Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/_0OJmOIgEUJ_oBhjR5TkhLM6ICY.roa
File: _0OJmOIgEUJ_oBhjR5TkhLM6ICY.roa (raw, json)
Hash identifier: /N6XbYZuA9xTXlI/nyuJuqmja81o8xCJifTJkiVv460=
Subject key identifier: FF:43:89:98:E2:20:11:42:7F:A0:18:63:47:94:E4:84:B3:3A:20:26
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747CFB0B919163FDD7D792A49EC4E6B
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/_0OJmOIgEUJ_oBhjR5TkhLM6ICY.roa
Signing time: Thu 02 Jan 2025 13:50:05 +0000
ROA not before: Thu 02 Jan 2025 13:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35029
IP address blocks: 2a0b:b86:ffc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cf:b0:b9:19:16:3f:dd:7d:79:2a:49:ec:4e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff438998e22011427fa018634794e484b33a2026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:6f:89:69:2b:f1:d5:39:47:66:dc:a9:0a:
2b:3d:65:94:e0:af:a8:5c:f8:30:78:ae:01:0c:26:
11:04:b1:3b:86:bf:83:6a:53:6c:9b:b2:61:e5:4c:
24:90:3f:ee:a3:a8:92:46:39:e2:d2:d4:2e:8f:a3:
50:00:52:06:d0:3b:91:d4:a9:40:88:9e:1d:b2:6f:
3e:bc:bb:0e:ed:9d:14:6a:24:ff:c6:59:5c:de:d0:
ce:f8:99:71:a8:28:88:39:77:a8:e4:1b:bb:b3:9a:
6a:7f:14:f3:12:32:6f:90:f8:12:74:fb:b4:ae:fc:
bb:d7:65:57:fb:72:b9:71:5c:00:b1:5b:43:e2:6f:
3e:9d:24:0b:33:9f:88:46:f3:97:17:cf:3c:7c:08:
86:78:ad:26:79:38:18:68:97:52:c3:a4:e1:8e:56:
52:3f:48:3b:43:e2:60:1d:3c:e5:ac:24:71:fc:74:
d2:bc:a6:b1:b0:bf:a1:c4:0b:79:a8:1e:51:cc:42:
92:90:e4:fe:6c:29:07:bd:1d:a6:ea:a4:6f:5e:7c:
be:14:5c:56:84:ef:0f:98:f9:ba:25:27:86:f6:2b:
b3:12:13:7f:67:e5:2a:6a:b7:62:12:4c:f6:96:b4:
a5:5c:e6:a7:8a:33:64:9f:cd:a7:09:b3:c0:49:43:
c4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:43:89:98:E2:20:11:42:7F:A0:18:63:47:94:E4:84:B3:3A:20:26
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/_0OJmOIgEUJ_oBhjR5TkhLM6ICY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b86:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
11:c5:4b:47:04:cf:c1:8d:e7:a2:4c:ae:3a:af:5b:52:87:fb:
d0:cb:65:0e:d1:5f:dc:84:e9:69:59:59:43:3f:a3:5e:f0:2d:
20:84:e4:95:1c:5c:32:0e:bc:82:87:45:bd:55:19:ca:6b:ce:
fd:03:b0:53:4e:84:6d:06:a6:bd:e5:32:9d:49:6d:c0:37:60:
48:a7:9e:59:00:2d:87:a4:fd:7d:17:ce:34:90:c5:79:6c:8f:
33:6c:a4:14:34:a8:9b:ce:98:cd:b5:2a:5d:7e:7e:dc:e2:7b:
9c:e4:d6:e7:17:bb:30:13:24:a1:0b:72:09:21:c7:5b:43:d4:
60:57:23:83:3b:b9:f4:13:79:07:fb:53:54:12:b9:18:b8:b6:
59:42:f7:52:f1:82:f3:4c:36:f5:3c:a7:c8:f5:0d:e9:19:3f:
f9:65:0a:ff:f6:e2:9b:a8:c7:29:57:88:b8:c5:70:7d:b7:70:
df:b3:46:28:d4:97:27:a5:21:5a:4d:22:78:ba:5e:2d:a0:44:
9f:a5:df:bf:4d:3a:6d:c6:31:c2:df:7e:28:52:65:f3:ba:a7:
3c:07:93:b9:53:24:77:a0:5d:b8:58:3e:6b:78:f9:a8:1c:b8:
19:29:7b:66:62:b9:3c:22:d2:8a:0a:e1:69:36:a1:af:3d:f2:
45:92:91:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:52:19 2025 by rpki-client