Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ommJ0PZ6FLMbDGAG-Bmgb4yU70s.roa
File: ommJ0PZ6FLMbDGAG-Bmgb4yU70s.roa (raw, json)
Hash identifier: +YaWSQGxH+74us5t9WhkgYOnmMXgjvjcjalhFFcC2+E=
Subject key identifier: A2:69:89:D0:F6:7A:14:B3:1B:0C:60:06:F8:19:A0:6F:8C:94:EF:4B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252259BF9DAAA39B0915CC6F2C31289A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ommJ0PZ6FLMbDGAG-Bmgb4yU70s.roa
Signing time: Thu 02 Jan 2025 03:49:55 +0000
ROA not before: Thu 02 Jan 2025 03:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212129
IP address blocks: 2a0e:b107:eff::/48 maxlen: 48
2a10:2f00:160::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:59:bf:9d:aa:a3:9b:09:15:cc:6f:2c:31:28:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a26989d0f67a14b31b0c6006f819a06f8c94ef4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:6b:b5:fc:af:68:03:43:2e:b2:78:2e:8a:
77:a1:83:36:70:eb:c4:53:31:82:fd:94:9e:c3:d1:
c4:72:16:54:bd:19:b8:8d:b8:6c:e8:64:45:59:b1:
2e:45:12:0a:d2:62:6c:94:a5:22:aa:ff:78:f2:e6:
f3:4a:99:45:a9:a9:20:6c:90:b1:67:b9:fc:e5:6e:
b3:96:3d:a4:fa:2b:54:7e:da:8d:0b:e5:79:d3:b6:
de:9f:82:35:16:69:fe:62:60:0f:55:63:f1:af:fb:
03:00:13:e3:e6:36:b6:92:44:0f:33:9f:31:17:39:
bf:dd:44:67:50:3b:50:4e:d8:21:5c:7b:78:d4:b4:
cf:e4:5a:4c:d7:dd:de:6f:0f:97:14:10:16:53:ba:
5a:6b:dd:20:bd:96:89:1c:2b:7e:9c:f9:a1:4b:8f:
0b:89:03:06:c4:c1:71:10:a5:9b:72:b0:a7:f2:0b:
d5:2d:e7:a0:3f:2d:b6:a1:b5:dd:d8:a9:fc:12:a1:
17:3e:29:b6:c4:93:10:42:ce:09:ab:35:1e:78:bc:
26:cb:6f:d2:06:e7:b6:99:e6:73:b2:54:74:06:60:
bf:1c:16:06:03:9a:1d:26:54:5a:be:f7:42:9c:87:
8e:0c:91:53:77:05:9a:f8:85:5c:ec:00:90:fa:14:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:69:89:D0:F6:7A:14:B3:1B:0C:60:06:F8:19:A0:6F:8C:94:EF:4B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ommJ0PZ6FLMbDGAG-Bmgb4yU70s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:eff::/48
2a10:2f00:160::/48
Signature Algorithm: sha256WithRSAEncryption
0a:1f:7e:6b:a9:07:85:a7:03:7f:79:38:bc:b3:01:a5:06:7e:
1d:a7:af:b9:98:8e:0f:45:30:c4:5f:b6:ae:f3:ec:d3:51:8f:
6c:fb:b8:40:0d:ba:47:9a:9b:99:2f:4b:89:d0:a4:e8:53:b3:
4a:79:eb:dd:e4:45:2c:16:5c:03:2f:3d:cc:39:d5:e1:7c:47:
68:5c:f7:88:53:cb:64:47:03:9a:b4:e1:84:83:74:bd:c1:63:
29:8b:7f:d7:64:14:9d:ae:23:9f:ca:5e:35:da:3f:3a:c6:6a:
2a:0a:99:13:75:7f:83:e2:81:b3:7f:65:05:6a:8e:e8:e7:20:
1d:4d:1d:d3:a9:9d:9b:07:4e:24:f2:6e:ca:40:ae:af:b1:c8:
6b:75:57:45:6c:86:30:b8:0e:16:c5:0a:47:83:f5:17:29:2a:
27:2f:05:fe:a4:99:56:88:36:94:da:8b:59:6b:27:32:eb:6b:
c8:9f:d9:e7:89:17:98:f8:5a:f1:9d:6a:c0:ec:9c:5d:e4:50:
91:b9:55:ad:cd:46:5c:51:8e:26:07:1a:c4:fa:27:50:2f:37:
08:6a:d7:1e:1f:ca:4a:b1:50:a0:67:ae:c8:e4:25:0b:83:a2:
31:52:24:aa:3e:be:df:b9:d8:b4:ec:ed:5f:a8:18:f9:b3:bf:
2c:2b:cf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:54 2025 by rpki-client