Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/fJSSSYyH6Ee1wixn2iid6CkKbD4.roa
File: fJSSSYyH6Ee1wixn2iid6CkKbD4.roa (raw, json)
Hash identifier: r5RuGMIc1UBm/9bI2dDIxiQn3TUA1FzP7ZQdx2BDTw8=
Subject key identifier: 7C:94:92:49:8C:87:E8:47:B5:C2:2C:67:DA:28:9D:E8:29:0A:6C:3E
Certificate issuer: /CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Certificate serial: 01948E8805525E3FD27F406827CA53728166
Authority key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/fJSSSYyH6Ee1wixn2iid6CkKbD4.roa
Signing time: Wed 22 Jan 2025 15:01:06 +0000
ROA not before: Wed 22 Jan 2025 15:01:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395403
IP address blocks: 2a00:edc0:1007::/48 maxlen: 48
2a00:edc0:7ffe::/48 maxlen: 48
2a00:edc0:7fff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:88:05:52:5e:3f:d2:7f:40:68:27:ca:53:72:81:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Validity
Not Before: Jan 22 15:01:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c9492498c87e847b5c22c67da289de8290a6c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:c6:71:46:20:11:fd:d4:1c:b9:43:2b:1e:
69:80:88:f6:ed:60:85:a8:20:6f:1a:1b:4e:43:89:
d1:b5:36:6c:07:05:27:70:30:d0:b5:df:76:e9:d9:
ea:2e:41:3e:6d:99:fb:da:90:82:0f:cd:70:8d:ff:
3a:51:0f:96:c3:ac:ce:75:29:f3:85:c9:a6:1d:bd:
fb:b6:d7:eb:2b:2a:02:6e:c1:fe:17:23:49:e9:86:
a6:0f:f7:6d:3e:c2:f0:c8:e8:ac:c1:0c:7e:c7:3d:
98:c3:92:6c:d4:c5:08:c9:cf:de:47:5b:19:d8:8e:
91:a7:08:71:3a:08:ae:30:52:09:35:ee:47:38:9a:
43:17:95:aa:b2:8d:9a:33:b2:cc:15:08:55:1f:92:
74:86:e2:f3:b4:4d:ea:de:2f:88:a3:c4:40:6d:7b:
24:78:35:47:07:32:8e:fe:8a:24:a9:c3:a4:7f:88:
28:85:c0:20:ef:1a:a6:5d:ac:aa:c1:11:ff:a8:62:
00:b3:51:0b:8f:87:39:4d:36:43:fc:ef:ba:74:70:
c7:20:a8:32:c8:9d:98:82:52:30:cf:c3:ff:de:76:
39:22:35:0b:11:3a:0f:80:32:eb:3f:6e:67:4f:99:
4b:4b:ed:17:43:2d:0c:7d:96:49:8f:63:2e:f3:6d:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:94:92:49:8C:87:E8:47:B5:C2:2C:67:DA:28:9D:E8:29:0A:6C:3E
X509v3 Authority Key Identifier:
keyid:92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/fJSSSYyH6Ee1wixn2iid6CkKbD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:edc0:1007::/48
2a00:edc0:7ffe::/47
Signature Algorithm: sha256WithRSAEncryption
88:d4:20:9d:ab:14:6f:c4:13:a8:2e:ff:b2:64:33:16:e4:13:
c5:a5:6c:73:5f:0c:b2:89:65:cb:1d:7e:97:0e:66:db:75:8d:
21:b0:ee:5e:04:9f:c4:b5:21:b1:d1:80:49:5a:76:8b:bf:a4:
8c:af:8a:db:b1:61:7b:a6:03:67:27:af:d4:4d:11:5a:99:03:
41:fe:2e:2f:0f:5a:83:8a:61:97:97:b6:54:dc:81:ed:73:c3:
49:e8:d6:d0:6b:7f:3d:4c:94:e2:ba:ce:6f:57:36:38:2c:3f:
6c:b0:db:29:95:8a:84:30:c3:fb:c2:fa:24:ba:23:d0:8d:88:
a4:04:61:f5:b0:32:84:17:09:78:53:dc:f8:f1:ea:73:28:62:
9f:33:5b:85:bb:9c:e5:d8:d2:ff:2d:e9:7c:0b:73:07:b1:0f:
19:be:20:0f:49:f9:6a:cf:bf:e4:c9:ab:ad:e0:45:df:b6:6b:
7b:2c:60:99:43:b4:b9:68:f4:7a:98:20:25:6b:9a:d7:50:52:
7e:32:86:25:20:ca:b5:12:a2:f6:7b:1d:18:f9:37:4e:cd:d8:
ce:25:9f:be:21:3d:5a:3e:8a:d7:3c:8b:d6:f3:ce:4e:0c:29:
80:ce:bf:81:06:b8:26:f8:90:d3:d3:9e:f3:e9:7d:b9:b0:80:
be:18:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:20 2025 by rpki-client