Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/20TV3G_zqSwWD9jn85G0oHSYUWo.roa
File: 20TV3G_zqSwWD9jn85G0oHSYUWo.roa (raw, json)
Hash identifier: ln3cpOzlT6bLA9htFrfQ1ndKs7h6RkK+G1oPsD3H/Og=
Subject key identifier: DB:44:D5:DC:6F:F3:A9:2C:16:0F:D8:E7:F3:91:B4:A0:74:98:51:6A
Certificate issuer: /CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Certificate serial: 019422FB10BDF5FF68C7F33777A7687A9A7F
Authority key identifier: 12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/20TV3G_zqSwWD9jn85G0oHSYUWo.roa
Signing time: Wed 01 Jan 2025 17:47:46 +0000
ROA not before: Wed 01 Jan 2025 17:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215351
IP address blocks: 2001:678:428::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:10:bd:f5:ff:68:c7:f3:37:77:a7:68:7a:9a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Validity
Not Before: Jan 1 17:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db44d5dc6ff3a92c160fd8e7f391b4a07498516a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ec:49:8f:25:47:0a:40:c4:22:75:7b:9b:2e:
dd:11:70:4b:27:bd:03:36:08:d9:6c:11:76:49:27:
6b:1c:fe:0b:85:b9:79:64:cb:17:6b:81:b0:4b:38:
94:eb:f6:ce:23:e2:94:b8:53:5f:db:23:48:97:64:
ef:79:b9:f5:60:9a:9d:a6:c8:4e:38:5b:21:38:06:
2a:65:0d:4d:71:35:2e:ba:cf:b2:84:f0:99:9a:87:
5d:04:ed:7b:7c:61:e6:51:33:42:5f:de:af:ed:8f:
63:4e:77:5e:1b:ee:f1:09:71:b0:62:5b:03:ea:af:
3b:4c:f1:e9:74:e1:06:b5:27:8d:60:f3:c4:12:c5:
9f:9e:1d:52:68:1f:ad:64:2d:75:fa:3c:e1:3e:3f:
cd:84:9c:73:fd:19:93:cb:18:e5:07:d9:7f:b2:16:
cb:ac:0a:b7:a1:e1:a3:f0:8a:a7:50:8a:2b:f8:a7:
7b:32:8a:e8:d1:00:8e:f4:39:92:0b:e7:06:3e:51:
d7:a1:74:14:03:7d:80:3d:79:2e:45:c7:59:56:6a:
a9:23:58:70:75:98:a9:19:e3:15:bd:c5:a1:0a:db:
7b:9a:c7:95:97:dd:7f:df:70:09:18:52:3d:0b:31:
17:e2:d3:c8:59:a1:76:07:fb:82:9b:e7:6a:1a:eb:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:44:D5:DC:6F:F3:A9:2C:16:0F:D8:E7:F3:91:B4:A0:74:98:51:6A
X509v3 Authority Key Identifier:
keyid:12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/20TV3G_zqSwWD9jn85G0oHSYUWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:428::/48
Signature Algorithm: sha256WithRSAEncryption
44:7d:be:e7:55:9f:63:3f:3f:ab:d9:2c:6d:7a:5f:7b:1b:27:
b3:14:bc:b7:2d:0a:2f:9a:81:5e:80:81:1f:f2:de:7e:67:c4:
5c:3f:66:d0:6f:fd:93:89:2e:d6:14:21:fb:82:25:93:61:f9:
52:94:2a:48:9e:d1:40:9f:cb:b3:01:89:5b:04:40:86:7a:10:
ae:8d:dd:6b:aa:45:08:e8:bc:a7:b1:81:17:0f:99:b3:7d:d9:
cd:85:d1:67:4a:fa:b2:57:6c:00:63:3e:38:64:1f:16:1a:52:
2a:d9:e5:28:ca:9b:6f:7c:e4:cf:2f:a3:c4:75:18:55:78:6c:
ea:9e:5f:68:24:50:12:b8:62:ae:48:b0:0f:96:32:be:d9:85:
48:0b:4b:e8:3c:3a:d9:93:8e:af:08:47:b9:21:60:a9:ee:12:
6d:bd:c5:5c:16:f4:16:58:e0:e3:86:a7:db:67:37:c5:d2:39:
bf:2a:dd:1f:b4:a1:9c:c3:d9:4e:6f:1e:62:e2:03:85:ec:99:
74:bf:b2:c5:44:d1:96:f8:27:d1:2a:dd:05:09:bc:36:66:0a:
88:63:06:fc:9f:40:dd:c7:f7:ff:21:e9:59:70:5a:61:35:c2:
39:15:83:20:0f:03:47:de:e1:66:b5:94:e6:aa:ae:bc:01:63:
c0:13:09:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:56 2025 by rpki-client