Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/OWXYykmlPDxYaUK6ibOA62-hDng.roa
File: OWXYykmlPDxYaUK6ibOA62-hDng.roa (raw, json)
Hash identifier: x4BvE6J+LBS4eTxuz/ILECCYgRYsxbKFwFccG0CtiDI=
Subject key identifier: 39:65:D8:CA:49:A5:3C:3C:58:69:42:BA:89:B3:80:EB:6F:A1:0E:78
Certificate issuer: /CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Certificate serial: 0194252220E5FE435B94AE8677C7596396EE
Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/OWXYykmlPDxYaUK6ibOA62-hDng.roa
Signing time: Thu 02 Jan 2025 03:49:41 +0000
ROA not before: Thu 02 Jan 2025 03:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60150
IP address blocks: 2001:678:6bc::/48 maxlen: 48
2001:678:ef0::/48 maxlen: 48
2001:678:ef4::/48 maxlen: 48
2001:678:ef8::/48 maxlen: 48
2001:67c:270::/48 maxlen: 48
2001:67c:28a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:20:e5:fe:43:5b:94:ae:86:77:c7:59:63:96:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Validity
Not Before: Jan 2 03:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3965d8ca49a53c3c586942ba89b380eb6fa10e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:be:8e:b9:f8:51:af:df:51:d7:5c:a4:db:
be:3c:14:19:f8:05:2d:a6:29:ec:1a:f9:ca:ca:15:
34:78:13:37:6d:27:31:62:de:65:f5:17:ba:92:cd:
2d:36:d5:83:b8:57:6b:16:4e:dd:55:74:b3:3a:ea:
fb:de:17:31:06:4c:58:36:c0:88:93:ee:ee:72:b8:
33:cd:d4:e5:b8:13:3d:a1:b2:51:ae:44:e5:c8:88:
ae:d1:6c:7e:2e:bf:80:7e:34:95:dc:e1:80:77:62:
04:f8:5d:c6:9d:9f:b0:70:7a:ce:f8:30:6b:2b:60:
88:1d:f3:e1:f6:b7:b2:9b:75:8d:88:9f:da:19:da:
23:cb:28:8a:00:47:04:c0:53:f1:d9:b0:c4:76:4b:
a9:99:a6:88:e6:10:4e:fb:ac:cb:24:31:4b:73:ff:
61:47:0e:bb:31:7c:c7:c0:2a:90:16:15:ae:55:15:
89:3f:f8:96:53:88:a0:2f:a1:11:ee:8e:5d:8a:00:
3d:4f:d0:51:77:97:3d:cd:2a:8c:6d:5e:a4:54:74:
28:dc:c4:6b:d8:fc:53:f1:ff:9d:00:19:b0:38:ea:
e2:12:48:e2:72:3d:44:49:7a:14:2c:5c:5f:91:25:
4d:37:ec:96:70:18:5f:f8:48:81:07:f2:71:b8:0d:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:65:D8:CA:49:A5:3C:3C:58:69:42:BA:89:B3:80:EB:6F:A1:0E:78
X509v3 Authority Key Identifier:
keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/OWXYykmlPDxYaUK6ibOA62-hDng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:6bc::/48
2001:678:ef0::/48
2001:678:ef4::/48
2001:678:ef8::/48
2001:67c:270::/48
2001:67c:28a0::/48
Signature Algorithm: sha256WithRSAEncryption
48:6b:32:f5:3c:d4:75:4c:e1:57:d9:a8:d8:f7:37:19:6b:01:
ad:27:bc:75:f1:b1:35:b4:a3:2d:c3:c4:45:dd:4f:22:57:c7:
88:63:a8:b7:1e:79:5b:3d:82:5b:1f:34:8a:56:af:a2:4d:99:
5e:82:8d:49:a2:d7:36:d1:5c:65:7f:e2:07:71:ae:98:b9:f8:
75:e7:c4:d1:50:e7:14:3a:73:bf:24:70:63:e2:79:3b:2a:64:
d7:b3:a7:ea:75:81:89:84:5a:1a:fc:da:3d:2e:59:9e:2c:6f:
11:9e:df:d1:03:1a:a8:c0:cc:86:39:b3:c7:c6:65:61:3e:dc:
4d:2b:b6:4b:33:0c:db:33:01:49:cf:ed:22:14:7b:36:c2:d9:
ba:cb:44:00:e6:64:10:e1:c0:6a:a5:cd:d4:28:d6:e0:f6:51:
5e:74:66:d2:76:0a:4b:5c:35:e1:96:9a:c7:84:b8:bf:5b:86:
c9:8e:91:16:44:8b:2d:f4:b9:e1:b0:37:7e:67:06:4d:28:ff:
64:d7:e0:03:4a:59:85:89:7a:12:a2:80:2d:63:39:cf:24:21:
17:41:58:cc:c8:a2:ad:4d:c4:87:49:57:fd:99:65:33:62:f5:
09:ca:88:ba:36:b5:65:d5:77:3c:20:f2:d1:13:4d:e9:6a:4e:
0e:83:ed:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:56:14 2025 by rpki-client