Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/OY2EcTNQ6tIYFVZ1n9aQQKCtyxo.roa
File: OY2EcTNQ6tIYFVZ1n9aQQKCtyxo.roa (raw, json)
Hash identifier: 2B1UBV8JeB/981ywqam+b+EwjIUYBYsu4rW8QyDDPyo=
Subject key identifier: 39:8D:84:71:33:50:EA:D2:18:15:56:75:9F:D6:90:40:A0:AD:CB:1A
Certificate issuer: /CN=5a8d85b2e1ec1f21dcac5d5879e69cb342fd1479
Certificate serial: 01951FC6461E6B4F7373400C8193F55527B4
Authority key identifier: 5A:8D:85:B2:E1:EC:1F:21:DC:AC:5D:58:79:E6:9C:B3:42:FD:14:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/OY2EcTNQ6tIYFVZ1n9aQQKCtyxo.roa
Signing time: Wed 19 Feb 2025 19:54:02 +0000
ROA not before: Wed 19 Feb 2025 19:54:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213410
IP address blocks: 2a10:b140:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1f:c6:46:1e:6b:4f:73:73:40:0c:81:93:f5:55:27:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8d85b2e1ec1f21dcac5d5879e69cb342fd1479
Validity
Not Before: Feb 19 19:54:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=398d84713350ead2181556759fd69040a0adcb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:8d:eb:11:d9:44:fb:99:59:ed:bf:85:94:
b2:18:cc:e3:ce:69:9f:70:ab:a7:d3:df:0d:8f:89:
ee:17:11:b1:eb:82:af:76:f1:c5:41:6d:bd:f0:a0:
cd:5d:e4:b3:ad:65:95:7b:2f:17:a1:39:82:9b:bd:
7a:fb:3f:a1:e1:f8:8d:a5:5c:cf:1f:f3:4f:07:ae:
79:2f:f0:1a:02:73:53:d5:b1:4f:b0:0c:77:e6:52:
12:52:b6:a1:01:aa:05:89:81:f3:65:13:fd:db:21:
c2:a5:10:8f:87:de:7b:93:1a:df:8f:38:92:94:24:
77:96:5a:c0:d3:3a:74:64:4b:23:a4:0a:9d:5a:64:
3b:be:69:8a:1e:f4:a0:0a:46:42:ab:30:52:26:e7:
6d:d0:35:19:bb:f1:e5:c2:a0:42:ae:eb:d1:a6:ff:
73:5f:8e:74:32:b1:2e:89:a3:da:de:13:54:d1:19:
c4:1f:cc:76:65:29:e7:01:ca:3b:32:7d:6f:85:81:
b2:ca:3c:a3:d8:86:68:f1:7e:63:08:2d:c0:4e:72:
1d:40:f3:af:c8:85:59:3d:be:16:8a:7b:84:76:ad:
cc:5a:19:e4:d2:85:d1:39:ab:58:f1:45:69:e5:df:
b8:4b:57:89:f2:56:18:ca:9a:7a:85:11:10:20:0e:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8D:84:71:33:50:EA:D2:18:15:56:75:9F:D6:90:40:A0:AD:CB:1A
X509v3 Authority Key Identifier:
keyid:5A:8D:85:B2:E1:EC:1F:21:DC:AC:5D:58:79:E6:9C:B3:42:FD:14:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/OY2EcTNQ6tIYFVZ1n9aQQKCtyxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:b140:1::/48
Signature Algorithm: sha256WithRSAEncryption
46:dc:82:24:48:ab:87:f8:6a:a8:e5:15:44:09:54:f4:5f:6c:
1c:06:89:6d:f9:f1:d0:e7:ac:58:d8:e6:64:b4:07:91:14:d4:
6a:3d:19:a0:a2:46:2d:7d:b7:6d:5e:6d:61:63:e2:e2:23:ae:
f9:45:55:5f:c4:fc:d8:ab:91:83:98:18:e9:69:cd:d1:f6:ff:
4d:02:1b:5a:4b:d5:0c:4a:90:c2:92:47:5f:68:6c:bd:73:6e:
94:76:48:24:d9:c0:af:66:7f:30:b1:38:28:d9:0e:1e:f3:75:
56:77:72:9f:70:69:94:b4:97:90:86:7e:6e:bc:06:3d:e2:17:
65:08:e9:dd:6a:26:10:cc:79:90:ee:ec:55:ce:3c:0a:af:ad:
81:8e:ba:d9:83:57:77:de:61:e0:a9:9e:0b:07:86:3f:2b:e4:
e1:c5:2b:61:c1:c8:c0:a2:00:6d:e3:b3:81:7d:c1:35:d0:91:
4f:20:b6:95:5c:d0:18:85:9a:48:d6:e9:f7:c7:ad:3d:ce:4a:
13:13:8c:5e:b1:c9:82:62:b2:4d:79:1b:5c:0f:3a:3d:aa:50:
61:a4:11:3c:95:45:e5:1c:05:e9:30:3a:dc:a8:e0:5e:68:97:
a9:12:32:8b:3c:8c:9e:f8:e0:c0:26:13:18:61:0d:d3:59:fd:
c2:97:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:44:26 2025 by rpki-client