Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/OKa3YeAxLEMJzPpbNFPeGMR2s_U.roa
File: OKa3YeAxLEMJzPpbNFPeGMR2s_U.roa (raw, json)
Hash identifier: gPNr15KB8MwG6sVoGDL7tMQ0VeCZjn/+Udh5q5Y/8cY=
Subject key identifier: 38:A6:B7:61:E0:31:2C:43:09:CC:FA:5B:34:53:DE:18:C4:76:B3:F5
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0194F1477A2603D9D3A84D11F607C5414A2C
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/OKa3YeAxLEMJzPpbNFPeGMR2s_U.roa
Signing time: Mon 10 Feb 2025 19:13:00 +0000
ROA not before: Mon 10 Feb 2025 19:13:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213574
IP address blocks: 2a12:bec4:1170::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:47:7a:26:03:d9:d3:a8:4d:11:f6:07:c5:41:4a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 10 19:13:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38a6b761e0312c4309ccfa5b3453de18c476b3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:71:e2:49:1e:f9:02:b9:86:12:29:42:ce:
da:e4:6f:c4:1e:2c:37:47:dd:a6:1f:4c:ca:e7:da:
41:2f:50:77:b4:0d:d6:bd:6d:93:83:1e:c3:64:2f:
20:21:b4:36:f2:fb:74:16:44:92:13:8d:af:87:88:
5c:14:5b:64:19:5b:c1:cf:95:96:2f:cc:e6:8b:b4:
27:74:40:96:12:97:b4:ab:28:80:e8:fe:98:d0:7d:
ec:92:58:73:e4:1d:61:d2:2c:82:19:8d:34:7f:55:
0e:60:e4:3a:62:19:57:6b:7b:b2:53:a2:3c:e0:3e:
47:1c:fa:7d:b6:a9:ef:a6:4c:e6:81:11:fd:72:18:
4a:94:09:ca:7b:66:55:b4:71:e7:02:3a:ef:a6:d1:
ae:26:85:b7:d3:80:7c:fa:3e:22:9f:08:26:d9:67:
de:0d:be:9f:a2:52:92:a7:b6:26:78:5e:02:73:f4:
13:9a:c9:cd:71:b0:b4:2f:15:be:f9:85:51:58:0c:
89:40:c4:c2:c7:b3:df:6d:8b:4e:23:2f:be:60:25:
09:7a:93:07:b6:44:b6:6f:78:ce:b1:9c:e4:bf:ca:
c5:5f:82:4d:e4:20:39:31:ca:13:34:dd:69:46:72:
49:c8:1f:0a:9b:94:10:c3:18:d0:2a:01:a5:6a:20:
59:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A6:B7:61:E0:31:2C:43:09:CC:FA:5B:34:53:DE:18:C4:76:B3:F5
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/OKa3YeAxLEMJzPpbNFPeGMR2s_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1170::/44
Signature Algorithm: sha256WithRSAEncryption
91:ba:c7:6b:9f:96:57:06:4b:ce:65:0d:59:8a:1f:6c:e1:9f:
b0:ab:c5:f8:55:7c:ea:a9:d0:b5:b1:48:03:a0:80:ae:0e:41:
5c:4d:0f:e5:34:b4:a3:cd:a2:90:09:14:e8:0e:c8:fa:f4:4f:
12:27:44:a0:9d:4c:f8:36:13:2d:74:19:f1:19:f9:3d:d8:36:
a1:09:5b:92:35:dd:2e:b8:f9:89:b7:aa:eb:14:e0:e5:b4:40:
c5:b6:d8:88:8f:ac:07:3c:68:11:0c:5f:8c:92:95:c4:c6:70:
cb:f5:aa:33:eb:26:e4:81:6d:e1:8d:e0:c0:f1:3c:d5:b6:74:
3f:29:b6:43:45:c5:b5:45:bd:97:1f:da:a2:ac:3d:07:15:25:
b3:5a:38:99:e7:91:fc:fa:bf:03:9e:d4:4a:07:76:ad:a3:fc:
57:48:4b:b8:44:c9:f3:35:34:1e:cd:b9:2e:f9:96:cf:79:79:
9e:a5:9b:41:c2:81:2d:9c:cb:8e:bf:d4:c3:c3:c4:85:03:58:
49:d5:84:4f:5f:0e:f9:6e:78:31:ef:4a:1f:ac:e7:d6:7b:1d:
0f:ba:0b:83:17:3c:0f:8d:ac:15:51:11:c8:e0:51:32:57:b2:
1c:07:6f:1d:64:9a:3b:64:48:0a:00:61:73:cc:b2:cd:72:6d:
4b:2d:79:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:08 2025 by rpki-client