Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/174WdkpYr9777ZFQazXJ-iMRM-8.roa
File: 174WdkpYr9777ZFQazXJ-iMRM-8.roa (raw, json)
Hash identifier: /zP6InCFbWaOP8FrHR5Yt4Nt/uR42z5t9/lR4P3NjaA=
Subject key identifier: D7:BE:16:76:4A:58:AF:DE:FB:ED:91:50:6B:35:C9:FA:23:11:33:EF
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 019420D644852A5ADEF780808826C776D90F
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/174WdkpYr9777ZFQazXJ-iMRM-8.roa
Signing time: Wed 01 Jan 2025 07:48:20 +0000
ROA not before: Wed 01 Jan 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206059
IP address blocks: 2a0e:3780:8150::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:44:85:2a:5a:de:f7:80:80:88:26:c7:76:d9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7be16764a58afdefbed91506b35c9fa231133ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:b9:41:c6:35:3b:cc:49:a8:df:53:ac:e1:
f1:ba:12:af:e4:93:40:09:98:dc:4a:5b:4f:c8:f9:
c1:4f:0d:7a:d9:fa:03:7d:6c:57:46:b3:5f:51:d2:
b4:dd:5a:53:d7:c8:fa:94:ec:ab:ad:35:31:16:bf:
c7:02:8c:a5:eb:99:8e:98:ec:7d:c5:3a:e9:ac:15:
8b:75:1e:fc:08:ba:b3:71:e3:52:7f:de:90:bb:da:
5c:21:73:5e:08:6f:bf:22:08:42:55:d4:b7:fd:ab:
43:60:1e:11:26:bd:ca:28:46:65:6c:39:35:7a:4e:
a4:b7:ab:14:d9:ac:cb:bb:32:40:01:c5:2d:9b:d7:
0a:22:6a:27:f9:bf:9d:00:5a:6c:18:ac:ac:f5:e8:
c8:7a:da:96:93:e8:00:38:6e:7d:a4:5e:66:39:f7:
aa:70:0e:f6:d9:ed:b6:0a:c2:5e:97:2c:f0:66:a7:
65:85:d1:41:fa:eb:1f:f8:25:15:c9:a3:64:f7:ed:
c3:10:a7:29:8b:57:14:fa:64:b4:f0:93:db:59:ec:
9a:38:e6:a0:61:a3:07:9e:19:d7:49:2f:95:5c:17:
d7:df:06:e8:a7:7c:7c:81:f3:b8:2a:89:fa:2d:ac:
e4:05:b3:41:4a:3e:ab:22:85:74:e6:10:bd:e7:79:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BE:16:76:4A:58:AF:DE:FB:ED:91:50:6B:35:C9:FA:23:11:33:EF
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/174WdkpYr9777ZFQazXJ-iMRM-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3780:8150::/48
Signature Algorithm: sha256WithRSAEncryption
7d:02:1d:3f:f7:c2:d6:09:29:f3:fb:72:35:c5:00:4d:1a:33:
a2:37:86:da:dc:a6:31:e8:2d:4e:2c:72:f3:36:fe:9c:eb:cc:
3e:56:c6:64:07:23:b4:6f:28:10:f5:91:d0:6c:13:f9:f7:1a:
cc:75:9b:ed:af:4b:41:2f:28:23:14:09:af:3c:d5:d4:0e:fb:
11:67:b8:50:0f:ec:99:a1:64:c5:d7:d6:da:1f:8f:b4:89:e1:
6c:44:42:89:0b:11:c3:91:0d:e1:63:6e:a3:9b:86:65:b8:b9:
56:4f:56:56:eb:e4:2b:26:4e:0d:da:c6:77:88:f3:17:20:a0:
38:e8:bf:e1:c1:ef:37:a6:fe:d8:c2:cc:0a:a9:98:fa:44:97:
cf:a4:f3:02:7c:85:54:de:1e:17:d8:13:c5:5c:83:7e:65:63:
9e:de:9c:58:d0:0a:7d:1e:29:f7:50:4b:6b:bb:ec:5e:e4:38:
d5:bd:51:d3:22:81:e7:60:8f:85:1d:24:5b:5b:e7:26:5b:bf:
81:d8:12:2b:22:dd:d5:72:69:c0:a2:d6:24:5a:f3:7c:92:3b:
bd:5b:ce:2e:11:4f:17:52:30:a4:85:31:c8:e1:73:2f:71:d1:
c1:a8:22:08:f4:72:01:07:0d:6b:2e:8c:97:37:ca:11:b6:68:
fe:e9:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:43 2025 by rpki-client