Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/76T3wUVzKrccOze-NEOdu7-TKxc.roa
File: 76T3wUVzKrccOze-NEOdu7-TKxc.roa (raw, json)
Hash identifier: 0jI/L5T33OWVMZBqU9OicvpSu2R8kTlL46/YK1PJ/4A=
Subject key identifier: EF:A4:F7:C1:45:73:2A:B7:1C:3B:37:BE:34:43:9D:BB:BF:93:2B:17
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 0194266BB37540CA876C05FE5D044E5DEE68
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/76T3wUVzKrccOze-NEOdu7-TKxc.roa
Signing time: Thu 02 Jan 2025 09:49:39 +0000
ROA not before: Thu 02 Jan 2025 09:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31056
IP address blocks: 2a00:8647::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b3:75:40:ca:87:6c:05:fe:5d:04:4e:5d:ee:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jan 2 09:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efa4f7c145732ab71c3b37be34439dbbbf932b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:fe:d1:35:f1:22:18:08:71:20:5d:5f:06:
4f:88:88:06:0a:81:81:73:3c:ff:30:0f:7d:fe:41:
a0:ec:3b:d0:57:84:4a:57:96:6c:2a:a0:19:9e:21:
62:25:66:f8:9d:3d:ab:f0:07:37:07:1a:e5:b3:8d:
7b:76:1f:25:15:69:c4:98:26:6a:27:53:42:51:db:
a2:5c:01:bf:e8:b5:1f:fd:18:dc:3e:cf:f6:a0:01:
18:35:4c:ee:82:b6:a1:63:3a:0f:72:b6:bc:05:f8:
df:66:ca:53:8f:94:17:68:c8:4f:8e:57:ee:e0:d6:
59:db:49:ef:e1:4a:04:d3:60:ba:18:84:20:fc:ab:
84:b6:1c:25:88:cf:24:92:b4:76:7f:01:40:5b:d3:
e9:84:73:34:92:b4:5a:68:00:36:e8:7e:65:d5:ae:
15:e5:b0:17:05:3f:d4:bc:e2:a9:af:66:08:f6:31:
51:ad:ab:29:b1:a5:db:ab:79:9c:8c:f3:fc:fb:8f:
9c:13:39:26:b3:c4:b2:1e:83:e2:cc:cd:07:d6:da:
61:c6:89:65:62:e3:3f:2a:cb:f3:f7:79:a5:20:fc:
a3:8a:ac:f5:10:74:1c:be:75:08:8f:8b:06:97:da:
df:98:71:30:a0:7c:29:b5:ce:62:b9:97:5c:0c:3f:
cd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A4:F7:C1:45:73:2A:B7:1C:3B:37:BE:34:43:9D:BB:BF:93:2B:17
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/76T3wUVzKrccOze-NEOdu7-TKxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8647::/32
Signature Algorithm: sha256WithRSAEncryption
8f:89:43:11:57:d4:e3:20:41:b0:ce:06:5b:e2:74:f0:24:7c:
79:46:7d:ac:9f:7e:46:69:d9:62:03:16:ff:3a:35:8b:da:3a:
91:ca:62:d9:bb:2c:0c:a5:af:d9:c1:24:27:5a:d5:b5:3b:e4:
62:4c:11:42:8a:ec:6e:5e:7a:da:6f:a1:d4:a8:cd:6a:41:2a:
b3:a6:f3:4b:7b:b1:ce:09:6b:d8:0e:85:87:c3:a4:aa:21:a5:
55:4f:1f:a9:1b:36:56:61:ba:d5:b8:05:36:43:8e:0d:17:0f:
9a:25:b2:b1:ba:72:a8:30:a3:49:ab:fd:2b:b5:30:58:a6:63:
55:e7:ef:6b:02:4d:05:cf:11:d3:01:72:d5:af:fd:f3:e9:2b:
37:a6:26:fd:2e:29:2c:b4:cd:f0:db:31:22:31:38:1a:52:ac:
15:34:43:f9:31:24:1b:16:2c:86:40:2a:41:55:c5:d1:ae:b7:
bf:29:55:59:d0:bf:37:f1:53:a1:a4:6e:b9:51:84:33:8e:48:
7e:34:30:0b:07:47:21:0a:e0:3c:50:a7:08:37:33:c1:9e:bc:
04:e6:3c:e9:60:56:13:ca:e9:84:ee:45:9e:91:95:89:46:9d:
8d:9f:f1:13:31:a2:ad:cd:6f:82:13:82:0b:fe:22:2a:c5:d2:
02:f3:7f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:58:01 2025 by rpki-client