Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/4NwBF8TPrVxf78B6fgE595ZYIcY.roa
File: 4NwBF8TPrVxf78B6fgE595ZYIcY.roa (raw, json)
Hash identifier: UcGEL17wXUOTJDNf0EgeFxFCcRvQ35cDmPksItdA2FU=
Subject key identifier: E0:DC:01:17:C4:CF:AD:5C:5F:EF:C0:7A:7E:01:39:F7:96:58:21:C6
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0194A37B2ED2DFBF02FCB5BD929AEEC44558
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/4NwBF8TPrVxf78B6fgE595ZYIcY.roa
Signing time: Sun 26 Jan 2025 16:39:06 +0000
ROA not before: Sun 26 Jan 2025 16:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198926
IP address blocks: 2a05:9080:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a3:7b:2e:d2:df:bf:02:fc:b5:bd:92:9a:ee:c4:45:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jan 26 16:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0dc0117c4cfad5c5fefc07a7e0139f7965821c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:97:36:bf:d5:a3:8b:cf:22:d6:26:43:1e:23:
27:32:94:db:4c:f7:74:0a:bf:f4:79:42:9b:f1:25:
97:43:1f:c1:04:78:f4:6b:8e:d0:c2:2a:63:bd:b2:
04:4c:45:9f:bb:08:02:54:08:0b:65:70:df:8f:7b:
c3:b8:e8:df:ad:70:5d:ba:8f:7b:1e:1a:02:e2:39:
e5:53:d1:d1:4d:7b:3f:c0:4b:c3:4d:4d:55:ce:b1:
e4:64:60:cc:67:a4:e0:fd:fd:98:52:c4:85:21:da:
7e:b4:67:71:1f:51:1e:1d:64:fc:93:e7:68:88:1d:
08:12:4b:66:27:97:a4:73:96:92:31:ee:76:c4:01:
a7:10:c7:eb:75:c4:c7:48:04:6a:9c:9d:e9:6d:6d:
59:ad:5f:6c:6f:5c:3d:07:e5:28:8c:92:78:b0:a9:
86:92:81:21:c5:9c:c6:1a:97:fe:b0:e2:1f:8d:f6:
8e:6d:34:1a:cb:6a:7d:dd:e3:15:9d:e9:c4:93:c2:
72:a3:d9:d7:4b:3f:55:8a:ea:04:b7:e9:45:b3:8c:
a8:30:16:a3:8f:39:f2:94:89:3e:06:3b:5c:da:af:
ea:dc:26:97:fd:97:aa:12:4c:a1:60:54:84:52:17:
43:6f:e1:29:a0:ea:1f:ec:92:5c:b9:c0:af:c4:a8:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DC:01:17:C4:CF:AD:5C:5F:EF:C0:7A:7E:01:39:F7:96:58:21:C6
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/4NwBF8TPrVxf78B6fgE595ZYIcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:3::/48
Signature Algorithm: sha256WithRSAEncryption
90:de:e3:9b:46:84:fe:fb:e5:15:75:9b:04:0e:c9:40:f8:44:
05:f1:8b:a8:45:b1:13:57:0a:51:cd:02:33:e6:c4:2f:24:2d:
df:91:df:4a:86:9d:2d:08:83:31:82:92:19:d6:cc:c2:c1:cd:
84:61:ba:79:c1:5b:ff:7a:c2:b1:d4:76:c6:4d:df:f6:17:87:
a0:ef:cd:ce:d2:dc:90:e1:16:b2:62:02:1d:f6:1c:5f:26:6d:
9e:86:d3:54:16:85:bf:cf:aa:82:33:72:c5:d3:a4:a5:be:03:
18:5a:79:94:3c:4b:39:17:20:aa:16:9c:e3:f3:1f:ce:cd:9f:
42:a2:58:8f:ce:b3:60:bd:a1:d1:e4:f3:c5:7a:49:ba:69:f7:
cf:8f:a9:7e:55:5f:01:cf:d0:7a:7d:88:46:6d:5b:45:c1:b0:
9c:ab:3c:09:28:da:3e:ed:1b:1d:c1:b8:e6:44:fd:bf:b1:ed:
55:39:e0:05:b0:52:74:f7:93:ba:b9:20:b4:bf:c5:24:df:8f:
6f:2a:80:59:e7:73:0b:3e:3b:5c:ea:bd:54:e2:c4:27:50:8b:
2e:e9:52:6a:39:7d:53:58:aa:67:a8:71:23:6a:2e:75:46:f2:
df:8b:df:17:56:0f:e5:47:92:04:a9:b6:62:f7:0d:0e:5c:62:
39:a2:17:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:31:16 2025 by rpki-client