Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/i0OpGL6o9siQU9k8jbmuQiPpOOw.roa
File: i0OpGL6o9siQU9k8jbmuQiPpOOw.roa (raw, json)
Hash identifier: jgZAPRJyPw+LpYm6mw4QOAGT6CLfAJ3m4VbuEluN/rg=
Subject key identifier: 8B:43:A9:18:BE:A8:F6:C8:90:53:D9:3C:8D:B9:AE:42:23:E9:38:EC
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 019427480E981ADDAC77B4B070F0B5A9C5BB
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/i0OpGL6o9siQU9k8jbmuQiPpOOw.roa
Signing time: Thu 02 Jan 2025 13:50:21 +0000
ROA not before: Thu 02 Jan 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57934
IP address blocks: 2a13:b487:1000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0e:98:1a:dd:ac:77:b4:b0:70:f0:b5:a9:c5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b43a918bea8f6c89053d93c8db9ae4223e938ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:4c:81:49:cf:84:f7:b5:dc:bb:07:b4:80:
b3:c0:54:98:35:50:10:5f:45:72:01:eb:02:28:8e:
a9:e8:2b:70:29:ee:c1:0c:27:94:5a:e8:43:5c:91:
f6:ce:c9:3f:28:b7:4d:e9:22:77:2a:7f:e1:d3:da:
fc:63:cc:23:93:ac:df:db:f1:07:cc:cf:f4:84:e9:
3e:87:c8:66:81:4f:81:b7:09:a9:14:2a:65:38:0d:
d4:27:83:ba:2e:5e:11:53:d0:a7:c8:eb:79:60:d0:
20:54:d2:dd:81:1c:08:22:b8:bf:0a:c8:2d:87:90:
1e:2d:a8:76:f8:68:fe:cd:25:7b:bd:42:da:35:cf:
dc:5b:9a:dc:f5:4a:ae:c5:40:5b:a4:b0:6b:76:6c:
0b:16:08:19:94:f2:67:be:29:80:5d:04:c8:84:2a:
3f:33:c6:22:69:e9:89:f7:e5:5e:31:cc:20:3a:bf:
b1:46:8d:49:47:f0:3b:73:88:cb:0a:93:d7:ff:2c:
a2:13:87:94:57:a7:72:ad:36:10:f9:dc:dd:e9:cc:
0b:14:8c:0b:64:b2:be:24:51:e0:a5:83:1c:21:75:
bf:b9:64:fc:45:f8:7f:53:0e:c0:ad:03:d0:c5:11:
d1:42:ed:f6:62:90:7b:d6:94:6e:df:5c:c2:f5:0e:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:43:A9:18:BE:A8:F6:C8:90:53:D9:3C:8D:B9:AE:42:23:E9:38:EC
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/i0OpGL6o9siQU9k8jbmuQiPpOOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1000::/40
Signature Algorithm: sha256WithRSAEncryption
1d:81:d6:c6:f0:a7:01:7e:92:ac:4f:6b:15:2c:20:81:8a:fa:
1c:23:71:7c:61:a6:ca:96:6a:04:78:db:db:66:f1:8e:53:e9:
eb:e1:4f:d1:66:1a:5d:66:d5:c5:2d:0e:17:06:42:84:3e:5c:
e5:45:76:91:5f:15:8e:81:eb:43:82:af:bb:60:c6:61:21:3b:
ec:a3:55:cb:8c:08:23:52:f3:55:e4:39:23:a3:2d:a3:65:a3:
68:a2:8e:8e:40:77:de:6c:cf:d3:5a:91:50:19:fd:e9:fa:07:
2a:22:18:71:d7:08:58:70:bc:16:4b:5c:d2:78:29:f3:6d:08:
ef:1f:0a:ca:b0:08:48:36:1c:56:39:62:90:1f:b4:60:88:b3:
65:ee:ba:67:35:10:e4:2a:0b:80:b3:89:7a:05:47:5b:79:40:
19:49:f2:3b:e2:bd:6f:c8:73:5b:ec:bc:bf:91:39:e5:af:60:
76:ea:bd:bb:ba:2d:9e:e7:60:7a:41:5d:7a:89:34:66:4a:93:
77:fe:f0:d1:4a:d8:b0:aa:44:02:29:2d:ee:3d:7a:4d:b4:2c:
74:3a:a4:b9:ad:cc:86:8f:a2:1f:33:f9:1c:fd:40:49:03:11:
7f:95:bd:e8:42:d8:c6:93:38:71:21:88:e3:c4:47:2f:e3:4c:
a5:98:e6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:39 2025 by rpki-client