Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/OxnjvwWUCiqbD04iEI8NBnyYtDw.roa
File: OxnjvwWUCiqbD04iEI8NBnyYtDw.roa (raw, json)
Hash identifier: 0+WrmCLNh//XhCaulKTd1Ril/nIlAEF8FUGZmKvO2G4=
Subject key identifier: 3B:19:E3:BF:05:94:0A:2A:9B:0F:4E:22:10:8F:0D:06:7C:98:B4:3C
Certificate issuer: /CN=521a30077223c25c6f37dcf59480778c0b5b1068
Certificate serial: 019425FC651244305069E32E2491B4CCF802
Authority key identifier: 52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/OxnjvwWUCiqbD04iEI8NBnyYtDw.roa
Signing time: Thu 02 Jan 2025 07:48:05 +0000
ROA not before: Thu 02 Jan 2025 07:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399135
IP address blocks: 2a0a:4a41::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:65:12:44:30:50:69:e3:2e:24:91:b4:cc:f8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521a30077223c25c6f37dcf59480778c0b5b1068
Validity
Not Before: Jan 2 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b19e3bf05940a2a9b0f4e22108f0d067c98b43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:78:ec:0f:38:a2:ca:ef:9d:54:0a:69:59:
e4:02:13:e4:96:2d:64:de:39:6c:bc:e5:31:fc:82:
64:f5:53:47:3f:6e:35:3a:47:15:8e:fc:b8:e6:b3:
d6:7e:4d:6b:15:24:4a:35:b1:33:31:d4:10:5f:24:
a9:0f:e9:01:6e:d5:41:54:4f:4b:fa:5e:bf:76:94:
1a:bb:2e:eb:12:d2:aa:b0:2d:e2:84:21:35:23:24:
2a:c6:90:08:1e:38:91:34:23:3f:e4:02:fa:e8:30:
4d:a9:03:75:59:20:c9:fd:b6:d3:8e:ca:55:7b:db:
76:c4:66:0e:14:79:e1:99:ee:5e:b6:ad:bf:87:18:
d9:a1:d9:58:26:0f:ae:ae:6a:ac:40:b8:e9:c8:0e:
e5:f3:f1:cb:17:6d:59:55:22:33:94:10:ad:cb:1f:
78:80:be:dd:67:83:ea:a3:70:25:9a:e4:53:bf:51:
21:1f:bf:ce:fa:e0:cf:79:68:6c:2f:6c:4e:77:82:
af:ba:d6:b7:cb:4a:39:fe:ba:a4:da:25:86:28:f6:
3c:01:dc:2c:7b:12:e1:fe:2b:27:f6:46:d6:da:c7:
74:68:b7:69:c3:d9:ab:45:fc:58:8f:ff:5a:eb:e4:
fc:2a:d6:45:6b:f8:de:4d:0c:52:87:0b:59:2c:69:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:19:E3:BF:05:94:0A:2A:9B:0F:4E:22:10:8F:0D:06:7C:98:B4:3C
X509v3 Authority Key Identifier:
keyid:52:1A:30:07:72:23:C2:5C:6F:37:DC:F5:94:80:77:8C:0B:5B:10:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhowB3IjwlxvN9z1lIB3jAtbEGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/OxnjvwWUCiqbD04iEI8NBnyYtDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6b1151-b05a-4a02-a883-0f5f09b2eb14/1/UhowB3IjwlxvN9z1lIB3jAtbEGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4a41::/32
Signature Algorithm: sha256WithRSAEncryption
64:6c:95:4e:b4:21:25:4c:a4:15:68:40:a4:4e:5b:f5:60:94:
61:c3:72:5c:86:95:39:74:8b:91:f4:04:4b:58:18:3b:28:ff:
15:5f:25:8e:95:bd:d5:7f:86:04:04:44:8f:da:e5:be:79:cf:
db:6a:15:2f:de:58:09:6c:2d:92:b2:cb:57:0e:0f:63:5d:92:
e0:f5:98:dd:e4:c6:34:54:c2:06:2e:5c:ae:e0:10:38:05:64:
77:49:53:df:f5:69:5d:44:80:87:43:1e:04:10:bb:16:2b:07:
ba:63:44:53:01:5d:6f:64:7b:e5:ca:8a:1e:19:e1:12:eb:12:
9e:da:1c:33:c0:71:b5:0f:24:b8:fe:0e:36:28:2a:af:a4:e7:
e8:ee:75:25:36:d3:78:39:67:89:1f:63:6e:34:d6:de:74:3d:
19:64:6f:40:d7:ec:52:da:84:3b:06:63:72:34:b7:e9:6d:e6:
93:c0:24:98:2e:ce:85:d4:ec:a4:22:d5:6a:8c:6e:1f:c9:6b:
c3:1d:80:93:fa:c3:36:d0:e6:a0:57:cb:04:39:5a:70:66:c8:
19:14:09:43:70:92:10:08:22:12:67:52:9e:1b:6f:d8:5b:94:
5e:46:95:39:a7:33:ce:65:3a:58:04:bc:da:2e:b1:9e:80:97:
32:e0:9c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:32:25 2025 by rpki-client