Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/d6njcJAvU5XAKbAJO-1stP-sI3c.roa
File: d6njcJAvU5XAKbAJO-1stP-sI3c.roa (raw, json)
Hash identifier: Qb51F1ZjPbC9UkzfA0CmXmJOGj7X7JIQuEBdAlbn5BM=
Subject key identifier: 77:A9:E3:70:90:2F:53:95:C0:29:B0:09:3B:ED:6C:B4:FF:AC:23:77
Certificate issuer: /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial: 01942368C976AB076687074D026EBCD04E16
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/d6njcJAvU5XAKbAJO-1stP-sI3c.roa
Signing time: Wed 01 Jan 2025 19:47:37 +0000
ROA not before: Wed 01 Jan 2025 19:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206128
IP address blocks: 2001:678:270::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:c9:76:ab:07:66:87:07:4d:02:6e:bc:d0:4e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Validity
Not Before: Jan 1 19:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77a9e370902f5395c029b0093bed6cb4ffac2377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:99:e7:f2:c3:ef:d2:ac:67:e7:e4:52:48:
44:27:2b:04:3d:49:84:3d:a9:31:ae:98:0f:55:bb:
17:f7:fd:db:b9:bf:2c:27:bf:e4:b2:d9:44:49:9b:
4d:b5:f4:62:5b:32:2c:f3:aa:da:83:d1:93:3b:a6:
e9:c8:62:a1:71:12:14:ad:bb:5e:74:ef:c7:fe:38:
1f:be:a3:dc:42:23:1f:fe:0e:ba:a8:74:23:3a:05:
04:10:bf:ef:8d:9a:c3:2a:53:d8:cd:17:30:7f:45:
70:10:42:d0:70:fe:dd:ee:9d:06:fd:06:99:36:46:
09:88:56:8c:86:b8:b1:59:f2:4d:5e:b0:59:18:9d:
91:dc:80:ce:da:44:47:e5:67:fc:29:9f:19:0b:40:
1c:83:6e:3b:92:d1:bf:19:63:e6:80:25:3d:01:0f:
da:2c:5c:b7:89:30:e1:a8:b9:74:f8:52:c1:41:2b:
da:74:16:6e:f5:ea:7b:49:40:00:39:9f:81:ad:8b:
a2:2f:59:17:96:a0:54:d7:b3:84:ad:13:a1:c8:f7:
56:e7:64:49:bf:bc:8b:5e:73:3a:12:c1:79:b1:a3:
6f:3f:9a:05:18:4a:7e:26:83:ad:da:e0:ec:00:99:
f3:40:ef:62:b8:0b:25:3d:c3:4c:bb:67:cd:6d:7c:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A9:E3:70:90:2F:53:95:C0:29:B0:09:3B:ED:6C:B4:FF:AC:23:77
X509v3 Authority Key Identifier:
keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/d6njcJAvU5XAKbAJO-1stP-sI3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:270::/48
Signature Algorithm: sha256WithRSAEncryption
40:a3:c0:a8:fa:22:e9:97:86:f8:1d:c3:89:35:24:c9:75:9e:
13:24:38:82:fc:55:a4:79:54:3c:e1:cc:fe:8f:ae:2b:0c:0e:
40:26:d3:94:91:8b:00:e7:13:74:d6:e2:3c:6b:c2:7c:b2:29:
5f:5d:de:ac:7a:ec:3c:b9:0c:6a:83:3b:ab:be:98:8f:e6:99:
24:d5:2f:b5:32:26:ff:2f:a3:78:95:89:07:ae:15:23:fa:89:
ef:36:18:ea:a2:a4:ee:f9:dd:88:4e:f9:a9:2c:f2:ce:e1:59:
4e:83:4e:0f:32:9c:e8:61:58:e0:2b:ae:1d:c9:ee:92:f5:4e:
d8:63:4f:94:b5:fa:27:a1:0a:32:3d:58:48:b3:7a:35:c8:a3:
1e:14:81:53:50:16:88:f2:9a:93:a8:7f:ea:0a:eb:11:ab:71:
55:0c:2d:5a:d7:2a:36:88:95:dc:56:d5:dc:ce:ed:e2:de:3b:
10:81:f3:63:ef:23:5b:1c:c2:e8:19:f7:e4:8d:24:75:c9:1c:
e0:7c:64:33:d3:cd:77:0f:74:f0:a1:d4:85:a1:ee:e4:88:cf:
58:3a:76:d0:5a:d5:ab:01:90:fc:44:eb:27:f5:32:07:c9:c2:
b7:cf:60:9b:80:57:43:53:1b:ca:22:f6:c6:36:a4:85:a1:73:
36:23:50:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:51 2025 by rpki-client