Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/r85yixgM9jxxigEIMwixi2upEp4.roa
File: r85yixgM9jxxigEIMwixi2upEp4.roa (raw, json)
Hash identifier: wLe6xTNr4aHq0R0ru6vPEz9y5+PnWHuZlUNfRBUphCs=
Subject key identifier: AF:CE:72:8B:18:0C:F6:3C:71:8A:01:08:33:08:B1:8B:6B:A9:12:9E
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019422FB79884A89349CA41D725B27E2A39F
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/r85yixgM9jxxigEIMwixi2upEp4.roa
Signing time: Wed 01 Jan 2025 17:48:13 +0000
ROA not before: Wed 01 Jan 2025 17:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a06:d644::/32 maxlen: 32
2a0b:9004::/32 maxlen: 32
2a0d:3c42::/32 maxlen: 32
2a0d:95c2::/32 maxlen: 32
2a0d:afc4::/32 maxlen: 32
2a0d:afc5::/32 maxlen: 32
2a0d:afc7::/32 maxlen: 32
2a0d:c102::/32 maxlen: 32
2a0d:c104::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:79:88:4a:89:34:9c:a4:1d:72:5b:27:e2:a3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 17:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afce728b180cf63c718a01083308b18b6ba9129e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:44:67:ce:04:44:89:a1:ba:a2:c0:2e:e7:
a3:10:5a:4b:49:ad:8c:08:1f:e0:ab:8a:35:47:f4:
36:77:3a:28:78:c7:3f:93:24:b7:23:28:c8:44:1a:
5c:e9:28:0f:95:6e:b2:c1:34:5b:50:7c:4e:da:53:
c1:e7:16:95:ca:0e:1d:87:8a:9f:1a:20:4c:94:1d:
5e:6a:c2:3b:2f:9d:14:65:28:dd:24:e2:e6:41:cb:
27:61:71:91:16:61:70:06:7f:dc:b8:b1:88:4a:ec:
08:25:ca:f2:80:ff:8a:cc:af:6f:f1:3b:32:16:dd:
c9:41:19:3f:05:a4:59:39:21:3a:a4:55:8b:b2:45:
82:01:d6:9f:94:a5:bb:85:f3:71:f5:f4:37:62:c4:
12:d7:de:41:ff:d9:b4:ad:cb:71:85:6a:42:97:d3:
77:23:99:8c:6c:d2:e1:91:59:6d:86:8b:df:c8:90:
19:82:28:50:fb:04:1b:a7:b0:0f:15:1a:c3:54:95:
02:a7:62:1f:13:a5:ef:a5:a5:be:07:05:9d:5c:98:
1e:1e:a8:dc:b8:fb:9f:7f:79:2e:1a:41:32:84:d3:
7c:91:68:f0:b9:d3:c9:ff:60:c3:6f:59:24:75:cc:
d7:32:fd:a8:83:be:f2:06:b6:f0:a6:78:d1:91:d4:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CE:72:8B:18:0C:F6:3C:71:8A:01:08:33:08:B1:8B:6B:A9:12:9E
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/r85yixgM9jxxigEIMwixi2upEp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d644::/32
2a0b:9004::/32
2a0d:3c42::/32
2a0d:95c2::/32
2a0d:afc4::/31
2a0d:afc7::/32
2a0d:c102::/32
2a0d:c104::/32
Signature Algorithm: sha256WithRSAEncryption
0a:b8:a5:ba:42:0d:ba:93:6a:31:92:82:94:b4:c8:d7:a8:7e:
7d:a4:ec:44:0d:72:d1:cd:8d:64:4b:ac:fc:49:5a:2e:79:e5:
7f:5b:37:2a:45:8d:da:d9:64:d1:2b:25:ac:f8:22:99:ae:86:
7d:2c:8d:91:e4:2f:01:e3:e9:28:00:74:23:74:55:fa:48:a8:
a2:b2:60:43:5c:d6:04:96:22:b2:2c:35:78:1d:74:c5:6c:76:
1b:da:46:76:55:93:3f:38:a6:db:88:5e:34:27:09:82:27:c7:
43:1c:a0:b4:f0:de:9e:9f:36:54:2e:f2:ea:46:19:d0:c1:66:
85:7d:ae:f7:fe:4c:de:22:99:db:59:a6:b8:f4:d4:df:a2:77:
d3:35:31:72:16:03:87:62:ef:9c:c3:5c:7f:60:7c:8a:bb:5c:
c3:52:18:be:5d:8e:33:7c:83:02:2d:44:2f:77:b2:bb:e0:cf:
85:ca:76:76:79:b8:06:44:34:c6:45:6a:7c:84:d0:31:03:e1:
ae:cc:c0:e0:19:88:12:f9:e8:09:f2:66:c1:bf:60:3d:19:5c:
4e:ca:f4:c8:b0:84:3e:08:1c:38:42:f5:cd:e3:fa:19:c6:29:
2c:98:84:63:91:c3:f9:f7:9f:1f:f0:91:eb:ec:91:22:3b:b0:
b5:26:ab:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:11 2025 by rpki-client on console.sobornost.net