:ab:80:ff:24:f8:ef:f8:b4:
da:32:33:58:86:67:20:2d:41:a8:38:ea:e9:52:47:
1d:39:20:1b:8c:55:6b:a7:45:ae:62:84:38:36:e7:
4a:be:d5:81:8b:8e:43:55:80:3c:fe:86:a4:15:11:
af:a5:8e:bc:a1:05:4a:29:b6:b6:ad:6d:ee:5d:6e:
51:56:a8:b3:a0:32:30:53:2a:1d:4c:ef:fb:13:a0:
9d:b9:42:cf:d8:26:ed:e4:6d:68:64:23:a9:36:75:
cb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:50:8A:B6:C5:F1:F6:BF:CB:1C:7A:E5:62:C2:46:4C:91:79:D3:D5
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/J1CKtsXx9r_LHHrlYsJGTJF509U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2c0:5::/48
Signature Algorithm: sha256WithRSAEncryption
60:3b:e0:90:59:a4:63:3a:17:c5:0f:01:b2:22:e3:e4:4e:d4:
e2:eb:da:a8:6b:68:e3:b1:e5:d1:3a:81:7a:78:70:c4:8c:36:
57:bf:08:08:84:1c:07:45:6b:be:0b:47:b8:5a:f1:18:4c:2f:
1f:2c:35:30:61:ca:df:df:f3:16:0c:1a:37:44:f6:b6:bc:33:
33:72:25:8a:f0:66:6f:ce:7e:49:d3:ab:f3:a2:78:f7:e1:bd:
0f:67:37:5f:61:09:5c:20:96:b8:3f:d5:93:20:85:f2:7c:79:
b6:f3:f6:fc:cf:64:f8:e9:cc:66:5f:b4:08:12:da:da:7c:8f:
52:61:a5:57:8b:46:fb:6a:20:9f:57:dd:d6:36:da:d7:73:a9:
d3:9e:9a:71:c5:b4:ad:b6:13:be:bd:89:9f:38:96:bb:68:0e:
b6:e2:16:60:d4:5b:b2:f0:e7:ea:5c:c7:77:ce:c5:77:08:c1:
d6:ae:fd:cb:e3:80:ae:8c:4c:c2:d3:9a:ca:3e:4a:e8:40:14:
1a:45:22:b2:fa:3d:f4:47:68:dc:86:bc:cd:23:e8:80:1e:67:
13:84:50:a2:d7:a5:1d:2b:07:c1:e8:03:c0:2e:1e:99:f5:67:
1b:74:37:b8:10:34:72:a2:4f:13:a7:83:2b:41:a7:fe:5b:91:
e2:6a:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:38 2025 by rpki-client