Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/N6ILORbRZvbQFYCBBRtXEQJq4EE.roa
File: N6ILORbRZvbQFYCBBRtXEQJq4EE.roa (raw, json)
Hash identifier: mmnPcV9IaUAzNHOhWtx5CYix9aLEDcUiIi0yf9zddR8=
Subject key identifier: 37:A2:0B:39:16:D1:66:F6:D0:15:80:81:05:1B:57:11:02:6A:E0:41
Certificate issuer: /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial: 01941FFA0C9FB7C26A96C079440B20EB401B
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/N6ILORbRZvbQFYCBBRtXEQJq4EE.roa
Signing time: Wed 01 Jan 2025 03:47:48 +0000
ROA not before: Wed 01 Jan 2025 03:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43202
IP address blocks: 45.128.4.0/22 maxlen: 24
2a12:83c0::/32 maxlen: 32
2a12:83c1::/32 maxlen: 32
2a12:83c2::/32 maxlen: 32
2a12:83c3::/32 maxlen: 32
2a12:83c4::/32 maxlen: 32
2a12:83c5::/32 maxlen: 32
2a12:83c6::/32 maxlen: 32
2a12:83c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0c:9f:b7:c2:6a:96:c0:79:44:0b:20:eb:40:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Validity
Not Before: Jan 1 03:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37a20b3916d166f6d0158081051b5711026ae041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:ab:0c:83:d2:7f:07:39:5c:cf:8d:7a:e1:
31:80:ba:cc:7b:47:bb:79:10:ea:18:fe:1f:96:ec:
d2:c7:3c:c2:5d:85:e8:f8:83:4f:56:7b:0b:2a:e9:
98:3f:41:dd:b1:20:17:30:1d:68:65:cb:be:28:e0:
1a:71:a2:6d:b6:42:e3:75:df:27:35:12:01:18:1f:
3b:46:0d:df:7a:4e:76:81:a2:03:50:2b:cf:1c:ec:
91:04:c8:b7:a8:97:b3:4b:13:01:a0:d1:4c:8a:e6:
38:35:97:c0:fe:7b:b3:fd:e4:d1:71:ce:1e:12:8b:
a5:d2:65:9e:d5:6c:7c:3a:24:e9:2b:89:cf:ae:2e:
ed:33:a9:27:f2:ab:8a:35:17:47:fb:e5:f1:1d:7a:
82:42:0d:30:8b:01:23:53:15:93:dd:6c:5e:9c:bb:
88:2a:77:87:3a:a9:a3:24:d5:a8:10:91:16:1c:09:
ac:05:b1:4a:40:32:5c:37:63:36:55:7e:1a:3b:fa:
3e:2f:d9:cf:9a:f4:8f:9b:c2:be:b6:d2:33:c0:5c:
29:00:71:0b:89:1d:3d:d3:3e:79:0c:c1:09:17:49:
f6:67:6f:12:81:50:67:1c:58:7d:e5:40:9f:81:0e:
9d:b9:d4:e2:eb:04:d6:c1:e7:20:f6:d3:f9:9b:5e:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A2:0B:39:16:D1:66:F6:D0:15:80:81:05:1B:57:11:02:6A:E0:41
X509v3 Authority Key Identifier:
keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/N6ILORbRZvbQFYCBBRtXEQJq4EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.4.0/22
IPv6:
2a12:83c0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:ad:00:ab:ba:6b:09:12:ef:f4:31:53:60:1e:7d:e6:41:d9:
3a:ef:29:b0:08:bc:49:d9:ea:b2:69:38:54:11:fc:0c:cd:07:
c2:47:37:74:8b:09:f2:59:b0:82:d2:8e:d6:ff:01:ef:3f:66:
44:f3:a8:31:c9:57:8b:ae:3a:86:b4:c1:4e:5f:1b:0c:ea:15:
d2:31:f5:79:30:36:3c:7a:50:c3:52:ae:f4:20:f1:4c:3a:46:
2d:01:8d:3a:4b:4c:16:d6:c4:9c:ad:ae:08:a0:d6:a7:39:4e:
ef:0f:b6:a5:a4:bb:f1:7b:c2:4b:a2:03:7d:65:8c:46:f5:9e:
5a:7f:0e:04:c6:6a:1e:7e:7b:51:0b:14:e5:b3:fa:f4:89:72:
42:b1:71:05:76:3c:1c:88:ec:d4:ed:cd:71:1c:91:45:21:74:
56:d0:37:62:0c:ac:4c:1b:a8:e7:3a:2e:94:79:dc:77:29:55:
44:33:65:ae:12:2a:41:79:4e:28:40:a7:75:a7:d6:93:f8:81:
c2:f0:f8:14:cf:9b:ff:ed:54:d9:7e:d3:db:e1:d5:a5:70:d1:
a9:0c:bb:c7:1a:3b:30:bd:e2:20:72:f9:e3:c2:3e:9b:a0:2a:
57:be:ca:f0:ca:b0:e2:7a:4f:07:60:98:ed:d5:13:b7:0f:98:
f3:62:6c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:50:54 2025 by rpki-client