Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/TiM8PFfhJwubSxEOjHgR8gOCbyY.roa
File: TiM8PFfhJwubSxEOjHgR8gOCbyY.roa (raw, json)
Hash identifier: 7DumFB2ADxftJBLCjeXdfBUV+HnexGTjjqRHzmstg+Q=
Subject key identifier: 4E:23:3C:3C:57:E1:27:0B:9B:4B:11:0E:8C:78:11:F2:03:82:6F:26
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 0194221FEAB39C3FBFF78CA4AABF479CCC62
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/TiM8PFfhJwubSxEOjHgR8gOCbyY.roa
Signing time: Wed 01 Jan 2025 13:48:24 +0000
ROA not before: Wed 01 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a0e:aa47::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ea:b3:9c:3f:bf:f7:8c:a4:aa:bf:47:9c:cc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e233c3c57e1270b9b4b110e8c7811f203826f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:1e:83:49:5b:cb:da:65:1d:b3:af:50:17:
10:86:49:7e:29:07:3e:e9:c1:f6:a9:c5:85:15:e5:
06:3e:b1:19:ee:c2:32:c8:55:ad:9d:c4:bc:ef:ea:
99:4b:b6:16:f2:c2:05:8f:16:45:79:c1:44:79:22:
dc:91:c5:d2:6d:2f:a9:95:6a:24:09:d1:7d:3b:36:
f1:8a:7e:81:01:74:f9:d8:53:03:c1:28:59:ab:0d:
d0:87:7c:6d:bc:84:7e:af:fe:2c:b0:09:68:5a:b6:
3f:04:7b:13:07:33:48:89:a5:5e:8a:80:39:5f:77:
bb:2b:85:69:ff:86:1e:e5:6b:fd:5b:ed:92:dd:52:
8d:a4:5b:ac:85:1a:d7:d1:10:e8:37:21:72:98:8c:
d1:34:0a:6d:af:e5:5a:b5:eb:4c:ea:f1:49:37:bb:
b4:9b:3e:67:64:ee:8e:b3:61:de:e0:2d:11:0f:bf:
9f:e2:ab:9e:15:c6:51:0d:82:8f:d3:24:f1:2e:f1:
74:b4:5b:79:b5:8f:fc:68:0c:65:e8:20:14:fc:29:
91:9e:99:6b:06:18:76:4c:89:83:63:50:57:ec:6f:
a3:e3:4a:8d:7f:47:76:b5:0a:6f:e3:e2:a3:94:8b:
d5:24:10:af:df:2c:ed:b4:af:a4:76:43:3b:5d:79:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:23:3C:3C:57:E1:27:0B:9B:4B:11:0E:8C:78:11:F2:03:82:6F:26
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/TiM8PFfhJwubSxEOjHgR8gOCbyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa47::/48
Signature Algorithm: sha256WithRSAEncryption
79:31:8b:a2:9a:aa:f9:2e:01:bc:1c:12:a3:a7:c7:bd:a9:93:
ef:46:58:ed:a1:5b:a0:bb:c8:e3:0f:5b:5c:36:26:ac:5f:45:
7a:55:ec:d2:65:07:24:71:7f:cc:55:8e:ef:81:2f:4a:b1:c6:
4e:6a:7e:8d:00:a9:dd:92:91:10:93:a0:a1:02:fa:f9:b0:b0:
4e:51:82:65:ed:83:11:81:9e:12:b1:5d:d3:bd:b3:a3:27:dd:
fd:dc:a1:27:49:0d:e9:79:f1:46:cf:cf:5e:3f:68:4c:d4:a8:
9d:db:4a:cd:2d:ac:af:43:56:67:ce:ab:55:ec:9a:0f:d9:f6:
71:ed:23:43:10:0d:14:3a:af:84:e6:3a:2d:4d:0c:45:fc:ff:
cf:7b:dd:69:ca:a8:e1:92:de:a4:30:a6:ec:14:36:28:c6:dd:
9a:60:9d:d7:a6:ec:72:1a:59:fb:99:68:7b:2a:af:f9:6b:e2:
96:b5:6c:74:d5:f2:c5:5b:2c:8c:5e:eb:84:9b:82:b2:6b:86:
96:3c:ad:82:1b:23:f1:a3:42:a6:9c:53:18:59:56:a6:c5:4d:
36:80:29:17:5e:60:72:89:74:dc:33:22:c6:fb:64:e7:51:b5:
ac:68:9a:6a:ea:87:3d:52:1d:0c:9c:38:93:69:79:a4:38:52:
2c:63:6f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:18:48 2025 by rpki-client on console.sobornost.net