Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/yOtM9OR55m-QpbUpoY6gu7Ta_6k.roa
File: yOtM9OR55m-QpbUpoY6gu7Ta_6k.roa (raw, json)
Hash identifier: onB5LZ7uG6aQ1SpExMba0NjrAM17D+dpxdTNUEhkidk=
Subject key identifier: C8:EB:4C:F4:E4:79:E6:6F:90:A5:B5:29:A1:8E:A0:BB:B4:DA:FF:A9
Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial: 019422FAF84EF7E5E2DF14F2CD18712779C3
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/yOtM9OR55m-QpbUpoY6gu7Ta_6k.roa
Signing time: Wed 01 Jan 2025 17:47:40 +0000
ROA not before: Wed 01 Jan 2025 17:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57401
IP address blocks: 2a0f:607:1059::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f8:4e:f7:e5:e2:df:14:f2:cd:18:71:27:79:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Validity
Not Before: Jan 1 17:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8eb4cf4e479e66f90a5b529a18ea0bbb4daffa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:a3:b1:51:cf:f0:44:bb:53:8a:c0:12:b9:
35:da:f2:54:92:93:2d:5b:f2:be:5b:6b:0c:f4:76:
7d:24:51:b1:8e:e2:6e:64:cf:98:91:cc:82:98:c9:
05:96:6f:7c:d2:d1:79:53:d1:99:e2:91:6a:05:c8:
a7:79:19:ea:d2:24:c4:2b:c3:64:0a:ae:d3:1b:35:
ba:ee:c1:2a:a7:8b:ea:b8:71:84:58:fa:52:e2:ff:
3a:01:71:b7:82:5c:c7:eb:13:74:9f:85:b7:c2:30:
ae:6f:66:71:3a:b8:57:51:15:12:18:0f:ae:6b:66:
e6:67:19:72:aa:8d:df:77:73:a6:d6:a4:f4:e8:3b:
03:25:ce:61:55:35:8d:39:36:21:c2:ba:2e:56:17:
c3:8b:c8:a9:ac:04:21:2c:f6:b3:b1:0f:92:e8:85:
17:e7:6d:d3:30:9f:1b:22:fe:01:8f:f7:89:5b:5e:
1a:8f:9a:d7:b4:46:b8:8d:3a:5d:58:31:b6:ae:0f:
45:7c:0c:0e:40:30:62:2d:f0:13:bc:03:f5:e7:f8:
74:b7:3d:4d:f9:4f:8f:68:29:45:08:e2:57:48:ac:
3e:71:93:f3:87:cd:77:50:e0:74:c2:45:3e:a8:8f:
f1:8a:a2:cf:a3:b5:ab:3c:fc:37:8c:0e:fa:a1:b4:
49:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EB:4C:F4:E4:79:E6:6F:90:A5:B5:29:A1:8E:A0:BB:B4:DA:FF:A9
X509v3 Authority Key Identifier:
keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/yOtM9OR55m-QpbUpoY6gu7Ta_6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:607:1059::/48
Signature Algorithm: sha256WithRSAEncryption
40:12:48:7d:cc:af:da:05:aa:19:8b:90:d0:8b:d3:57:6c:67:
02:f9:5a:3b:21:cf:8c:bf:f0:0b:ac:39:3c:30:68:cb:f1:41:
8d:34:b5:f0:f9:ac:19:df:45:f6:6b:28:71:98:3e:0f:49:bc:
e4:34:7d:07:c4:ac:3c:a3:d9:ba:49:55:a4:ec:6b:90:c8:f8:
b0:36:b4:03:65:bc:03:40:1f:53:81:5a:48:d2:65:2a:c7:c0:
3a:76:40:e8:bb:10:8a:54:3a:02:50:6c:f7:1c:38:a7:09:f6:
f4:e8:52:70:dc:8d:0a:19:d1:22:13:0f:99:35:7d:a0:1d:c6:
3d:71:ba:db:b5:cf:7c:a6:8c:df:ff:bc:09:94:28:62:25:92:
f9:a5:44:39:0b:33:b7:45:af:c2:73:d2:0f:7e:37:84:95:3d:
5a:88:03:c3:6a:21:7f:83:17:d6:96:d6:e3:52:2c:d7:20:55:
23:18:36:c1:84:48:47:bf:56:09:83:b1:00:00:1c:55:b4:59:
ac:55:25:d3:7c:79:89:7f:d7:7b:71:e2:e4:c5:40:d6:c6:0d:
87:6f:cc:36:2a:8a:48:9d:71:35:02:8c:45:f2:c1:52:1a:f5:
eb:3e:c3:13:6c:3a:a6:b9:de:04:bc:05:dc:58:e4:ba:27:8b:
e9:7f:34:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:54 2025 by rpki-client