Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/AM3vkxlcuWo38gRTThiDzwkXbuQ.roa
File: AM3vkxlcuWo38gRTThiDzwkXbuQ.roa (raw, json)
Hash identifier: uLcqK4GHbNxgZJd7xr3WOkiDVO7/K8kBVuiKqpflamE=
Subject key identifier: 00:CD:EF:93:19:5C:B9:6A:37:F2:04:53:4E:18:83:CF:09:17:6E:E4
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 018CC5015C1892881E50D3CCF1D9A7D1A8AA
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/AM3vkxlcuWo38gRTThiDzwkXbuQ.roa
Signing time: Mon 01 Jan 2024 12:30:49 +0000
ROA not before: Mon 01 Jan 2024 12:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216343
IP address blocks: 2a0f:6580:109::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:5c:18:92:88:1e:50:d3:cc:f1:d9:a7:d1:a8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 12:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00cdef93195cb96a37f204534e1883cf09176ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f1:59:f8:38:f2:79:7c:2b:bb:7d:c4:c8:1e:
18:f7:63:3e:f7:ce:71:e8:40:a1:63:12:d5:31:12:
37:dc:d6:af:a5:e0:ee:ef:5c:74:6a:85:ae:9a:e1:
71:92:2c:27:2c:db:86:7b:ea:fa:a4:51:71:dc:e4:
5c:8b:b6:5e:8b:08:9d:64:79:1f:da:e4:c8:5a:64:
c2:95:a1:82:29:97:76:dd:12:ca:57:67:4a:46:c3:
b3:89:ae:47:bd:98:04:21:b9:40:2c:cc:ee:a9:ab:
eb:93:7f:63:60:cb:dd:6d:f3:55:95:1c:d6:2f:db:
f8:cc:bd:69:91:45:a6:9c:92:6f:54:1b:5e:fc:87:
cb:14:09:6e:72:1b:3c:0a:44:02:a6:9a:3c:c3:19:
ff:77:d2:90:6e:ee:4d:67:f9:af:82:19:a0:b3:49:
68:a1:6a:38:f3:9f:59:43:55:27:40:ce:a7:d5:08:
f4:5d:52:84:4e:bb:e6:17:55:6e:7c:33:31:27:2b:
4f:8c:79:82:4e:11:08:ea:c8:f0:56:7e:71:3b:2d:
85:3d:45:35:d4:f9:e6:54:71:8f:03:82:e5:4f:39:
b6:b1:a8:63:3c:da:2e:e7:39:2e:0a:2d:34:69:ff:
5b:3d:38:05:be:81:64:d4:7e:34:37:5c:a7:ad:cd:
82:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CD:EF:93:19:5C:B9:6A:37:F2:04:53:4E:18:83:CF:09:17:6E:E4
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/AM3vkxlcuWo38gRTThiDzwkXbuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:109::/48
Signature Algorithm: sha256WithRSAEncryption
b9:8c:85:fd:dd:cf:6d:53:ee:3d:b3:eb:17:de:96:0a:dc:c7:
4b:1c:90:fb:27:18:f6:01:5e:1f:cc:70:0b:35:29:97:a8:be:
52:a6:fc:f1:93:ee:bf:1e:d7:30:5b:2a:d9:21:4e:8f:e3:52:
3c:a5:74:2d:9d:80:02:6d:95:1c:70:dc:50:31:cc:0e:4a:95:
f6:6c:48:f5:bf:c9:71:4d:3b:05:35:8d:55:db:9b:14:3e:fe:
f2:4d:1e:03:14:1c:8b:56:cb:ae:25:3a:b7:e4:b4:56:c2:56:
da:9b:88:6d:f2:ac:bf:a1:3a:12:9a:6a:d9:d2:fc:0c:2b:c0:
fe:53:b8:16:f0:c8:2b:6c:b9:d8:60:51:16:f8:4a:2b:4c:49:
79:1b:50:5e:e1:03:fe:8c:11:10:97:ff:38:40:d0:7f:42:b3:
cd:0c:58:a4:91:e6:1c:d4:1d:e4:db:88:1f:34:81:e0:a5:83:
58:08:b7:e8:5a:16:36:0f:f5:ec:ce:aa:04:ee:40:f6:57:a9:
0c:a6:8f:b0:d7:03:e0:cb:5c:11:7e:e8:e1:a1:e1:a4:92:41:
1c:72:0d:96:e6:96:02:e0:d4:a2:62:53:18:9a:95:24:37:c5:
62:34:87:ce:21:b3:74:30:a6:13:13:9a:12:91:a1:b3:b3:15:
91:9b:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:46 2025 by rpki-client