Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/OKEgLmB_4ei0G0uw28caa8G3iPw.roa
File: OKEgLmB_4ei0G0uw28caa8G3iPw.roa (raw, json)
Hash identifier: w8AbZTm+uTbT/9sxDIvDozMxX1t2Mfifb772t5Mh9zE=
Subject key identifier: 38:A1:20:2E:60:7F:E1:E8:B4:1B:4B:B0:DB:C7:1A:6B:C1:B7:88:FC
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01941FFA6988F0D411687670893960F753C6
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/OKEgLmB_4ei0G0uw28caa8G3iPw.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206074
IP address blocks: 2a0e:d784::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:69:88:f0:d4:11:68:76:70:89:39:60:f7:53:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38a1202e607fe1e8b41b4bb0dbc71a6bc1b788fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:4c:6c:4d:ad:4e:bf:20:78:65:14:3e:df:
9c:11:58:47:72:7d:17:86:a1:df:a4:63:c2:d2:34:
bc:d5:ce:17:a8:73:ac:d6:9d:e2:94:26:f2:85:01:
ac:d5:89:58:26:2a:1e:00:33:76:b0:49:81:d7:f1:
d2:9d:39:78:99:c2:9a:bd:96:b4:0b:fe:8e:8b:72:
7a:b0:f1:ea:3c:fc:61:20:48:bb:96:60:19:2e:11:
38:2e:3c:ff:79:15:aa:9f:f8:4a:21:c2:00:c9:38:
64:ab:52:64:1d:16:9e:a7:63:fb:0b:5c:65:0f:bc:
a7:55:41:16:53:d4:e5:e6:07:ce:00:c1:10:15:21:
1d:1e:e9:c3:a5:4f:06:f8:ec:02:6d:1a:22:31:7c:
09:de:a4:6d:2a:b4:5a:52:cd:af:d8:f9:32:32:d7:
4b:c8:09:77:57:bc:91:b4:ae:1f:55:db:76:9d:3b:
5a:a7:b3:7b:76:70:bb:81:ac:23:11:19:b3:7b:4e:
bd:c1:5e:49:23:b4:8f:f8:10:19:06:4c:c1:82:e6:
bc:cb:04:79:16:87:bb:7f:3c:6e:35:71:76:0e:ff:
39:59:f0:d6:5a:12:1f:81:dc:22:06:1c:70:8b:aa:
7a:65:55:d7:16:4a:46:d7:e4:08:a1:1a:90:f8:ff:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A1:20:2E:60:7F:E1:E8:B4:1B:4B:B0:DB:C7:1A:6B:C1:B7:88:FC
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/OKEgLmB_4ei0G0uw28caa8G3iPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d784::/32
Signature Algorithm: sha256WithRSAEncryption
8f:8c:c4:2f:61:90:71:d5:35:52:1d:77:40:94:f6:a5:c0:92:
0a:5b:fc:96:66:06:54:2b:fd:93:68:69:51:62:a8:58:37:30:
90:72:33:d5:54:fc:c3:d9:d0:45:9d:d5:f3:99:f3:75:25:01:
d5:63:10:fd:5e:6c:18:36:c6:f1:ed:c4:a1:c8:c1:0c:21:a9:
2a:d6:f6:a8:2b:66:54:4f:21:a4:70:95:7e:0f:44:16:31:ee:
6d:19:70:20:a8:c5:92:37:ce:5f:a6:9b:e5:cf:1e:6d:39:61:
ac:18:4a:15:31:b0:45:fd:ca:11:cd:b5:7f:7a:7d:21:37:89:
73:1f:02:be:a1:dd:97:db:cd:6e:85:0f:43:37:17:f8:b8:61:
f2:ce:f0:96:c2:8c:58:07:69:f4:d5:ef:82:f0:16:e1:aa:b8:
01:94:7f:a0:0a:c9:42:c9:a7:35:c9:f8:78:4f:1f:aa:08:66:
5c:03:d7:c1:1a:d2:42:5b:21:e1:03:46:08:65:ad:97:76:e2:
82:6b:a3:2c:2e:06:60:a5:88:03:4d:5a:60:ea:67:0f:b0:7b:
a2:20:cb:4e:18:57:90:fb:f7:38:65:07:57:cc:88:08:3e:62:
ce:da:51:bd:83:87:4b:ab:5e:2f:59:ee:63:a4:6c:5d:25:c9:
72:f2:34:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:35 2025 by rpki-client