Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/Ol1gwf97KN8C2okTQgFoNBJAj_Y.roa
File: Ol1gwf97KN8C2okTQgFoNBJAj_Y.roa (raw, json)
Hash identifier: nOhD6696K5uFNmSeTl0PuDWrBC3Uu0s0j0X6YVs7JlM=
Subject key identifier: 3A:5D:60:C1:FF:7B:28:DF:02:DA:89:13:42:01:68:34:12:40:8F:F6
Certificate issuer: /CN=379d103b953071caa9e1a8973808904096e793d8
Certificate serial: 01954E9235D6FD76A18BE0605EA6326C58DA
Authority key identifier: 37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/Ol1gwf97KN8C2okTQgFoNBJAj_Y.roa
Signing time: Fri 28 Feb 2025 21:59:19 +0000
ROA not before: Fri 28 Feb 2025 21:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21100
IP address blocks: 2a06:fcc0:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4e:92:35:d6:fd:76:a1:8b:e0:60:5e:a6:32:6c:58:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379d103b953071caa9e1a8973808904096e793d8
Validity
Not Before: Feb 28 21:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a5d60c1ff7b28df02da89134201683412408ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:61:59:be:a9:b8:10:83:c5:52:8a:65:3e:
72:1c:97:54:73:6d:a4:e3:88:67:bf:4f:36:60:74:
fd:ee:67:86:27:80:ca:bc:3e:a8:52:7a:11:23:c8:
8f:1e:ae:3d:18:a1:84:10:9b:a1:d6:a0:d3:f8:99:
1f:ce:25:ab:3c:82:7c:a3:53:fa:11:3b:d5:53:bd:
c8:1a:95:a6:6d:88:38:52:ed:17:a9:56:d1:4e:04:
b8:00:58:d1:9c:d2:2d:1c:0a:02:d6:a1:fb:37:fa:
18:4d:3b:cf:4f:46:68:7e:41:98:76:80:c1:ce:e7:
d4:f0:6a:99:74:45:46:5e:d2:c4:22:61:ed:ce:9c:
50:39:4c:e8:e3:85:b5:14:f0:59:ae:64:d1:ad:c0:
8a:35:81:5a:f2:42:1f:28:af:22:f2:92:e6:18:c9:
70:84:5c:79:34:04:f8:61:c6:00:c5:50:4c:3f:a8:
68:7f:23:48:eb:d5:ce:f5:53:a9:9a:fd:2b:9a:17:
a9:d7:11:99:ad:4e:1d:43:b3:5c:8a:6e:b2:f6:52:
59:96:e9:bd:a5:43:db:8e:89:5c:b2:6a:e4:48:46:
bd:0d:87:d3:ff:11:7a:05:e7:d6:7f:ad:c4:3e:10:
80:9c:67:dd:c6:48:a9:3c:82:92:56:1d:ca:ad:29:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5D:60:C1:FF:7B:28:DF:02:DA:89:13:42:01:68:34:12:40:8F:F6
X509v3 Authority Key Identifier:
keyid:37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/Ol1gwf97KN8C2okTQgFoNBJAj_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:fcc0:3::/48
Signature Algorithm: sha256WithRSAEncryption
2d:22:4d:d8:27:0c:ae:20:cc:b0:7d:36:03:d5:7e:17:63:08:
9d:ee:be:30:16:68:96:3c:03:95:da:63:e7:1f:72:9e:58:48:
8e:f6:5d:87:a2:d4:3a:f9:3a:a9:77:10:3d:de:82:77:3d:2e:
31:a1:1d:6c:db:80:c7:3f:70:91:b5:dc:c2:74:86:36:21:c3:
d1:d1:d8:96:f6:15:6a:4f:06:f1:fa:3c:d6:f6:fd:d8:06:9b:
8f:64:80:b2:4a:5c:ba:4b:cd:c7:2c:6b:3b:08:1f:22:af:65:
1d:f7:99:8c:56:0e:16:45:e8:63:20:69:ea:aa:76:ed:0a:9e:
a6:de:5e:15:25:11:9f:74:c4:10:84:50:a5:20:54:d8:1c:74:
53:de:a7:e3:1f:6f:88:f0:ab:9e:17:6b:90:77:30:de:66:aa:
90:86:ab:b4:1c:6f:66:95:ef:de:2f:d7:7f:47:d5:65:18:61:
e4:70:78:71:5f:f9:59:04:03:71:db:ec:d3:0d:bb:0f:da:0f:
e8:19:38:e6:3f:71:e5:62:29:f0:13:64:9d:49:92:c8:41:9a:
9d:66:04:48:c0:44:0d:f2:5f:06:5a:b5:ff:55:5d:65:c0:f0:
67:cf:f6:c3:fc:52:ba:ac:af:fe:61:1f:49:24:38:d9:da:ae:
14:01:68:d4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZVOkjXW/Xahi+BgXqYybFjaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OWQxMDNiOTUzMDcxY2FhOWUxYTg5NzM4MDg5MDQwOTZl
NzkzZDgwHhcNMjUwMjI4MjE1OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTVkNjBjMWZmN2IyOGRmMDJkYTg5MTM0MjAxNjgzNDEyNDA4ZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAdhWb6puBCDxVKKZT5yHJdUc22k
44hnv082YHT97meGJ4DKvD6oUnoRI8iPHq49GKGEEJuh1qDT+JkfziWrPIJ8o1P6
ETvVU73IGpWmbYg4Uu0XqVbRTgS4AFjRnNItHAoC1qH7N/oYTTvPT0ZofkGYdoDB
zufU8GqZdEVGXtLEImHtzpxQOUzo44W1FPBZrmTRrcCKNYFa8kIfKK8i8pLmGMlw
hFx5NAT4YcYAxVBMP6hofyNI69XO9VOpmv0rmhep1xGZrU4dQ7Ncim6y9lJZlum9
pUPbjolcsmrkSEa9DYfT/xF6BefWf63EPhCAnGfdxkipPIKSVh3KrSnTcQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDpdYMH/eyjfAtqJE0IBaDQSQI/2MB8GA1UdIwQY
MBaAFDedEDuVMHHKqeGolzgIkECW55PYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjUwUU81VXdjY3FwNGFpWE9BaVFRSmJuazlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iMThkMzgtOWNmOS00NTE5LTkxMWUt
ZGYyYWMxM2NkYjhiLzEvT2wxZ3dmOTdLTjhDMm9rVFFnRm9OQkpBal9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iMThkMzgtOWNmOS00NTE5LTkxMWUtZGYyYWMxM2NkYjhi
LzEvTjUwUU81VXdjY3FwNGFpWE9BaVFRSmJuazlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgb8wAAD
MA0GCSqGSIb3DQEBCwUAA4IBAQAtIk3YJwyuIMywfTYD1X4XYwid7r4wFmiWPAOV
2mPnH3KeWEiO9l2HotQ6+TqpdxA93oJ3PS4xoR1s24DHP3CRtdzCdIY2IcPR0diW
9hVqTwbx+jzW9v3YBpuPZICySly6S83HLGs7CB8ir2Ud95mMVg4WRehjIGnqqnbt
Cp6m3l4VJRGfdMQQhFClIFTYHHRT3qfjH2+I8KueF2uQdzDeZqqQhqu0HG9mle/e
L9d/R9VlGGHkcHhxX/lZBANx2+zTDbsP2g/oGTjmP3HlYinwE2SdSZLIQZqdZgRI
wEQN8l8GWrX/VV1lwPBnz/bD/FK6rK/+YR9JJDjZ2q4UAWjU
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:47:56 2025 by rpki-client