Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/h_OSLo7LS1yucAbHBOIhGc2Nnqk.roa
File: h_OSLo7LS1yucAbHBOIhGc2Nnqk.roa (raw, json)
Hash identifier: 93zEUixPEa/4zTpg4P/32wHu3X2gcZ+febuUSEv1ZaA=
Subject key identifier: 87:F3:92:2E:8E:CB:4B:5C:AE:70:06:C7:04:E2:21:19:CD:8D:9E:A9
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0195A8650E59FD050E7738ED1DC920CEF8F2
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/h_OSLo7LS1yucAbHBOIhGc2Nnqk.roa
Signing time: Tue 18 Mar 2025 08:35:49 +0000
ROA not before: Tue 18 Mar 2025 08:35:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39831
IP address blocks: 2a05:4380::/32 maxlen: 32
2a0a:e9c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:65:0e:59:fd:05:0e:77:38:ed:1d:c9:20:ce:f8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 18 08:35:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87f3922e8ecb4b5cae7006c704e22119cd8d9ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:98:0f:d0:dd:ca:91:b6:42:3b:8c:d7:d5:c6:
f3:67:d5:b7:67:0a:be:99:0e:d9:d5:83:69:7f:45:
88:0c:d9:a3:87:ea:11:cf:29:10:e0:ca:a0:f6:a3:
f6:d0:a2:62:79:72:20:aa:fa:11:c6:63:2b:4b:ae:
ae:f0:cb:f7:a2:2e:c3:a4:04:9c:88:ab:c8:62:c1:
81:ec:ce:43:c4:5a:96:95:70:9f:1a:ae:ce:a0:09:
66:9f:a7:65:1d:f9:6d:3b:62:c0:31:e1:59:5f:b8:
f2:06:18:76:82:ad:77:6a:55:27:6f:da:ae:7d:9d:
30:bf:f8:fb:c0:b9:2e:53:43:7f:cd:ae:73:2e:57:
49:33:ce:a1:f1:62:90:64:4e:78:76:03:d9:b9:27:
50:a2:b0:54:e7:53:34:63:b4:cc:46:ce:a1:51:1d:
93:af:d1:17:52:a0:c0:e6:d5:e5:48:e9:ca:ba:0d:
20:99:2b:03:6c:75:71:69:2a:46:3a:c6:78:24:79:
d7:9f:d0:af:67:47:df:9c:6b:71:48:26:8d:07:26:
75:4d:b0:3b:70:d8:8d:46:e3:46:60:12:79:01:c5:
c1:a3:55:92:c9:46:5f:53:ba:1e:19:ab:e5:98:c2:
15:90:36:a5:20:d2:e1:8d:d1:0e:5b:7d:25:81:87:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F3:92:2E:8E:CB:4B:5C:AE:70:06:C7:04:E2:21:19:CD:8D:9E:A9
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/h_OSLo7LS1yucAbHBOIhGc2Nnqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4380::/32
2a0a:e9c0::/32
Signature Algorithm: sha256WithRSAEncryption
5a:3a:74:76:85:5f:7b:16:97:5a:e0:a2:57:f1:47:9d:c8:27:
06:fb:71:9c:a3:5d:a1:43:42:30:fb:ac:33:06:14:cf:d6:3b:
4d:dd:db:3d:b8:6b:63:27:f4:ff:4e:63:8a:47:53:6d:8e:a9:
c8:92:d2:ae:96:b4:4d:d2:74:e9:3b:b9:65:7a:64:6e:78:9c:
04:11:3a:35:cd:b3:fe:23:bf:ea:14:7f:b9:ef:bd:d1:54:e8:
26:7e:52:07:45:7e:57:af:5a:00:26:ac:20:b6:db:24:fa:1c:
b6:7c:ef:6c:be:6e:f2:99:58:0b:23:36:5c:06:d3:9e:6d:ec:
64:41:09:a2:af:d9:c3:4d:88:39:e2:ac:7b:c7:86:ee:2e:dc:
ff:c1:0b:fb:bc:86:81:cc:cb:5f:3d:73:f2:f2:30:1c:7d:a5:
e1:13:fb:a8:bd:1b:1c:40:2d:9a:70:25:49:c3:a0:a8:9b:83:
a5:ad:28:62:90:0a:a6:41:51:61:1d:77:4f:40:2a:2c:a3:bd:
9f:b2:96:b5:af:3d:06:0f:80:e9:94:07:86:de:b3:41:8c:1e:
b3:d5:0f:3e:bf:2f:06:30:b5:bc:c0:6b:40:d2:06:71:e2:b7:
d6:d5:e3:ac:db:da:25:96:d4:14:c0:3f:60:d0:b2:b5:10:23:
1f:1d:76:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:15:05 2025 by rpki-client