Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/R0B0S-Vvq6PSGq8IAqKsdnjdNUo.roa
File: R0B0S-Vvq6PSGq8IAqKsdnjdNUo.roa (raw, json)
Hash identifier: jZBNXVMhAxnq4wWzeXUVcxAP1mha5zeShrdHGeYvBL4=
Subject key identifier: 47:40:74:4B:E5:6F:AB:A3:D2:1A:AF:08:02:A2:AC:76:78:DD:35:4A
Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial: 0194228DC9F1DE2DAAD98C0A729496107B6D
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/R0B0S-Vvq6PSGq8IAqKsdnjdNUo.roa
Signing time: Wed 01 Jan 2025 15:48:25 +0000
ROA not before: Wed 01 Jan 2025 15:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34081
IP address blocks: 2a0c:8fc1::/32 maxlen: 48
2a0c:8fc2::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c9:f1:de:2d:aa:d9:8c:0a:72:94:96:10:7b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Validity
Not Before: Jan 1 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4740744be56faba3d21aaf0802a2ac7678dd354a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:14:59:69:01:7e:41:23:1e:3c:bc:a4:82:
d1:bd:f1:e9:e5:bf:e4:aa:23:92:11:77:65:af:75:
29:8c:95:c2:3f:a3:f7:82:5e:49:73:37:b9:6d:25:
97:af:f0:b7:da:48:f3:20:24:d2:42:15:dd:fc:e0:
3b:94:1d:00:b9:9a:7b:60:c3:4b:b7:0a:1a:d8:b9:
c7:38:62:10:d7:00:da:1d:7b:d3:0f:e7:38:13:cb:
80:87:d5:61:53:13:73:81:1e:ee:ab:60:84:a6:70:
26:44:b4:a2:ce:3c:07:ee:8a:ac:33:e3:55:71:f6:
00:b5:4e:ef:a2:88:6a:a9:0d:4d:ed:0c:73:a5:b4:
5b:89:5b:80:98:c0:e7:7c:47:28:45:13:89:9e:14:
f7:5f:e4:d1:cd:04:91:2d:4e:69:e5:66:d2:d1:c5:
51:08:4f:5d:e8:f5:23:ec:a5:90:f7:22:6a:b0:4b:
09:42:d5:46:23:c6:5b:91:c6:61:77:c2:01:e7:ee:
d0:df:1f:d6:33:a0:7a:db:80:4d:ca:ab:4d:9b:c1:
9d:b7:50:d5:30:5e:d9:52:68:e1:53:32:3a:c4:03:
a9:03:83:6a:25:94:04:7e:49:b4:c4:4a:19:a6:22:
91:78:44:96:8a:42:8b:f1:18:de:d8:38:85:25:07:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:40:74:4B:E5:6F:AB:A3:D2:1A:AF:08:02:A2:AC:76:78:DD:35:4A
X509v3 Authority Key Identifier:
keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/R0B0S-Vvq6PSGq8IAqKsdnjdNUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:8fc1::-2a0c:8fc2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c9:be:b6:31:68:40:ef:e8:b5:4d:e1:3e:53:0d:34:5d:26:ee:
04:ac:1f:19:ea:c5:20:b3:b4:46:dd:78:d1:75:40:dc:fc:11:
22:9b:67:96:b7:c5:da:3e:62:4c:5f:33:26:93:05:be:3b:3b:
44:05:c1:df:1b:2f:4e:3a:e8:17:87:b2:1f:26:56:f0:33:9d:
d9:1c:f5:ed:4c:b5:33:1c:f0:91:7b:be:a8:38:30:46:44:66:
80:0a:e2:54:bc:4f:a2:1f:ad:7d:f5:bd:57:8a:30:29:99:30:
c9:fc:e5:a6:3a:c0:07:45:97:9c:14:98:74:3b:55:6f:ce:3c:
f6:94:0e:80:b3:a7:cc:3c:92:b8:f0:fb:ee:c2:6b:a5:da:65:
70:69:0b:d3:16:fb:b3:73:19:11:df:e1:2e:ca:e7:60:bb:ad:
21:3b:04:c0:8c:36:86:ae:0d:e3:ad:2e:fe:5a:ed:21:a8:b0:
5b:e9:85:f2:c8:d9:fd:94:dc:b6:94:f0:14:78:4c:0b:55:d7:
3f:62:1f:34:dd:94:66:cd:93:b9:6c:54:b0:e3:cf:eb:58:d4:
9a:b5:ca:bd:2d:6a:9a:11:9b:13:67:e9:7b:36:c2:32:10:eb:
b4:13:9d:aa:9a:1c:b6:69:05:c6:4d:9f:4f:b0:c1:2b:1d:6d:
c7:3f:65:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:02:55 2025 by rpki-client