Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/1-546Kti0lJhdCgM2BGLPJH8tB7A.roa
File: 1-546Kti0lJhdCgM2BGLPJH8tB7A.roa (raw, json)
Hash identifier: DZKGU1PUOmodvcooBnReEnL3w/IZk9xJ+ihgar9xlKQ=
Subject key identifier: FB:9E:3A:2A:D8:B4:94:98:5D:0A:03:36:04:62:CF:24:7F:2D:07:B0
Certificate issuer: /CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Certificate serial: 0194236A4B3C48EA86E8A0B07B5E2A6D0416
Authority key identifier: 56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/1-546Kti0lJhdCgM2BGLPJH8tB7A.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212568
IP address blocks: 2a11:e487:42::/48 maxlen: 48
2a11:e487:affe::/48 maxlen: 48
2a11:e487:cafe::/48 maxlen: 48
2a11:e487:dead::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4b:3c:48:ea:86:e8:a0:b0:7b:5e:2a:6d:04:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb9e3a2ad8b494985d0a03360462cf247f2d07b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:d3:d0:48:76:19:1f:01:4d:44:ca:62:b7:
3d:4e:bc:16:8e:4e:60:17:aa:e5:55:3e:d7:bd:5f:
d4:30:5f:fe:0d:62:48:df:c5:b3:67:7c:af:e9:f7:
ca:b4:15:33:e2:89:ef:cc:95:34:4d:1e:10:92:d7:
17:3f:aa:db:1e:ad:67:37:f9:ae:92:bf:d8:c4:ac:
a1:1b:ed:1f:61:16:88:5e:f5:c8:be:fb:52:8c:56:
32:67:a9:b5:47:58:54:af:f7:df:97:07:a2:21:55:
bb:9a:2f:5f:ae:21:af:85:a7:7a:82:2a:06:7b:44:
c0:95:50:6b:f2:72:24:c5:89:30:bb:df:74:22:20:
10:0f:ce:3c:d4:c5:80:c0:92:c1:84:14:41:bf:5d:
87:0c:60:ca:b8:c6:ba:85:78:84:78:2d:5b:ce:59:
70:2f:aa:41:72:38:5e:15:d4:5d:4b:7b:72:29:a9:
2a:46:e8:45:8e:fb:8e:a8:01:11:2d:8f:28:b3:2f:
a4:38:c7:7b:ee:86:cd:75:1a:c7:6d:a5:a8:68:05:
81:55:66:3e:1e:e4:43:ac:ef:78:bd:07:f5:48:3c:
0c:64:9b:11:8d:04:2d:53:c6:bc:d9:68:56:08:8e:
94:cf:18:47:7a:c9:5b:33:66:27:33:1a:44:90:d3:
1d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9E:3A:2A:D8:B4:94:98:5D:0A:03:36:04:62:CF:24:7F:2D:07:B0
X509v3 Authority Key Identifier:
keyid:56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/1-546Kti0lJhdCgM2BGLPJH8tB7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e487:42::/48
2a11:e487:affe::/48
2a11:e487:cafe::/48
2a11:e487:dead::/48
Signature Algorithm: sha256WithRSAEncryption
a3:7d:b7:83:4c:2d:ec:7a:28:0e:85:0c:7a:07:0b:09:41:e5:
ad:fe:77:b1:a0:47:b8:f7:aa:a5:b7:51:9a:97:66:fe:0a:b1:
71:38:c3:99:02:44:d0:b1:6b:0a:f5:e7:f4:2a:23:58:2d:b6:
a9:64:61:16:4e:b2:81:5c:f6:46:de:84:ba:28:75:f5:bf:f9:
40:4b:ec:1f:b3:f0:64:5d:09:36:87:f4:5f:f3:6c:e1:27:28:
d1:d0:a4:fb:4d:aa:e9:55:b3:a2:1e:68:ca:35:83:1b:f9:ae:
d2:a7:a5:8e:c5:17:56:68:87:d3:0a:cb:10:b3:cb:d8:c4:2e:
8c:0b:8b:3d:3b:c3:61:e2:f2:b3:b7:93:70:00:a6:c7:45:a7:
1e:9b:12:44:3a:69:c5:e3:d6:c9:6d:61:a6:02:d8:6b:42:79:
01:e8:be:d8:7a:ad:b1:67:a7:45:2d:95:06:b6:1b:42:51:44:
a5:4c:1f:34:20:04:ba:ac:32:12:a2:85:4b:53:c5:e6:a2:e6:
44:83:f8:2c:8f:9f:42:f2:06:71:8b:ef:dd:22:8e:1a:2f:c9:
61:8d:85:a9:f3:d3:d3:b3:c2:37:c3:2d:1e:56:48:d5:85:f7:
4d:42:df:73:3a:a3:a6:63:bf:5c:0e:2f:07:4c:cf:9c:97:0d:
55:c4:ca:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net