Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/OoiR-n17kDohxKF4sG9PntPgQTs.roa
File: OoiR-n17kDohxKF4sG9PntPgQTs.roa (raw, json)
Hash identifier: Iy2iaD3knFRFm0z6lgIQYM+wnzj2MJQzp2rtlFberlM=
Subject key identifier: 3A:88:91:FA:7D:7B:90:3A:21:C4:A1:78:B0:6F:4F:9E:D3:E0:41:3B
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 0194FA25187823E7AB83F58C0ECC5AB01336
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/OoiR-n17kDohxKF4sG9PntPgQTs.roa
Signing time: Wed 12 Feb 2025 12:32:02 +0000
ROA not before: Wed 12 Feb 2025 12:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210171
IP address blocks: 2a0b:4144:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:25:18:78:23:e7:ab:83:f5:8c:0e:cc:5a:b0:13:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Feb 12 12:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a8891fa7d7b903a21c4a178b06f4f9ed3e0413b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:4b:33:e6:05:1f:92:5d:a5:b9:8b:ca:30:
94:e9:04:bf:e0:e2:f1:2d:78:d9:cb:61:84:b2:96:
27:64:7b:aa:7b:37:65:d7:ba:21:3d:78:fb:ab:b4:
1a:0d:ba:da:be:f7:5e:82:0a:76:57:bd:3b:1c:0d:
ca:8d:a5:2e:1f:7f:dc:98:d7:25:4c:34:19:12:ea:
3e:f4:1b:40:af:ff:2a:e0:3a:2c:2f:90:1f:30:8b:
b4:8f:70:f9:e0:f4:0d:f7:a9:b1:87:6c:d8:eb:0f:
5c:19:54:cf:11:2a:df:94:5e:4f:bd:4d:02:82:4b:
4d:36:e4:ed:e0:6c:cc:c2:b0:f6:21:89:55:c9:70:
2c:78:0a:c4:f6:b2:45:29:81:28:4a:7e:ec:c7:28:
c0:71:ef:8f:56:f0:57:5d:eb:2f:fd:77:f6:0f:4e:
6d:74:13:e8:0e:cd:e8:4f:77:63:1e:75:a4:e0:ba:
9f:09:4e:7a:43:dc:3a:b8:05:40:8e:6d:3f:90:39:
5d:45:61:ac:24:fd:b5:98:f3:1c:d4:41:b1:e2:e7:
76:0b:26:10:c0:e2:d5:5d:6c:cd:4c:29:a3:26:ba:
b2:77:00:a8:ca:ab:24:b3:df:aa:74:3f:f6:84:ac:
5a:94:d6:03:d3:5d:56:21:56:e1:90:87:5e:d2:d4:
22:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:88:91:FA:7D:7B:90:3A:21:C4:A1:78:B0:6F:4F:9E:D3:E0:41:3B
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/OoiR-n17kDohxKF4sG9PntPgQTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4144:1::/48
Signature Algorithm: sha256WithRSAEncryption
4c:c0:67:90:22:75:b1:4a:c1:15:9e:d1:c8:65:8b:64:72:79:
54:04:29:f2:f4:11:ed:99:93:de:47:e4:95:05:40:05:3e:ad:
59:58:05:fb:66:ef:a4:bc:ab:77:41:ce:fc:1a:73:43:15:ca:
09:5a:f8:3c:85:b1:fa:10:0c:ca:4c:91:f5:a4:0d:b9:94:4e:
d0:2f:49:94:66:da:c2:bf:67:27:99:b9:5c:92:de:31:63:dc:
2c:68:09:36:f9:42:34:91:9b:62:b5:26:81:d8:10:46:c9:27:
c8:d3:3a:22:58:e4:7f:7c:71:a2:a2:b9:79:e2:c6:fc:ef:9d:
2a:ce:c4:31:91:ad:a9:9a:e7:08:53:71:23:4c:8f:3d:3d:1a:
7f:cb:ed:9d:99:c4:91:1d:b5:77:01:d6:cb:20:c0:01:46:71:
e4:d0:20:74:7e:c5:68:8c:3b:b5:81:c7:3b:4d:7f:66:f6:d7:
28:9c:0d:36:c5:53:e0:e6:1c:e7:a4:16:db:88:79:2e:94:79:
18:2b:61:b5:cd:ff:43:e4:94:09:5a:b4:8e:f8:5f:7d:e8:ef:
6e:38:b1:05:f0:47:81:1d:02:74:e2:73:92:f5:c6:01:ca:46:
64:42:48:7a:8e:7e:66:5c:88:b4:05:8f:5c:ae:d2:67:fa:31:
6f:5a:9f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:37:02 2025 by rpki-client