Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kZju71rKA8pbHkm-ekDk9Z07bk.roa
File: 0kZju71rKA8pbHkm-ekDk9Z07bk.roa (raw, json)
Hash identifier: b+ypJg6hcH6pKVJu6vyRpqtW+++IxkWsLRQNtn0KOrg=
Subject key identifier: D2:46:63:BB:BD:6B:28:0F:29:6C:79:26:F9:E9:03:93:D6:74:ED:B9
Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial: 019426D9D08A414075970AD3A756021E6339
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kZju71rKA8pbHkm-ekDk9Z07bk.roa
Signing time: Thu 02 Jan 2025 11:49:56 +0000
ROA not before: Thu 02 Jan 2025 11:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51634
IP address blocks: 2001:67c:21e4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d0:8a:41:40:75:97:0a:d3:a7:56:02:1e:63:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Validity
Not Before: Jan 2 11:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d24663bbbd6b280f296c7926f9e90393d674edb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:63:08:0d:ae:3d:e6:6c:35:c4:f4:ce:0f:
92:ca:70:89:b9:9b:37:e6:42:25:26:fa:a5:f4:34:
49:e4:fa:7c:d0:41:17:13:d3:28:98:9c:c6:e1:81:
15:fb:6e:15:c1:68:82:89:5e:63:3a:68:09:ad:25:
68:c8:76:4e:58:53:35:5b:b0:cd:8d:de:af:5f:6b:
7b:71:de:eb:bd:5a:79:5d:c9:16:fd:8f:5e:95:9e:
a6:68:03:f5:d2:9a:33:c7:e2:d9:a6:65:2b:55:c0:
de:9e:3c:35:2e:85:20:94:b7:2e:f6:05:cf:65:f8:
53:69:2c:a8:39:38:54:a9:f0:58:cb:c7:19:be:a7:
c1:19:f5:6d:66:91:d6:b9:a0:a8:61:c5:f3:af:19:
ea:cb:90:a0:47:2a:c2:c5:22:15:2a:aa:8b:35:2b:
1a:ac:6c:b3:86:e7:7c:1b:88:5e:c4:ae:cf:67:72:
47:12:c1:c1:74:6f:6c:18:f0:e4:59:25:97:96:d7:
52:19:2e:94:41:db:a8:5d:01:73:c0:e2:dd:6a:69:
b5:57:68:67:df:c6:60:14:31:14:27:59:e7:dc:41:
81:8c:54:b2:ff:8f:82:00:59:0e:7b:66:0e:d5:52:
97:65:81:89:e0:9c:04:1e:14:c3:60:8e:e0:6b:07:
5e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:46:63:BB:BD:6B:28:0F:29:6C:79:26:F9:E9:03:93:D6:74:ED:B9
X509v3 Authority Key Identifier:
keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kZju71rKA8pbHkm-ekDk9Z07bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:21e4::/48
Signature Algorithm: sha256WithRSAEncryption
35:05:29:5e:67:c3:b3:b3:f5:32:1b:6e:41:2b:01:99:e5:2c:
94:f0:fe:98:f3:ac:b8:b2:2d:3c:a4:ae:d0:39:df:74:2b:a5:
91:7d:8f:2f:71:e5:c4:99:b8:d2:5b:17:68:d7:49:bd:1b:9e:
04:40:17:8e:cf:79:d4:f3:0b:a3:1a:83:47:26:e7:f4:ee:a9:
7f:76:c2:f8:43:ee:06:2e:5e:be:c6:6c:c6:c0:e2:bf:80:61:
cf:28:a6:a3:53:29:46:83:9a:d6:01:95:d1:c3:80:47:bd:36:
21:0d:d0:1f:0b:08:e2:81:3f:f7:85:b9:60:3b:1a:bc:df:6b:
e8:35:66:15:62:fe:f6:d3:66:d4:1b:ce:a3:dc:d3:aa:7a:1b:
a5:68:dc:5b:91:b4:64:3c:85:74:2a:99:04:4f:77:25:3e:e6:
18:b1:a1:e9:28:8c:93:43:73:4e:b5:ae:5f:d3:e3:1b:a3:d5:
e7:7e:3e:a5:d1:4f:32:46:6f:2d:b0:40:3c:f9:1d:ea:28:6b:
05:69:1b:b0:fb:c2:9c:39:77:a9:b5:5c:3d:19:56:c0:1e:79:
8c:b3:93:68:6e:2c:f1:75:5d:11:40:4b:16:e5:e2:a5:bb:03:
b4:8a:a1:0c:26:3c:a7:2b:af:28:3c:77:9f:55:6d:d5:27:df:
2b:c4:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:53 2025 by rpki-client