Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b226a-94b4-4111-8b57-c81ddcb454bc/1/4OOmGDVWYD9DRR84J217PYq3_sc.roa
File: 4OOmGDVWYD9DRR84J217PYq3_sc.roa (raw, json)
Hash identifier: ldqZytAcSv7sXwWxKLKZoCkTdI95MEdl23h0EGrhRgA=
Subject key identifier: E0:E3:A6:18:35:56:60:3F:43:45:1F:38:27:6D:7B:3D:8A:B7:FE:C7
Certificate issuer: /CN=72e4f7b9229c5d6583880840b70c96a508fd07fe
Certificate serial: 0184C10CEE8FC1BD6CFE9D1C7806C2DF633E
Authority key identifier: 72:E4:F7:B9:22:9C:5D:65:83:88:08:40:B7:0C:96:A5:08:FD:07:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuT3uSKcXWWDiAhAtwyWpQj9B_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b226a-94b4-4111-8b57-c81ddcb454bc/1/4OOmGDVWYD9DRR84J217PYq3_sc.roa
Signing time: Tue 29 Nov 2022 01:42:40 +0000
ROA not before: Tue 29 Nov 2022 01:42:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210072
IP address blocks: 2001:67c:afc::/48 maxlen: 48
2a10:4a80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c1:0c:ee:8f:c1:bd:6c:fe:9d:1c:78:06:c2:df:63:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e4f7b9229c5d6583880840b70c96a508fd07fe
Validity
Not Before: Nov 29 01:42:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0e3a6183556603f43451f38276d7b3d8ab7fec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:b5:3f:6c:96:21:ea:ba:2d:d9:bc:96:8a:
c6:ed:64:7f:d0:af:9d:3a:6c:3b:5f:aa:85:fe:55:
6c:77:25:52:07:1f:47:a5:4c:c2:47:fb:a3:7d:39:
40:5c:bc:93:ce:0e:61:be:db:cc:e6:8c:e9:a1:53:
54:ac:13:97:5d:58:ae:4f:b2:c9:f1:74:e8:ce:81:
a0:03:65:0f:1e:3c:f0:af:ff:e1:89:de:4e:25:c5:
a8:e6:11:1b:47:28:1d:9d:73:68:68:81:52:97:91:
c1:73:06:63:1f:58:54:c9:92:05:8c:10:24:05:2f:
d1:c9:33:b7:d8:92:52:2e:68:e2:f8:11:81:34:d1:
52:98:9b:a8:8b:a7:43:74:67:46:5a:ff:0a:79:d2:
6a:c0:3a:3b:75:f7:28:2b:56:50:83:f4:47:7d:6e:
50:db:f4:b1:24:1b:7e:51:8b:45:0e:ba:cf:75:58:
81:0a:d4:fa:4a:a2:0b:f5:14:e6:b6:75:2a:81:af:
df:6e:bf:d4:95:bc:0a:48:2c:98:33:17:82:e4:f8:
c3:d1:ff:72:86:b8:f8:d6:c7:92:50:1e:16:e1:ae:
7f:76:c3:49:71:aa:c6:27:93:ae:37:65:59:29:fe:
c3:a2:cb:49:83:e5:9d:59:26:43:a1:aa:2b:ac:d3:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E3:A6:18:35:56:60:3F:43:45:1F:38:27:6D:7B:3D:8A:B7:FE:C7
X509v3 Authority Key Identifier:
keyid:72:E4:F7:B9:22:9C:5D:65:83:88:08:40:B7:0C:96:A5:08:FD:07:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuT3uSKcXWWDiAhAtwyWpQj9B_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b226a-94b4-4111-8b57-c81ddcb454bc/1/4OOmGDVWYD9DRR84J217PYq3_sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b226a-94b4-4111-8b57-c81ddcb454bc/1/cuT3uSKcXWWDiAhAtwyWpQj9B_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:afc::/48
2a10:4a80::/32
Signature Algorithm: sha256WithRSAEncryption
0a:8d:80:09:1d:6f:4e:16:29:26:b8:1e:3c:30:ad:f1:77:cc:
42:60:43:a1:ed:54:0f:f5:ed:e9:e7:d5:c1:82:d8:02:e8:72:
56:f1:ec:79:ca:a1:3b:19:05:7c:46:4e:31:27:fe:89:a9:82:
4e:79:e8:0c:0b:62:98:3d:13:d2:7f:d9:6d:94:10:02:e3:5f:
89:cf:4f:98:41:7c:cd:42:d7:35:34:4c:dc:8c:10:8e:2b:51:
86:76:c4:c6:be:f4:91:3e:7e:50:0c:3f:4a:fa:57:d3:13:42:
5f:b0:ea:89:89:46:c5:0a:26:37:fd:ce:cb:81:f1:39:4a:7b:
c4:1d:9d:20:82:8b:29:5b:45:7e:eb:e5:d9:35:fc:af:8b:09:
15:a2:99:c2:a9:0d:f4:16:8b:c7:d8:9e:33:7c:31:8d:be:33:
27:95:ed:35:4d:a9:27:0b:ec:3e:fe:fb:82:0a:34:68:55:f9:
46:04:ff:bf:c3:03:c6:83:50:7d:32:4e:34:9b:68:ab:99:1a:
81:c8:fd:9e:be:49:df:86:f6:51:ec:80:b4:95:59:c5:9b:0f:
c9:5b:b8:1c:89:75:3c:61:da:13:80:dc:e8:fa:4c:bc:5a:ab:
94:cc:29:93:91:55:19:24:2a:0f:51:ed:39:b7:f8:17:ee:91:
e6:3b:64:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:03 2025 by rpki-client