Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/v0nl9NqwXGBOlfyyWw3gzh99SpU.roa
File: v0nl9NqwXGBOlfyyWw3gzh99SpU.roa (raw, json)
Hash identifier: /ca8ENtweJNRwbhlCWk7eKckVCWYU5D6l6K/AnXg+Xo=
Subject key identifier: BF:49:E5:F4:DA:B0:5C:60:4E:95:FC:B2:5B:0D:E0:CE:1F:7D:4A:95
Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Certificate serial: 019426D9795D53DF1FF36068A2F10C5BA3B4
Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/v0nl9NqwXGBOlfyyWw3gzh99SpU.roa
Signing time: Thu 02 Jan 2025 11:49:34 +0000
ROA not before: Thu 02 Jan 2025 11:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 2a01:e5c0:2000::/36 maxlen: 36
2a01:e5c0:3000::/36 maxlen: 36
2a01:e5c0:4000::/36 maxlen: 36
2a01:e5c0:5000::/36 maxlen: 36
2a01:e5c0:6000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:79:5d:53:df:1f:f3:60:68:a2:f1:0c:5b:a3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e
Validity
Not Before: Jan 2 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf49e5f4dab05c604e95fcb25b0de0ce1f7d4a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0b:43:41:8e:57:d7:29:32:d0:fc:49:e7:e3:
f4:bd:35:e3:ca:58:36:fc:ab:34:97:7f:ef:a3:b7:
98:9c:e0:46:7b:e2:cc:c0:0c:5d:6e:ef:87:dc:31:
17:99:1b:89:74:f7:fd:90:a4:1e:e6:05:9a:07:dc:
bf:df:58:8d:26:41:6e:47:df:3d:01:3b:77:57:53:
9e:fe:5b:e1:b1:0c:25:42:5c:fa:d5:6f:76:82:41:
96:5c:2c:ab:67:28:e9:f3:ea:60:a1:5c:cf:25:67:
d0:09:9a:92:e7:a2:07:f5:34:90:24:6b:53:72:22:
3a:6f:45:c6:9e:3a:33:ed:81:72:d6:21:d1:7c:84:
3c:e5:ae:42:7c:c0:13:d3:82:81:c6:a3:23:08:e3:
93:a6:e2:57:03:9d:4a:3d:3a:4b:d9:d7:6a:40:a8:
e0:6f:26:64:26:82:7a:1a:f5:48:a5:16:9c:fc:d5:
4e:0a:ca:a2:bc:23:4c:4e:54:a2:57:16:85:59:46:
26:f2:4b:a0:95:d3:b1:f6:05:62:4e:72:c2:40:a3:
a4:58:0f:57:21:86:a9:62:28:0f:a1:48:47:97:0c:
5d:68:19:99:50:30:69:02:09:c6:1d:35:83:90:5c:
29:b1:77:55:1a:48:27:d4:16:51:30:53:ee:19:ea:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:49:E5:F4:DA:B0:5C:60:4E:95:FC:B2:5B:0D:E0:CE:1F:7D:4A:95
X509v3 Authority Key Identifier:
keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/v0nl9NqwXGBOlfyyWw3gzh99SpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e5c0:2000::-2a01:e5c0:6fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
93:a9:ad:59:42:88:4a:0f:07:f1:8e:06:3e:17:21:51:79:d8:
5f:5f:d6:7d:6f:da:9a:60:59:17:95:f9:fb:19:5f:d0:64:8a:
c6:c3:51:e6:80:bf:f6:0e:c3:43:de:af:4e:15:38:76:86:a6:
0e:bd:14:56:ac:d4:d6:b1:27:d0:9a:a9:4e:2c:9c:74:40:9d:
ef:ed:a9:e3:b7:91:ef:82:4b:4d:0c:bf:99:4d:1c:58:a6:1b:
8d:26:a9:99:a7:c7:f3:e4:ce:1b:29:5c:5c:c8:58:ee:5e:d2:
b6:6a:b2:2f:0c:d8:f2:17:91:88:77:d9:97:98:7a:32:18:04:
f4:f8:79:6c:45:b5:a3:84:85:b9:5f:de:53:a1:4e:7a:ea:ec:
63:16:54:f6:c4:ef:cd:5a:18:98:86:72:e7:a3:8c:47:f6:8c:
d8:94:79:f8:94:71:dc:4b:06:8e:4d:7d:7f:4c:fe:6c:f5:5f:
7f:f8:e3:79:7f:e1:55:2a:e8:75:a9:d3:0c:33:2b:1d:40:2a:
fd:9f:84:9d:17:fb:cb:9a:44:fb:8d:11:be:45:84:ee:27:62:
83:6b:58:e7:72:49:9e:a5:53:85:88:7a:47:09:b9:4c:9b:02:
a8:f2:93:4e:8c:20:ac:f5:8d:50:30:25:96:dc:6a:cf:3b:7f:
87:4d:d8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:10 2025 by rpki-client on console.sobornost.net