Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/oNFKGyCZkBBMrAJua5JkdpYbRkA.roa
File: oNFKGyCZkBBMrAJua5JkdpYbRkA.roa (raw, json)
Hash identifier: e1I99kZvkWlhYnzrZGw43ZIip0acgFnzjsKix4rkSwQ=
Subject key identifier: A0:D1:4A:1B:20:99:90:10:4C:AC:02:6E:6B:92:64:76:96:1B:46:40
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 0186D9162827D4F4EBB28AE73610E5506F75
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/oNFKGyCZkBBMrAJua5JkdpYbRkA.roa
Signing time: Mon 13 Mar 2023 03:49:13 +0000
ROA not before: Mon 13 Mar 2023 03:49:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13737
IP address blocks: 2a0f:85c1:270::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d9:16:28:27:d4:f4:eb:b2:8a:e7:36:10:e5:50:6f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Mar 13 03:49:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0d14a1b209990104cac026e6b926476961b4640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:30:8f:3b:40:e6:e1:7e:9f:54:59:0a:0c:8f:
73:ed:d4:6e:98:70:aa:25:52:5b:9e:62:d1:44:cb:
26:25:4d:15:83:55:4c:ba:a9:a4:e4:78:ff:db:30:
7d:4f:ae:62:c7:a2:b7:f6:ad:be:39:7a:fb:02:ef:
1b:64:08:6d:93:66:c3:27:2b:a6:47:74:23:db:91:
f3:49:64:cf:3a:e2:0a:d7:c2:0c:d8:e4:cb:d8:d1:
71:c9:e4:71:26:d2:23:e2:c6:0a:81:95:07:f8:98:
83:75:a8:4f:ce:b0:80:7f:51:0d:82:27:d2:98:ce:
e8:7c:47:6a:18:77:b9:e6:3e:92:b4:fd:b0:fe:f5:
d6:de:3a:d0:fa:74:1b:33:ef:2f:b6:85:d2:59:cb:
76:28:8d:a2:4c:3b:44:85:c2:ef:de:88:f3:44:e3:
a5:4d:6e:65:a6:4e:3a:b4:07:72:d1:3a:cc:ed:1f:
2c:66:66:cf:74:98:75:41:b3:e9:a3:d1:50:50:71:
ae:c9:ae:f7:42:5c:17:b4:43:db:44:bf:7f:75:ba:
eb:38:6b:6c:13:7f:a2:d1:dc:ca:dd:35:ce:dd:04:
51:4e:55:49:7d:5e:95:15:64:87:ea:8d:e9:ed:19:
fe:09:d8:62:8e:68:d0:ec:bb:97:eb:65:4f:b2:17:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D1:4A:1B:20:99:90:10:4C:AC:02:6E:6B:92:64:76:96:1B:46:40
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/oNFKGyCZkBBMrAJua5JkdpYbRkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:270::/44
Signature Algorithm: sha256WithRSAEncryption
4e:77:48:ad:1a:37:8f:71:bc:62:d2:12:8c:2c:f6:91:dc:1e:
9f:8b:12:d8:e7:53:22:03:b5:f0:17:9a:ea:bf:62:45:ee:c9:
68:af:3a:24:d2:16:fd:67:8f:41:26:6f:3a:04:89:d0:76:c1:
ae:58:d6:48:ad:a6:7b:d2:14:6f:ab:c3:9f:ed:4d:8a:b2:ba:
80:85:7b:68:27:ad:5e:74:12:c8:77:6e:70:ad:68:e7:b3:08:
b9:35:d0:13:e1:87:ef:e1:78:94:44:f2:78:71:bd:01:3c:87:
c8:60:9f:02:7e:5d:67:3c:05:fa:40:d9:02:66:cd:ea:fb:5f:
ff:f7:2d:13:97:9d:9a:19:f0:c4:46:5f:2f:39:70:22:37:67:
dc:a2:62:82:60:eb:27:e2:61:36:5b:63:b3:3b:81:d6:42:68:
fc:94:c0:ff:fd:a1:5a:43:77:4a:19:6a:d4:c6:55:f7:6d:c5:
63:89:e5:e1:c6:29:e6:81:62:fc:e2:f5:b2:c7:d0:13:16:30:
bb:ea:36:70:23:ac:98:80:b0:03:8b:81:0b:c5:75:b8:a2:ac:
da:af:da:0a:4b:91:e4:f6:ed:b2:9d:62:7a:ec:6d:45:44:46:
2d:b7:2e:90:d1:5c:a8:01:b5:9c:07:37:98:e7:55:45:a2:d2:
1c:5d:c2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:14 2025 by rpki-client