Route Origin Authorization
$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/326130373a643838343a3130303a3a2f34302d3438203d3e203433333537.roa
File: 326130373a643838343a3130303a3a2f34302d3438203d3e203433333537.roa (raw, json)
Hash identifier: pAroS2Bf3gnR0MbsXjQxDu/jLTlis9mqdFdjojdSkyA=
Subject key identifier: D0:69:1C:19:9C:95:71:6F:0D:60:AA:EC:56:7F:20:6B:1C:8C:CB:A4
Certificate issuer: /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial: 6405AC31370DD0B2E5F67298982526853ABE72BB
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/1/326130373a643838343a3130303a3a2f34302d3438203d3e203433333537.roa
Signing time: Fri 10 Jan 2025 13:46:59 +0000
ROA not before: Fri 10 Jan 2025 13:41:59 +0000
ROA not after: Fri 09 Jan 2026 13:46:59 +0000
asID: 43357
IP address blocks: 2a07:d884:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:05:ac:31:37:0d:d0:b2:e5:f6:72:98:98:25:26:85:3a:be:72:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Validity
Not Before: Jan 10 13:41:59 2025 GMT
Not After : Jan 9 13:46:59 2026 GMT
Subject: CN=D0691C199C95716F0D60AAEC567F206B1C8CCBA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:6f:fa:bc:42:3c:3b:d6:d5:a0:8a:5d:a7:
10:a2:44:16:ab:fe:ac:f9:e7:94:8b:d8:bb:a5:2a:
6a:ec:79:5d:a2:88:04:e2:75:28:19:48:19:a3:48:
bd:d5:11:d7:1c:84:1b:d7:34:9b:4e:91:ae:83:f8:
7d:b1:ef:c3:1a:9f:4b:0e:b8:c8:30:f1:c2:87:52:
52:8b:71:45:bd:2c:9b:e5:97:79:e9:ca:8c:5b:09:
a1:d4:dc:3c:8a:e5:aa:b0:2f:72:9b:aa:79:bc:13:
71:69:7e:3a:03:b6:4b:bc:2b:5a:d0:ba:b9:33:5a:
e5:cc:d8:06:a8:fd:b7:01:c2:06:14:2b:56:27:50:
28:1d:9f:ff:12:77:c8:79:d0:07:bf:9a:2d:f6:1d:
0f:4c:ae:44:72:8c:01:f8:7a:eb:e9:91:b9:92:0a:
59:97:ff:0c:80:98:05:a8:18:34:10:f4:84:6a:6a:
6c:96:ce:8f:fd:70:49:71:e4:44:f6:10:1c:17:44:
8e:3e:9d:be:40:2a:f9:48:ff:9a:ac:cd:ff:3f:70:
0b:db:f3:c0:e2:24:00:6d:e1:35:12:03:ba:f9:e3:
0e:fc:c7:4d:a4:4f:f5:8e:38:82:f4:1f:a5:68:11:
25:72:88:26:aa:45:21:6e:bc:ad:b3:e7:5e:ec:cd:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:69:1C:19:9C:95:71:6F:0D:60:AA:EC:56:7F:20:6B:1C:8C:CB:A4
X509v3 Authority Key Identifier:
keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/326130373a643838343a3130303a3a2f34302d3438203d3e203433333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:d884:100::/40
Signature Algorithm: sha256WithRSAEncryption
7d:55:10:57:f0:7f:f2:6e:09:84:1c:31:6b:e1:7d:7f:79:71:
be:56:ef:39:40:39:9b:2e:e9:a5:00:28:04:0d:29:1f:8f:b9:
a0:f6:c3:70:cc:2b:40:16:f3:09:42:60:06:35:f3:a7:e2:d1:
b5:60:ff:6c:f5:7c:af:d5:94:5c:f7:f7:fa:cd:a2:14:e8:e1:
de:a6:2c:d0:bb:62:67:c8:f1:fd:c8:f6:ec:39:24:83:4a:c3:
03:87:c4:3c:0d:cd:36:46:30:83:16:d4:c5:89:c1:3a:b5:5b:
55:e3:db:5f:7b:70:33:96:c2:d9:60:e2:b3:60:17:fb:d6:97:
de:6c:3e:27:ed:7c:94:3e:3a:20:47:17:46:3a:73:94:b0:56:
46:4f:6c:b2:4a:e2:3f:4e:52:ba:fe:d7:53:a7:e9:d7:70:95:
b1:8e:e0:d5:54:54:07:fa:05:f7:51:28:70:2a:29:62:6d:e1:
56:04:ec:05:b9:94:12:fb:de:2b:54:6c:d2:c5:b6:4a:04:9a:
ec:69:b0:c7:fe:c0:e8:ea:a3:ee:02:da:bd:24:fa:a4:84:2a:
32:11:e1:e0:b1:35:dd:65:2b:f4:bd:7f:ca:a0:b6:7c:35:9f:
dd:13:96:0d:0b:8e:e4:79:b6:aa:95:47:ab:0c:1a:e7:7b:fa:
ca:e9:95:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:25:20 2025 by rpki-client