Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/3sv6NKDpba_DUykmu28n6vWbI8U.roa
File: 3sv6NKDpba_DUykmu28n6vWbI8U.roa (raw, json)
Hash identifier: gUh8eARhI2X9S3x1fvxAhLVuOISp5wl4VqYYPGnDg8Y=
Subject key identifier: DE:CB:FA:34:A0:E9:6D:AF:C3:53:29:26:BB:6F:27:EA:F5:9B:23:C5
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 019427B5D531A3A4D40FADD7320CF79F1CD8
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/3sv6NKDpba_DUykmu28n6vWbI8U.roa
Signing time: Thu 02 Jan 2025 15:50:15 +0000
ROA not before: Thu 02 Jan 2025 15:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12635
IP address blocks: 2001:4b69::/32 maxlen: 32
2001:4b6c::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:d5:31:a3:a4:d4:0f:ad:d7:32:0c:f7:9f:1c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Jan 2 15:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=decbfa34a0e96dafc3532926bb6f27eaf59b23c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:a8:0a:e7:e1:c7:81:31:89:5b:5b:3b:81:
5c:1e:63:6c:61:73:62:fe:8e:0e:15:89:68:c0:a9:
a5:5c:fa:76:e0:a9:3c:84:cf:51:0f:43:cc:3b:cf:
81:85:ab:c2:71:f7:a9:6e:b1:19:59:a8:5f:60:d1:
1f:ef:40:21:56:08:4c:78:be:84:12:dd:04:ee:74:
74:ca:41:a2:8b:f8:6f:fa:c1:0c:f9:f1:da:6a:a5:
5d:f3:a6:d4:a0:eb:9b:7c:c5:d1:b5:b2:54:73:e8:
e2:c8:38:80:80:29:c2:53:cc:ea:39:d8:8c:56:81:
14:b4:92:40:dc:4a:a2:a7:30:73:48:58:60:e2:79:
7e:d3:d6:1d:75:be:24:b2:29:db:be:9a:0a:f3:33:
5a:7a:2d:ac:a4:6c:03:5b:65:4a:a6:ec:0a:1c:ab:
da:72:48:58:8b:1c:78:a5:2f:93:ba:ae:7b:84:b1:
90:a7:bd:9e:eb:66:78:aa:e1:5f:d6:48:22:d9:3b:
92:44:5b:3f:07:fe:26:73:34:1c:3f:c8:83:05:29:
be:30:3a:88:0c:97:ec:89:30:ee:21:47:c5:08:c9:
c4:2e:d3:84:c6:be:db:79:74:bc:f5:3f:41:01:21:
2a:7d:75:7f:e8:9b:37:69:47:6b:0d:ab:ba:e3:c1:
41:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CB:FA:34:A0:E9:6D:AF:C3:53:29:26:BB:6F:27:EA:F5:9B:23:C5
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/3sv6NKDpba_DUykmu28n6vWbI8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4b69::/32
2001:4b6c::/30
Signature Algorithm: sha256WithRSAEncryption
23:00:b7:6e:b6:24:89:7d:18:52:b1:06:0b:b3:e8:6d:c8:5b:
e9:04:c1:72:7a:56:c3:e7:77:d9:a2:dd:b4:2d:fb:a6:25:9f:
26:df:2b:21:e5:9f:20:a6:60:cc:f1:8a:47:a6:d1:47:cc:6b:
2a:6f:c8:81:a2:dd:61:5c:e1:e0:52:50:58:7e:9d:5c:f7:13:
96:2a:19:23:63:87:38:6e:0c:c3:90:0e:b1:85:85:b8:b4:2d:
47:3e:b7:b1:fe:92:76:f8:19:76:67:7a:4b:3c:2e:2b:83:cf:
61:b9:0a:6a:ed:55:14:91:89:6c:38:c1:2b:70:02:8c:be:a3:
7c:5e:a8:5f:5e:8e:b5:0f:da:4b:f6:78:c0:f1:df:bf:d8:f4:
a4:ac:c4:b9:fc:e7:5d:ba:99:f3:28:5e:f3:18:fc:e1:31:b4:
5d:91:ca:2e:67:9b:f0:f6:bb:e2:33:03:d8:72:87:4b:29:41:
cc:c0:71:9e:ae:13:f7:93:b9:47:2a:54:d5:b9:54:ed:5c:c7:
e9:02:cd:08:15:60:27:2f:6f:0c:10:7b:30:99:9c:df:c1:30:
af:ff:9c:9e:01:bc:b6:65:c7:52:1d:60:34:4e:5f:5b:db:3a:
89:f7:03:5b:48:d2:5b:14:04:de:ac:f9:86:ce:3b:da:55:1d:
42:88:25:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:43:32 2025 by rpki-client