Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/oRsHwl0lqDdQsW8I1c5igLUyNzs.roa
File: oRsHwl0lqDdQsW8I1c5igLUyNzs.roa (raw, json)
Hash identifier: 8g9A+Hdue1idAErOv1qWZKgEKPMgG/A4+RlDqNfgnkI=
Subject key identifier: A1:1B:07:C2:5D:25:A8:37:50:B1:6F:08:D5:CE:62:80:B5:32:37:3B
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 01948400B54F996448381BD944DF3B097AFC
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/oRsHwl0lqDdQsW8I1c5igLUyNzs.roa
Signing time: Mon 20 Jan 2025 13:57:06 +0000
ROA not before: Mon 20 Jan 2025 13:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25135
IP address blocks: 2a01:840::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:84:00:b5:4f:99:64:48:38:1b:d9:44:df:3b:09:7a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Jan 20 13:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a11b07c25d25a83750b16f08d5ce6280b532373b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:3d:3e:b6:5c:3f:aa:c9:35:6e:b8:4b:69:
f5:f5:c1:8f:71:1f:0b:6d:05:47:30:b0:5e:fd:ba:
f8:f2:93:70:b2:de:ee:a1:58:fe:23:21:45:71:a5:
d5:8d:37:57:72:49:ae:2c:69:ae:9f:6f:a5:c4:73:
67:df:78:5c:63:36:2c:92:90:f5:89:84:87:04:5c:
65:6c:57:05:b3:9f:c1:78:dc:e2:d0:f9:3e:00:b2:
bd:24:eb:30:00:3a:b5:cc:60:50:4f:b7:33:17:cd:
d0:7d:8c:33:14:24:7e:ff:8a:01:ab:05:ed:2e:cf:
71:04:be:0d:5a:2d:ec:8a:23:c3:d8:51:8b:c0:5d:
5d:88:ec:a9:e9:df:46:a6:7b:a5:b4:6b:90:f3:b6:
96:a3:4c:29:6f:df:59:40:56:92:91:b5:91:0e:54:
c6:33:90:21:27:2e:7d:b6:7d:fa:60:3b:3d:3d:35:
9a:fa:ce:9a:54:42:ae:f6:c6:e6:d7:9d:3f:cc:ed:
d3:25:16:13:c1:ad:fa:04:b0:29:59:b1:75:d9:5c:
92:4f:ef:01:b6:6e:ac:37:8d:72:dc:f9:c5:f1:5f:
b0:7a:74:4c:e0:1e:4b:74:35:ff:c0:49:b4:19:33:
59:ce:03:41:12:b1:9d:2d:e1:64:27:c5:b0:37:41:
b4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1B:07:C2:5D:25:A8:37:50:B1:6F:08:D5:CE:62:80:B5:32:37:3B
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/oRsHwl0lqDdQsW8I1c5igLUyNzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:840::/32
Signature Algorithm: sha256WithRSAEncryption
00:a5:e8:e3:bc:57:53:54:7f:f3:08:f0:ec:8b:5b:f1:d7:93:
97:97:37:aa:3d:5c:02:63:a2:7d:3a:12:19:f9:69:25:a0:0f:
e6:da:e6:65:e1:dd:9e:13:61:ff:bc:c5:3a:f7:ed:bd:94:80:
b9:eb:ff:f8:1c:6a:c2:dc:10:14:ea:06:ea:8a:e7:87:99:03:
15:65:8f:f7:5c:87:1e:a0:6f:ef:c3:0f:f1:cb:32:ca:48:cb:
46:7d:0b:9b:df:37:54:a2:95:1e:50:e3:bc:f9:bb:f9:aa:07:
f8:06:7d:45:0d:29:e0:6c:3d:f5:9b:e7:55:d7:16:9f:6f:dc:
81:09:16:df:ba:0c:b5:f3:ae:32:f6:4e:cd:96:9a:d5:7a:87:
e6:ca:f6:5f:9f:3f:46:b6:51:e9:8b:8a:ba:bb:8c:8d:2c:d6:
3b:a4:a9:a0:c1:ba:5e:e4:8d:3e:ce:ad:1b:1a:b3:45:41:88:
df:fa:81:1d:38:5f:2b:ef:e0:76:68:a4:81:5b:92:59:ac:95:
c4:0c:0c:8b:75:49:69:6c:87:3c:b6:78:1a:02:10:61:c4:f9:
6a:8a:69:cc:39:80:44:ab:92:a1:fc:32:87:22:51:75:c7:02:
53:81:c5:50:9e:86:49:61:dd:74:58:a0:a8:d4:3f:b1:04:37:
89:eb:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:59:59 2025 by rpki-client