Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/061535-6e14-4f66-ada1-abd5f0850d31/1/OEsJhMwRJkIR92wWIYE2ncQtrzs.roa
File: OEsJhMwRJkIR92wWIYE2ncQtrzs.roa (raw, json)
Hash identifier: 9vt4q79G7qHxeV9w5tjflMb8yGsuM7bEjbl1CxJ8ejs=
Subject key identifier: 38:4B:09:84:CC:11:26:42:11:F7:6C:16:21:81:36:9D:C4:2D:AF:3B
Certificate issuer: /CN=4b43db271cffc3cb3ca4e8912868f97a240f6a73
Certificate serial: 018CC3495297770F820ADAB0585150D3CC5C
Authority key identifier: 4B:43:DB:27:1C:FF:C3:CB:3C:A4:E8:91:28:68:F9:7A:24:0F:6A:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0PbJxz_w8s8pOiRKGj5eiQPanM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/061535-6e14-4f66-ada1-abd5f0850d31/1/OEsJhMwRJkIR92wWIYE2ncQtrzs.roa
Signing time: Mon 01 Jan 2024 04:30:11 +0000
ROA not before: Mon 01 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49747
IP address blocks: 2001:67c:c6c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:52:97:77:0f:82:0a:da:b0:58:51:50:d3:cc:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b43db271cffc3cb3ca4e8912868f97a240f6a73
Validity
Not Before: Jan 1 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=384b0984cc11264211f76c162181369dc42daf3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fe:cd:bc:6a:65:94:43:c3:fd:49:77:7c:70:
45:27:fe:58:14:ec:ee:93:57:bb:ac:4b:01:13:0e:
eb:03:4e:90:de:ac:57:00:a6:3b:24:70:50:1e:44:
2e:dc:ca:b1:f6:15:df:60:04:3e:70:fb:97:b9:7a:
89:ed:d8:33:5a:4d:31:fb:3a:c4:c3:e5:4c:15:59:
47:4b:f1:48:82:dc:d3:ff:da:44:52:f0:da:28:fe:
df:4c:c0:0d:81:1c:67:8e:f7:73:e7:fb:c5:82:cf:
84:d8:42:c6:df:af:54:40:60:46:1c:45:f2:2d:ba:
84:6f:09:1c:a6:35:70:e7:28:9d:aa:f6:9c:a4:b3:
05:ef:2d:5e:40:7f:ea:c0:0f:f3:de:44:a8:e9:ee:
8a:99:87:07:3b:a3:0f:14:31:54:24:13:cb:99:9f:
87:5a:8c:70:6b:09:e0:5e:64:c1:bc:e9:c0:93:15:
4e:55:a2:b9:b6:72:6c:a1:07:4d:da:03:1b:07:03:
80:41:3c:c0:ae:ec:a1:3c:05:02:e0:8a:01:56:cb:
41:d3:9e:e2:36:c6:d4:e2:a8:97:16:11:0b:9c:0d:
79:29:08:f1:7d:13:e4:f8:67:fa:21:f4:62:56:18:
7d:40:e3:8b:bb:95:0e:56:99:b1:1d:b2:0e:e2:08:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4B:09:84:CC:11:26:42:11:F7:6C:16:21:81:36:9D:C4:2D:AF:3B
X509v3 Authority Key Identifier:
keyid:4B:43:DB:27:1C:FF:C3:CB:3C:A4:E8:91:28:68:F9:7A:24:0F:6A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0PbJxz_w8s8pOiRKGj5eiQPanM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/061535-6e14-4f66-ada1-abd5f0850d31/1/OEsJhMwRJkIR92wWIYE2ncQtrzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/061535-6e14-4f66-ada1-abd5f0850d31/1/S0PbJxz_w8s8pOiRKGj5eiQPanM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c6c::/48
Signature Algorithm: sha256WithRSAEncryption
92:15:74:d2:96:b7:dd:70:8e:c4:46:13:35:55:c0:f7:9f:88:
92:1c:77:e5:9b:fb:0e:49:f8:f0:ed:2c:34:9d:f2:00:bc:44:
09:21:f0:9c:21:98:95:5c:ad:00:ea:6b:6f:4f:b8:28:e5:5c:
71:4b:b8:5b:93:f4:5a:a7:1f:6a:c5:1d:8c:81:e9:09:ab:ac:
86:ae:9b:a9:7f:a8:19:b4:cc:8e:97:ed:83:57:6c:1f:28:01:
73:42:67:93:7b:af:90:62:d2:3c:2f:17:9d:7e:6e:f3:46:0e:
3a:d4:f3:a8:a6:ff:e7:95:7d:37:84:91:0b:bd:e5:81:dc:ca:
2a:13:16:b9:88:f8:2d:23:5d:87:fd:e2:bb:43:ec:d3:36:76:
a0:1f:17:54:7a:c5:8b:29:32:2a:f4:39:1f:0f:8f:48:e4:39:
e7:a3:81:89:e0:39:53:8e:bd:af:08:50:fc:f6:3c:a2:a3:68:
78:f6:5f:b7:fb:5e:e1:12:83:51:37:44:e1:42:90:a0:87:ee:
af:b4:12:1f:70:b3:06:a7:61:a6:e7:95:21:99:a3:19:3a:94:
86:4f:b0:91:3e:f3:61:6c:a9:0b:2b:b9:5e:76:7b:d2:c9:43:
b0:bf:4a:cc:d8:41:9f:f0:2c:2c:fa:8a:b5:4c:b5:3e:17:30:
f1:23:37:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:44 2025 by rpki-client