Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/aeMnlDwxWIXe9I15QP1ZQEW4dL8.roa
File: aeMnlDwxWIXe9I15QP1ZQEW4dL8.roa (raw, json)
Hash identifier: o539XDvH7v6Q1Bwgk0cJJENARzLE2fligJ+8v8cr/cU=
Subject key identifier: 69:E3:27:94:3C:31:58:85:DE:F4:8D:79:40:FD:59:40:45:B8:74:BF
Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial: 01941F8CA3707834F694515B07D9ECDD6E08
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/aeMnlDwxWIXe9I15QP1ZQEW4dL8.roa
Signing time: Wed 01 Jan 2025 01:48:18 +0000
ROA not before: Wed 01 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201612
IP address blocks: 2001:67c:10e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a3:70:78:34:f6:94:51:5b:07:d9:ec:dd:6e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69e327943c315885def48d7940fd594045b874bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:20:57:b3:9d:2c:a4:6e:8e:0a:5f:de:7f:
c4:e9:65:6b:7b:4a:17:6f:41:56:5c:5c:0f:32:1b:
9a:e6:1d:0a:82:ad:78:ad:48:26:01:09:9a:57:9b:
7f:ea:3f:60:ef:c0:34:d4:d5:7c:ae:8d:a8:c0:cf:
9a:9a:e8:8b:b6:df:24:f4:19:9d:70:d5:37:34:b2:
d6:88:3d:de:8d:5b:72:de:7a:d1:1e:45:0b:20:1d:
d3:86:fe:7e:37:61:31:ad:01:4a:39:7a:7a:da:d2:
1c:04:5f:20:f8:35:ce:17:44:b5:71:68:ae:6c:54:
66:5b:e9:83:74:5c:fb:2c:b1:36:d9:37:3f:7c:73:
04:c0:d4:3f:ea:89:06:af:d0:4c:ef:bf:0a:74:95:
09:69:18:34:8b:c0:ff:7e:2b:1c:18:e8:8c:bc:2a:
d6:4f:46:79:59:29:78:ee:8e:42:ca:60:f6:cb:1d:
e2:52:ed:68:7d:0f:ab:c9:b9:06:1c:c0:c9:bd:c4:
49:9a:12:3f:c1:94:7f:a8:6a:81:8d:f4:f8:7b:d0:
54:ff:ec:44:cb:d0:32:20:e3:0c:fc:a4:98:52:b3:
e2:df:57:92:5b:41:cb:34:35:75:9a:b5:f9:6c:9e:
a3:44:42:9e:d5:65:19:27:3e:43:a8:ec:a0:48:13:
dd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E3:27:94:3C:31:58:85:DE:F4:8D:79:40:FD:59:40:45:B8:74:BF
X509v3 Authority Key Identifier:
keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/aeMnlDwxWIXe9I15QP1ZQEW4dL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:10e0::/48
Signature Algorithm: sha256WithRSAEncryption
0c:93:a1:5f:bc:44:f8:92:35:da:e6:db:ce:bb:14:71:35:e4:
ce:98:90:ce:e2:4c:52:2f:e0:26:55:82:ee:04:9c:81:67:3b:
66:cb:85:50:22:2b:26:0b:4f:24:34:f8:05:1f:64:a6:1d:c7:
95:cd:08:ec:a1:b7:72:9b:13:c2:72:7e:b0:af:9e:52:dc:60:
ad:ba:e3:f7:43:18:20:d2:0d:50:fd:01:c2:4b:9e:ac:32:c1:
98:1b:99:58:a5:72:0c:b3:8b:4b:d4:5a:db:f3:80:06:8e:cc:
90:1a:16:cb:88:e3:1d:6e:27:43:0a:b2:98:62:56:ec:76:c5:
85:02:99:ba:b1:3b:0c:12:c4:71:a2:65:ae:f7:2e:1e:3c:14:
c2:9e:52:bb:94:81:3b:39:ee:01:26:e9:31:63:d5:b6:98:fc:
2d:46:e8:75:8a:0a:ea:f1:b9:31:da:cb:fd:67:c8:97:d0:b0:
8d:b2:63:5e:25:7f:88:84:9b:2a:9b:28:d8:cb:2a:c7:3b:02:
e6:38:da:52:ed:4e:bf:3f:75:34:0c:6b:8a:a7:a6:a3:8a:96:
27:78:1e:d2:66:a7:70:1b:2b:be:a0:34:11:1c:8d:0b:ad:d5:
85:5c:e1:3d:97:29:29:50:ca:be:ea:69:45:92:40:55:74:ad:
34:74:ad:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:19 2025 by rpki-client