Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa
File: p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa (raw, json)
Hash identifier: WZ922M0yus1urQsDExc+JxOh5vKRfme8mJQQlGJgw6I=
Subject key identifier: A7:C0:E4:96:D5:07:CA:84:4F:B1:16:7C:C2:A4:BB:1E:48:43:FF:0E
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 01942747054044A9A9C846FCDDAFC99D8105
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa
Signing time: Thu 02 Jan 2025 13:49:13 +0000
ROA not before: Thu 02 Jan 2025 13:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 2a0f:6580:108::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:05:40:44:a9:a9:c8:46:fc:dd:af:c9:9d:81:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 2 13:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7c0e496d507ca844fb1167cc2a4bb1e4843ff0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:92:37:53:7e:68:5d:71:80:4f:a3:26:8f:
b2:b1:58:00:01:ea:05:b1:92:ac:19:2e:82:19:7e:
a2:a7:45:a1:ae:f0:af:c0:1e:aa:cb:e9:4b:55:d1:
4a:93:f9:06:36:a0:f6:5b:16:09:3c:d9:af:5f:85:
fb:c0:81:18:66:96:26:15:83:e0:65:9b:02:2d:91:
dd:ef:61:78:b3:e8:da:0c:ed:01:8a:85:df:e2:02:
44:01:49:b8:2f:45:76:74:be:89:54:55:1d:c9:49:
c2:91:fd:a3:54:27:46:7c:25:8f:f4:8c:6a:19:90:
9e:3c:4a:d8:6b:0a:cb:32:30:a5:04:ff:fa:c6:9d:
b0:80:65:6b:3a:a2:62:06:cd:de:bd:16:8b:65:52:
78:34:ca:0b:54:60:93:c9:85:de:f5:eb:fd:c3:09:
cd:2b:ee:ee:88:94:1d:06:89:2a:ff:77:82:6c:67:
77:2c:85:5e:96:01:4c:05:64:d9:64:25:23:14:46:
a2:c6:fc:6d:92:4a:40:30:33:87:40:2f:22:c3:72:
d5:89:2d:21:27:00:08:0a:0b:79:09:ac:cc:03:9a:
02:84:be:fd:65:4d:98:f4:b5:5e:26:d3:0f:e4:5c:
e7:06:e5:eb:8f:f0:cd:ed:b4:d7:40:58:0e:84:33:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C0:E4:96:D5:07:CA:84:4F:B1:16:7C:C2:A4:BB:1E:48:43:FF:0E
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:108::/48
Signature Algorithm: sha256WithRSAEncryption
1e:6e:11:2a:bf:aa:bf:2b:af:d1:08:2d:5f:8d:8f:9f:39:7c:
ef:3b:e3:82:15:31:f8:a4:f1:25:cb:a5:d2:b8:ed:2a:d2:47:
af:69:60:51:5d:b5:1d:c9:fc:6a:af:90:56:44:dd:bc:e1:19:
98:04:e7:ef:86:94:32:f7:37:3f:e3:b6:41:15:d3:8a:13:2f:
04:ab:7c:53:b7:3f:c7:8a:f1:92:73:b9:c8:9e:92:60:bb:cf:
4a:62:7c:3a:27:49:cc:04:35:f8:68:01:92:81:71:15:61:c2:
b1:0f:e2:4a:7b:b4:63:b3:d4:63:44:43:06:2f:fe:aa:ed:d3:
4f:04:30:98:ad:c1:27:a1:cc:01:5b:2b:55:65:00:d0:fe:93:
40:a6:f9:36:a0:85:06:d3:13:e2:a4:76:36:7b:f7:b1:96:74:
4b:47:4c:7d:2f:3f:cd:88:44:8b:4e:6a:06:b5:90:67:13:1f:
f9:fc:66:a6:0d:42:0a:a5:4c:6b:3b:df:7b:97:82:7c:92:01:
bb:6e:ea:5a:20:ba:59:bc:9a:56:96:c3:1e:87:47:e4:40:a3:
8e:57:27:f7:84:7e:f6:db:d4:d7:e2:2f:d9:d2:30:17:23:0a:
b4:39:cb:43:07:2b:8d:9e:c5:6b:47:4f:95:4e:1e:f4:da:05:
5a:7b:9d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:03 2025 by rpki-client