Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/cIRs34GrM17DP76r2K4VKlnq1i8.roa
File: cIRs34GrM17DP76r2K4VKlnq1i8.roa (raw, json)
Hash identifier: gvtYS4ycN0WNeVX6nyckWypk1ijeZALWriynsiEgZyQ=
Subject key identifier: 70:84:6C:DF:81:AB:33:5E:C3:3F:BE:AB:D8:AE:15:2A:59:EA:D6:2F
Certificate issuer: /CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Certificate serial: 019424B32FAE7EE441255AC04094D54C8813
Authority key identifier: C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/cIRs34GrM17DP76r2K4VKlnq1i8.roa
Signing time: Thu 02 Jan 2025 01:48:30 +0000
ROA not before: Thu 02 Jan 2025 01:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38937
IP address blocks: 2a03:6100:6100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:2f:ae:7e:e4:41:25:5a:c0:40:94:d5:4c:88:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Validity
Not Before: Jan 2 01:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70846cdf81ab335ec33fbeabd8ae152a59ead62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a3:98:26:44:c2:c2:6c:f5:81:97:61:01:60:
7c:eb:44:bf:b8:02:ae:b1:2c:50:c8:23:12:74:86:
ec:a3:10:3e:cc:36:eb:81:4d:26:95:a5:fb:d6:3a:
36:df:b5:eb:a9:31:8f:e6:9a:74:6f:ed:62:72:8f:
82:89:ad:e4:60:92:73:e2:e0:2f:0a:61:38:39:ad:
6e:ee:79:e2:89:55:a2:b1:88:61:48:2a:e7:d9:ad:
1c:43:eb:d8:6f:02:15:e0:dd:93:49:38:2d:8b:db:
03:29:f9:5a:c6:6e:34:18:4f:df:a5:fc:0f:aa:8a:
d1:54:b2:25:b3:59:80:51:d8:35:ff:1c:8b:91:5a:
86:20:ae:fa:cc:c5:ba:47:7f:6a:50:da:35:4c:bb:
41:98:6c:e9:65:44:fa:bf:57:8e:e5:cd:eb:9b:b8:
6b:ec:d5:47:31:12:b8:9d:6c:72:71:56:ae:6e:02:
d8:5b:ef:f1:96:30:38:bd:bf:cb:4e:06:59:a4:96:
ef:ba:80:c7:8c:e3:c8:59:af:1c:65:db:6b:84:cd:
4a:47:e4:3a:56:fb:2d:62:64:1c:4f:82:18:5e:a8:
90:34:31:e5:65:54:b3:de:8c:0e:26:d0:57:c0:5a:
3d:ca:ba:74:f1:5e:86:d1:6a:b8:3d:40:e9:9b:40:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:84:6C:DF:81:AB:33:5E:C3:3F:BE:AB:D8:AE:15:2A:59:EA:D6:2F
X509v3 Authority Key Identifier:
keyid:C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/cIRs34GrM17DP76r2K4VKlnq1i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:6100:6100::/48
Signature Algorithm: sha256WithRSAEncryption
11:b1:40:3f:ea:a2:f5:28:67:49:e6:a3:07:8e:0e:88:7c:41:
97:ae:77:90:6f:ec:5a:aa:43:9e:93:fa:a6:90:34:f7:4e:b9:
e1:97:03:83:c3:30:e4:20:de:f9:24:7e:48:f2:57:b6:0a:79:
5e:96:82:0b:e0:f6:78:d7:ba:c0:c2:f9:7b:5c:1b:86:6f:8a:
ad:81:84:22:70:81:c2:07:e6:0a:dc:2d:b3:ed:72:5c:5e:7f:
2d:b2:0a:64:26:34:65:e2:84:f8:bb:75:37:55:06:9d:aa:7e:
e0:75:01:de:96:6d:b8:26:fc:24:9e:2a:3d:ec:6d:aa:31:2a:
cf:ce:28:95:28:44:9e:75:f2:31:83:77:50:7c:8f:fd:fd:af:
cf:90:b8:da:70:4e:e6:80:82:96:51:0c:22:66:4e:bb:f3:b9:
9a:fd:7a:89:bf:d3:79:e9:20:7d:f9:e1:65:b6:67:72:36:0b:
4a:d5:32:45:96:24:5a:61:a7:b0:a9:84:c6:b3:90:27:af:31:
6b:76:39:64:4b:47:d6:d5:15:6e:f9:42:ce:eb:d3:e6:00:82:
83:3a:d5:29:88:0a:94:8c:96:80:56:6b:4d:a4:bc:97:6c:47:
8c:b1:94:31:e9:de:cd:66:40:be:f8:8f:47:af:3a:73:e5:4a:
a5:a1:30:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:57:03 2025 by rpki-client