Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/osZnptwLrp6qQiDmK3uig013a2A.roa
File: osZnptwLrp6qQiDmK3uig013a2A.roa (raw, json)
Hash identifier: gIYboVRiNndTeKwGoUjI9tphLqEPk5MIeoJEmIudvzE=
Subject key identifier: A2:C6:67:A6:DC:0B:AE:9E:AA:42:20:E6:2B:7B:A2:83:4D:77:6B:60
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258ECEB25AA4AF4F4122EB108A7DE858
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/osZnptwLrp6qQiDmK3uig013a2A.roa
Signing time: Thu 02 Jan 2025 05:48:23 +0000
ROA not before: Thu 02 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198734
IP address blocks: 2a0e:aa07:e0a0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ce:b2:5a:a4:af:4f:41:22:eb:10:8a:7d:e8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2c667a6dc0bae9eaa4220e62b7ba2834d776b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:ec:76:1c:80:55:7d:8b:c2:35:08:d5:57:
db:f7:2b:cd:70:7a:1c:ac:ba:14:c1:cf:4f:c4:5c:
01:65:34:10:83:eb:86:11:2d:a2:c9:e9:40:c6:3c:
9b:41:d1:16:57:d1:4c:7a:e5:db:88:25:c0:f6:90:
29:f9:a3:59:7d:08:57:87:30:79:0f:d5:a8:f9:80:
ed:5b:a9:20:7c:36:9d:cb:52:06:5e:0c:86:2f:0b:
f3:7f:ee:f8:82:3e:75:ab:73:a1:e9:ad:ec:18:68:
7f:27:d0:0b:c3:08:f6:9f:10:cb:e2:54:1e:a0:fc:
ec:ed:49:37:6c:e2:be:d3:cb:1a:3d:d1:10:17:11:
e2:b7:81:88:86:5f:df:8a:2c:ac:48:d8:84:e5:ef:
c2:ae:94:75:2e:58:e0:68:50:5c:38:38:e5:05:f5:
7f:eb:f1:54:05:06:4f:4c:cc:bb:5a:54:56:8a:2d:
33:b5:fd:e5:81:09:f9:36:56:9e:17:d0:ac:87:16:
76:52:9f:6d:30:c9:aa:2a:0f:81:8e:3f:60:de:b6:
d3:6c:c0:5d:60:6c:a9:ea:90:d5:cf:72:87:39:65:
ba:26:70:5d:cd:01:fe:8b:a9:2c:68:a4:b5:29:46:
40:83:4f:03:02:ab:3f:f7:c1:a2:82:59:45:53:d9:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C6:67:A6:DC:0B:AE:9E:AA:42:20:E6:2B:7B:A2:83:4D:77:6B:60
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/osZnptwLrp6qQiDmK3uig013a2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e0a0::/44
Signature Algorithm: sha256WithRSAEncryption
15:71:f7:7c:ca:ff:db:0a:c4:0c:11:d7:cd:ef:32:04:65:4f:
53:b9:bc:73:c4:f7:93:66:0f:20:ed:a5:be:8d:2f:d4:3e:5b:
a0:dd:fc:c9:bb:62:93:92:53:3f:57:a5:33:b3:95:97:41:08:
4c:d7:61:c6:09:18:0a:8e:d2:ee:ed:43:80:3b:9e:b3:4d:22:
ed:be:41:29:5c:c9:0d:7a:ba:bb:fd:d3:12:93:7e:d2:76:f9:
ad:27:41:93:c2:6d:18:4a:5b:9c:4c:d8:99:c8:f4:5b:7e:05:
3c:d6:17:5f:7b:cd:f2:95:7d:76:0d:cd:8f:5d:f4:a7:21:b1:
95:b2:25:cc:eb:91:12:91:2d:9c:a6:82:86:26:0e:a2:86:ac:
fb:ff:35:7f:e2:46:42:84:38:ce:4d:9d:f5:c1:42:d7:89:e6:
f6:f0:b1:09:c4:2f:12:a6:5b:aa:11:63:b2:81:3e:a3:1d:a7:
72:d3:99:85:db:88:24:5e:05:05:2d:78:77:54:a4:d5:d7:be:
78:55:3d:b5:d0:ab:78:59:08:e1:42:32:28:e1:ed:57:95:ec:
30:b0:3c:6a:59:05:10:53:a1:91:31:26:a7:91:e2:3f:15:53:
32:de:e9:c7:62:69:15:f2:ce:1b:ee:04:d5:fa:cd:7d:d5:35:
bb:aa:e6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:14 2025 by rpki-client