Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/olkLP6MGPblkTjL6uDU6oF873bo.roa
File: olkLP6MGPblkTjL6uDU6oF873bo.roa (raw, json)
Hash identifier: DKv4+h6HIkXs58+j8w8a5OzOduSbTlB7KTntEEBBUrM=
Subject key identifier: A2:59:0B:3F:A3:06:3D:B9:64:4E:32:FA:B8:35:3A:A0:5F:3B:DD:BA
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA9CBBD7E9BF4E588F587B4A201135
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/olkLP6MGPblkTjL6uDU6oF873bo.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211367
IP address blocks: 2a0c:b641:180::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9c:bb:d7:e9:bf:4e:58:8f:58:7b:4a:20:11:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2590b3fa3063db9644e32fab8353aa05f3bddba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:7c:7d:c6:0e:51:8f:de:f0:f9:28:4f:b7:
cd:86:c4:d3:76:9c:3c:1c:2f:6b:56:8a:83:00:cd:
46:15:ca:6b:17:68:27:08:46:9f:13:d2:ad:e6:ec:
80:73:62:d5:c8:d6:be:c4:65:5e:52:64:73:39:49:
12:ab:be:69:5e:e1:65:f6:84:44:09:a0:cd:cc:9d:
ac:dd:c1:6d:74:00:5f:55:29:df:37:24:78:94:ec:
fe:56:03:56:bf:49:cf:d8:68:89:0f:fc:97:b2:49:
88:a2:c3:1c:d9:ea:77:26:cc:2a:b8:54:de:9e:d2:
de:6a:d4:b0:3e:0b:e1:39:aa:f1:ce:b9:5d:07:c2:
0c:65:cf:81:c4:8f:d1:a3:d7:97:e0:bb:b4:89:71:
e3:b6:79:3d:fb:55:fd:c5:0b:7e:dd:8a:69:44:83:
a8:1c:0e:06:e3:bd:79:83:cd:29:d9:cd:ce:c6:45:
17:f9:0d:2b:d3:23:d8:d3:3f:95:a9:cf:cb:79:dd:
4b:e9:28:06:a1:e3:ab:df:a6:7a:8c:d0:93:d5:3e:
56:cc:32:a8:90:b2:a2:db:81:3a:8e:47:0d:d7:7e:
94:b1:6b:89:a5:41:26:72:5c:77:81:d7:69:27:65:
eb:ac:97:bd:a4:f7:3f:58:73:00:83:2a:0e:82:02:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:59:0B:3F:A3:06:3D:B9:64:4E:32:FA:B8:35:3A:A0:5F:3B:DD:BA
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/olkLP6MGPblkTjL6uDU6oF873bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:180::/44
Signature Algorithm: sha256WithRSAEncryption
86:94:e1:2e:8e:75:d1:61:0e:46:6b:3f:30:3b:9a:6c:67:49:
ae:17:e9:e2:0c:4e:5d:d8:66:32:b5:04:79:f6:bd:0b:77:da:
90:d9:54:30:0e:90:4f:8d:a3:2c:19:d3:89:df:e1:37:50:a1:
83:9b:04:d1:8c:22:70:52:12:dc:8e:46:f0:7a:b8:9e:d9:c2:
db:53:17:86:1f:c7:2d:c1:7e:2f:86:d7:41:04:0a:da:ee:68:
d6:ba:00:be:a5:7c:71:85:bb:61:49:fd:e6:10:4a:94:1b:54:
f3:9e:d5:e9:77:ac:a0:95:30:8d:f5:a1:33:56:23:16:7b:6e:
34:70:12:a6:9e:16:40:ff:b1:be:5e:ae:cb:49:7f:29:c7:b0:
05:db:fa:a3:65:28:13:c9:76:10:92:a5:39:2d:73:e1:50:31:
b7:1e:38:a7:23:80:9b:5c:f4:19:54:de:61:47:58:b0:b1:54:
e8:35:ed:68:14:a3:09:d6:58:99:73:3a:ee:0c:1d:80:a0:b6:
ea:2b:37:1d:47:c1:e2:4c:a7:79:31:53:26:a7:78:7d:da:ed:
77:08:63:d8:00:34:93:62:0b:54:aa:b2:2a:3a:e3:c0:5e:c2:
ca:9d:70:ac:ec:67:5b:d8:9b:1b:12:17:3c:80:f4:d3:2e:e4:
79:1c:16:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:45 2025 by rpki-client