Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/O2A95fKA1A2XI5zokqy2M5EQluY.roa
File: O2A95fKA1A2XI5zokqy2M5EQluY.roa (raw, json)
Hash identifier: l7DaeRNWKyhpILryPmDUINT37G9okCmuQyW2gonVmu8=
Subject key identifier: 3B:60:3D:E5:F2:80:D4:0D:97:23:9C:E8:92:AC:B6:33:91:10:96:E6
Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial: 019427B3BC71D465B9C9510154470912DE93
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/O2A95fKA1A2XI5zokqy2M5EQluY.roa
Signing time: Thu 02 Jan 2025 15:47:58 +0000
ROA not before: Thu 02 Jan 2025 15:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39392
IP address blocks: 2a02:6ea0:cd77::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:bc:71:d4:65:b9:c9:51:01:54:47:09:12:de:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Validity
Not Before: Jan 2 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b603de5f280d40d97239ce892acb633911096e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:26:67:3f:73:c7:d5:2f:f3:4c:e0:60:70:
cf:e9:04:1d:ab:ae:3a:a1:ec:e1:07:54:1c:af:6b:
38:59:80:18:9f:d2:38:7e:a2:83:19:32:57:4f:04:
a2:ff:3a:d1:44:a9:fc:67:f0:07:14:37:06:df:a5:
d8:5f:e3:3e:2b:6c:97:53:27:8a:bc:aa:65:98:15:
fa:59:52:73:72:26:c7:b3:78:67:55:cc:4a:f1:25:
b4:a2:55:6d:b9:3e:ee:f0:e8:6d:79:19:c5:b2:36:
1e:c2:dd:05:84:f3:07:64:e9:ac:71:08:aa:04:15:
1a:a8:e6:04:aa:31:c4:38:10:7d:06:78:76:4b:05:
a8:d0:5f:72:ea:8e:17:be:aa:5c:4d:21:39:4b:60:
fa:cc:f8:f0:5f:7f:a2:7c:a6:ed:b7:94:e5:61:19:
5b:65:03:3b:b7:de:bb:c0:6c:c5:9a:56:8b:32:67:
8b:7f:6f:bf:7f:da:a5:0c:aa:38:f8:9c:23:42:6d:
ef:52:3b:57:ec:62:93:45:53:7d:98:59:79:60:bb:
3e:0a:98:60:42:08:6e:c0:7f:e5:9d:3a:23:ef:54:
89:17:6c:3f:47:3e:c1:9f:2c:50:1d:99:e9:c8:4b:
d9:5b:91:e7:d0:8f:35:4a:3f:4c:b1:ac:bf:4c:35:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:60:3D:E5:F2:80:D4:0D:97:23:9C:E8:92:AC:B6:33:91:10:96:E6
X509v3 Authority Key Identifier:
keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/O2A95fKA1A2XI5zokqy2M5EQluY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6ea0:cd77::/48
Signature Algorithm: sha256WithRSAEncryption
53:15:93:c1:03:38:8d:74:8e:99:f9:5b:40:39:0a:91:86:03:
b5:93:67:ee:32:d1:ba:f4:28:1f:68:b4:bd:ca:79:f5:40:7d:
37:3c:65:44:b6:11:f5:83:a0:b6:25:a5:3c:42:5c:7b:c7:60:
03:3c:83:ee:bd:b3:b1:60:93:b2:fe:61:b6:a8:3e:e8:a3:74:
75:cb:3d:46:f9:6f:d2:97:16:8c:33:3e:26:cd:69:98:92:15:
95:b3:2a:fc:fd:3d:b6:29:11:27:ff:4b:db:76:33:11:1e:fb:
41:a0:43:33:09:e1:01:f4:51:be:a3:10:f0:87:dd:c7:0e:81:
ac:31:dc:2e:f4:9a:cf:39:e9:fd:2f:a6:a1:0e:52:04:e8:3d:
58:c0:72:19:b8:c3:81:f4:63:cd:71:f4:f2:10:4b:56:d8:9f:
16:14:a0:87:5f:92:e8:fc:1f:56:59:37:3b:b9:f8:8d:fd:0d:
ae:0a:44:60:95:4e:ef:0f:97:61:f5:8a:79:40:7a:a8:19:a0:
78:66:d9:7d:3b:64:0a:8b:93:67:92:34:0c:2f:cf:11:af:1a:
d1:66:11:18:00:04:fb:a4:73:7b:50:e6:cb:95:d1:6d:a6:bc:
8b:2c:44:94:28:ec:3e:c8:ed:4b:21:67:fa:96:80:9b:ca:10:
84:f1:d1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:00 2025 by rpki-client