Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/IKOhbOxQKerwZ1NszCXkEauyjt4.roa
File: IKOhbOxQKerwZ1NszCXkEauyjt4.roa (raw, json)
Hash identifier: cGjzsEtXO7qKw4FGiUvxzYQ5PvsOEji0btFSRJgHRGo=
Subject key identifier: 20:A3:A1:6C:EC:50:29:EA:F0:67:53:6C:CC:25:E4:11:AB:B2:8E:DE
Certificate issuer: /CN=d24f497d157847005336b777361b1d20905c5213
Certificate serial: 07DD766C
Authority key identifier: D2:4F:49:7D:15:78:47:00:53:36:B7:77:36:1B:1D:20:90:5C:52:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0k9JfRV4RwBTNrd3NhsdIJBcUhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/IKOhbOxQKerwZ1NszCXkEauyjt4.roa
Signing time: Sat 01 Jan 2022 15:57:10 +0000
ROA not before: Sat 01 Jan 2022 15:57:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213342
IP address blocks: 2a0e:9b42::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131954284 (0x7dd766c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24f497d157847005336b777361b1d20905c5213
Validity
Not Before: Jan 1 15:57:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20a3a16cec5029eaf067536ccc25e411abb28ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:17:77:72:54:bd:95:c7:34:45:f6:eb:a0:ff:
8f:92:62:9d:8c:f1:3a:2e:30:5f:17:03:7a:44:1b:
6e:46:7d:e5:df:bd:7c:20:28:87:f1:8c:c5:a9:93:
bf:27:8c:e6:26:1b:75:ed:51:a9:72:47:0b:fa:80:
b2:57:98:3c:da:3d:f7:7b:57:13:98:5f:6a:2f:fb:
51:52:8e:6e:39:e7:7b:23:38:50:fe:13:3b:7a:ba:
c3:e6:91:5d:18:f1:52:54:fe:98:02:61:7e:33:6d:
79:67:85:ba:d8:5b:25:4f:b9:5b:8e:c2:9b:2d:ef:
29:9e:a8:0f:a8:bb:4d:e7:52:f5:6b:50:00:6c:10:
56:5c:2d:8a:59:0b:f0:07:f2:5d:a9:9f:d5:63:71:
e0:30:59:54:68:64:dd:e0:e2:2b:47:3c:f4:59:98:
27:14:9d:34:ef:fc:b4:a5:8d:1b:46:88:c9:36:e8:
10:d5:71:2b:ca:40:d7:99:d3:b6:fa:27:5d:f3:2c:
cf:86:e5:b3:2b:cb:f4:6e:aa:f7:46:9d:61:82:e7:
d3:48:04:00:19:a3:71:3b:6d:56:95:b8:20:e8:a6:
b9:fa:9c:27:05:74:75:2c:7b:d0:7d:c4:07:b6:0a:
ee:51:27:19:28:8d:ed:46:fe:48:c6:6f:31:43:17:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A3:A1:6C:EC:50:29:EA:F0:67:53:6C:CC:25:E4:11:AB:B2:8E:DE
X509v3 Authority Key Identifier:
keyid:D2:4F:49:7D:15:78:47:00:53:36:B7:77:36:1B:1D:20:90:5C:52:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0k9JfRV4RwBTNrd3NhsdIJBcUhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/IKOhbOxQKerwZ1NszCXkEauyjt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cf3ca3-1cd7-4312-ba73-83c8596229fa/1/0k9JfRV4RwBTNrd3NhsdIJBcUhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:9b42::/32
Signature Algorithm: sha256WithRSAEncryption
24:97:60:ab:38:43:10:e2:05:72:50:0d:fb:92:c6:c8:0c:f8:
2e:73:88:7f:c3:0f:52:7e:07:df:61:f2:b6:c6:11:1d:89:80:
59:a5:a2:de:48:31:95:21:bd:bd:dd:db:7a:92:5d:87:7a:e1:
5c:a5:0f:3c:f0:03:ae:d1:00:d3:0b:5f:11:15:fc:c9:f7:53:
8d:17:09:21:dd:3b:be:1e:46:0d:89:22:55:61:29:29:db:3a:
70:0a:d7:51:24:8e:0c:f8:14:bb:1a:91:82:70:15:4f:00:e4:
87:f8:5c:e8:1c:bd:1f:21:4d:56:4d:b4:78:4f:62:66:54:ae:
3b:3b:f8:f8:b5:46:1a:81:74:04:5e:05:08:3a:7e:35:26:fa:
d8:59:a7:56:6a:10:fd:44:bb:ab:bc:15:98:bc:97:31:e6:b9:
67:91:0e:e6:69:2f:3f:b1:8d:15:d7:42:23:42:b7:d3:5e:ff:
95:98:6d:7c:b3:16:10:88:87:c7:81:76:8d:46:2d:2f:7f:ba:
3f:84:b5:27:0a:50:67:1c:7f:c1:c7:57:d0:85:89:d0:6a:e6:
f5:7b:4c:68:3a:ff:e1:eb:56:d5:5d:12:d2:de:80:02:ee:01:
74:3e:c8:01:c9:ea:c2:60:22:0f:95:05:62:b7:5f:8c:4e:ea:
ab:dd:c9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:11 2025 by rpki-client