Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/bOWi-Km4EdNL2RWwyu6fkO8cIac.roa
File: bOWi-Km4EdNL2RWwyu6fkO8cIac.roa (raw, json)
Hash identifier: bBX5W0vrQkhD//eKPSX/Grh0TmEf+XdqKDRiX0ii7jA=
Subject key identifier: 6C:E5:A2:F8:A9:B8:11:D3:4B:D9:15:B0:CA:EE:9F:90:EF:1C:21:A7
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 019421444BA3A83BA440B0CB4E5357CF9119
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/bOWi-Km4EdNL2RWwyu6fkO8cIac.roa
Signing time: Wed 01 Jan 2025 09:48:31 +0000
ROA not before: Wed 01 Jan 2025 09:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198150
IP address blocks: 2a00:1c28:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4b:a3:a8:3b:a4:40:b0:cb:4e:53:57:cf:91:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ce5a2f8a9b811d34bd915b0caee9f90ef1c21a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:e6:a7:aa:60:72:8f:b1:cb:52:8e:be:10:
10:68:2f:b0:be:2b:d0:87:9c:be:b1:ac:1a:82:f4:
8f:42:d5:8b:2e:20:4f:64:22:eb:cc:98:f6:f1:fd:
ca:f7:e3:14:ac:db:5d:01:c6:df:75:ab:50:1c:40:
58:c9:b2:7b:97:71:fe:10:b9:ab:b3:f2:fa:4c:33:
be:5c:53:1d:18:cb:5a:47:f3:21:aa:d0:a8:e7:7f:
35:35:f1:01:e4:8f:4e:cd:16:a9:8a:28:21:b1:4e:
f7:f1:9d:17:51:d6:24:83:88:6d:2c:55:7b:2d:fd:
1c:df:4e:46:02:5a:3a:1e:b3:05:d8:3e:89:d3:fa:
f7:c4:04:d5:5b:99:4f:ac:7a:c0:5b:f7:7c:85:67:
bf:fa:37:30:1e:ab:6e:ee:61:12:b6:1f:40:74:45:
4d:21:49:a8:84:d3:57:02:ad:d8:22:81:8e:36:a9:
3a:98:a9:07:33:4d:8e:75:c8:8c:c0:96:66:e7:86:
ad:66:8c:5c:b4:1e:b3:24:be:00:f8:ce:c7:82:e9:
f1:53:6f:74:7e:de:d3:92:e2:cd:f2:9c:e8:48:be:
0d:15:42:2b:a3:02:b4:e5:28:83:78:df:87:6a:7e:
46:a3:36:83:b1:c6:82:ac:35:4b:f6:f2:76:46:83:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E5:A2:F8:A9:B8:11:D3:4B:D9:15:B0:CA:EE:9F:90:EF:1C:21:A7
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/bOWi-Km4EdNL2RWwyu6fkO8cIac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1c28:6::/48
Signature Algorithm: sha256WithRSAEncryption
d5:5b:7d:6a:74:a4:19:a3:bb:29:ec:c5:ae:8d:cf:ee:3d:1b:
37:b7:10:33:ef:7b:e6:8f:78:58:cb:f9:8b:53:16:ad:b7:d3:
58:c5:ed:5c:a3:65:de:b8:f8:00:18:34:65:58:1e:8d:00:cb:
a7:94:33:55:00:9a:f3:42:ee:20:db:df:34:05:f5:90:cb:ea:
14:a6:0c:2b:d6:cb:9c:5d:06:8f:fc:e7:03:df:f7:34:b5:96:
81:93:c7:5c:06:42:58:e7:45:66:1b:f9:ac:fc:fe:c7:6c:c9:
b9:64:b8:db:b5:49:f2:6d:f2:df:a7:04:7f:1b:58:00:e5:2a:
a3:f3:52:44:5c:4f:26:7b:5e:ae:4c:19:7c:a0:7b:1a:82:6e:
1a:88:00:35:a9:77:7d:02:67:d5:0d:d0:46:e0:12:31:9d:7e:
77:98:7c:d8:7c:6a:5c:c0:ba:97:17:00:bb:00:ab:9a:bf:fb:
9f:af:21:8a:6d:04:ee:45:f2:b0:db:ab:92:b4:53:c5:3c:34:
13:15:0c:f2:a9:84:6e:1f:57:4b:3c:12:c8:04:7f:5c:0c:10:
e4:ac:14:e8:0a:8c:fe:3d:bc:1f:d0:d3:32:46:e5:b5:d2:60:
39:d3:4f:8f:05:66:09:69:b2:f7:a1:5a:b6:4a:84:1e:b7:70:
7e:59:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:34:40 2025 by rpki-client