Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/oIZ02qxSrn-sBAlD-BOS1FyNBNQ.roa
File: oIZ02qxSrn-sBAlD-BOS1FyNBNQ.roa (raw, json)
Hash identifier: cCTxbjFQb4NeoVd9wETrGZr+in35PRv0+f/LrpWLJEU=
Subject key identifier: A0:86:74:DA:AC:52:AE:7F:AC:04:09:43:F8:13:92:D4:5C:8D:04:D4
Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Certificate serial: 01942444E43046D75539294AA6109219F740
Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/oIZ02qxSrn-sBAlD-BOS1FyNBNQ.roa
Signing time: Wed 01 Jan 2025 23:48:02 +0000
ROA not before: Wed 01 Jan 2025 23:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 2001:67c:273c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e4:30:46:d7:55:39:29:4a:a6:10:92:19:f7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Validity
Not Before: Jan 1 23:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a08674daac52ae7fac040943f81392d45c8d04d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:f9:0f:7d:6b:8a:04:57:fb:c4:5e:33:52:
b4:0b:e7:98:39:49:c7:92:02:d0:1b:6a:bb:d0:b0:
ff:2b:a1:4c:52:ce:71:28:72:36:d6:30:52:e2:36:
48:d9:7b:7a:17:d3:19:50:67:29:a7:68:e3:60:90:
bf:f8:91:1d:85:98:b0:8c:a8:ba:3e:20:72:13:ff:
c7:7d:80:34:a1:c5:fa:68:c2:4b:51:ee:b2:ce:cd:
ad:73:8f:9d:46:16:6d:fe:b0:75:4b:7c:d3:24:a0:
ec:66:f7:96:2b:1c:19:57:37:1c:1c:5b:8d:bc:6a:
1b:fc:43:3d:80:f3:9c:8e:1e:90:1b:64:4f:d9:12:
25:af:fc:59:ac:24:94:80:9c:2c:a1:6b:ba:d4:4f:
6c:a4:00:f2:78:2a:bb:9c:7c:0c:75:2a:c3:df:90:
8c:c6:41:dc:24:94:79:28:a0:f6:c7:09:80:6c:7d:
77:f0:02:22:66:c0:27:46:f7:4f:dd:00:c1:35:ec:
22:15:7f:2b:91:0e:85:75:fb:e6:6c:c1:65:9e:59:
68:33:3c:3b:d8:0a:20:72:ab:e5:a0:73:c0:9e:d1:
a2:24:25:35:6f:3e:79:97:15:42:49:20:a0:80:50:
14:58:b3:b7:27:06:4d:85:68:bb:a9:5e:00:30:eb:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:86:74:DA:AC:52:AE:7F:AC:04:09:43:F8:13:92:D4:5C:8D:04:D4
X509v3 Authority Key Identifier:
keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/oIZ02qxSrn-sBAlD-BOS1FyNBNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:273c::/48
Signature Algorithm: sha256WithRSAEncryption
a4:9f:68:1a:5f:1d:79:5e:8a:80:f0:a3:10:8e:6c:49:df:fa:
9d:fe:16:a3:a4:2b:30:70:30:4d:6c:49:12:a2:14:e5:9e:39:
13:e0:a9:64:6f:51:5c:46:d5:44:9d:27:a8:82:d9:98:a4:ab:
bd:4b:f8:4b:d6:04:b0:0e:a8:ae:05:4c:d4:33:39:d3:03:39:
b0:87:c8:a9:2d:f9:25:fa:a1:86:12:38:15:a4:77:05:11:a5:
96:03:7f:bb:dc:a0:a0:83:50:76:c4:5b:e6:c1:83:6d:5d:41:
60:8a:84:34:f7:de:7b:b2:5f:6a:22:bb:0f:92:d4:06:78:a2:
71:5e:7e:c5:df:17:6d:bd:24:14:5f:18:a2:75:22:30:36:9c:
e6:80:b1:2f:1e:7e:d4:2c:c4:92:73:29:21:ae:91:94:1d:3e:
f4:8e:c7:5a:46:91:b1:88:94:37:e6:20:22:ed:ec:31:76:5e:
7e:7c:c7:7c:59:27:14:99:6f:1c:c1:8d:a6:a3:3b:da:19:0e:
1c:5b:f0:72:e3:af:4a:12:d3:73:d2:0e:66:32:b2:9e:22:01:
a4:2f:87:36:23:73:89:91:ef:a3:ed:fc:12:8d:05:44:9b:b2:
6c:4d:f8:38:db:0b:24:12:86:df:c7:f3:37:36:bd:df:ee:c1:
a7:18:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:27 2025 by rpki-client