Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/p_OsMbtl6cqAwJxgH9gHx5HQqDI.roa
File: p_OsMbtl6cqAwJxgH9gHx5HQqDI.roa (raw, json)
Hash identifier: PX8cBxzw/YvGBQDIYUCmODyrh2O3o6EF1gmYM5/3NGQ=
Subject key identifier: A7:F3:AC:31:BB:65:E9:CA:80:C0:9C:60:1F:D8:07:C7:91:D0:A8:32
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 1005909B
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/p_OsMbtl6cqAwJxgH9gHx5HQqDI.roa
Signing time: Tue 01 Feb 2022 10:10:32 +0000
ROA not before: Tue 01 Feb 2022 10:10:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 2a06:56c1::/40 maxlen: 48
2a06:56c2::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268800155 (0x1005909b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Feb 1 10:10:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7f3ac31bb65e9ca80c09c601fd807c791d0a832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:96:26:ca:aa:bd:6d:f2:b0:e4:29:0a:61:
dd:3a:55:5c:73:88:23:c6:9b:d6:e6:27:cb:2a:d4:
4b:08:05:5d:3a:39:21:c0:ee:f5:7c:cd:c8:4d:ce:
b1:86:39:eb:27:69:ac:03:bd:34:1d:7f:8f:28:97:
85:b5:9b:41:f8:e2:85:de:86:49:3a:e9:42:58:d6:
97:72:a2:44:7c:bf:28:70:42:98:d6:d0:f4:39:31:
c1:5f:ea:5e:40:44:e9:0f:2d:83:fc:32:ab:93:1f:
b5:87:b8:be:5e:c2:9b:80:05:4d:54:c7:0b:ec:71:
e5:95:30:69:a3:bb:75:6f:64:6e:e8:8e:7c:04:55:
32:17:90:ac:64:eb:7b:b7:e4:9d:dd:f1:b9:ed:26:
03:8d:ad:b4:6b:c0:f4:3e:53:55:1a:e7:50:24:7a:
ee:01:5c:7e:7e:fc:b0:fd:2b:97:89:58:b3:6a:dd:
59:b9:ea:86:45:3e:7a:2b:4a:ae:59:a6:39:ec:74:
79:10:8b:df:75:61:48:16:77:f7:3b:22:56:79:61:
06:5c:d4:87:d2:fc:5e:fc:81:23:9d:77:24:72:c2:
b0:3a:ce:e9:72:fc:99:e5:fd:03:81:1e:78:fe:4f:
2a:23:b6:97:ea:51:37:57:ca:cd:f4:a9:06:f8:00:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F3:AC:31:BB:65:E9:CA:80:C0:9C:60:1F:D8:07:C7:91:D0:A8:32
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/p_OsMbtl6cqAwJxgH9gHx5HQqDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:56c1::/40
2a06:56c2::/40
Signature Algorithm: sha256WithRSAEncryption
94:eb:a9:ca:bd:d4:8c:54:16:3f:d7:a9:e6:29:7d:ac:eb:11:
7d:94:ac:f0:b4:dd:40:a2:e3:d2:b2:a7:90:50:db:b5:88:85:
e8:3c:0f:5a:bf:05:f3:2c:cb:f6:88:3c:f1:1d:3d:49:0c:47:
e8:07:c5:b5:9a:8b:61:a7:43:5d:c7:f0:fb:63:17:f6:32:4d:
80:30:e4:eb:a9:b7:e9:f8:bc:cf:e3:7e:49:9f:73:11:91:ec:
c8:8b:54:76:ea:10:6e:b7:7f:ac:56:1b:d0:75:45:5b:23:6f:
e1:3b:62:da:0c:47:a3:1f:a4:1b:76:c5:ce:6e:9f:c0:ea:a5:
df:a1:6d:a4:4e:7b:6b:64:06:4b:43:ee:de:56:c1:db:00:cb:
ad:db:fa:c4:6c:01:98:b4:bc:ad:17:9c:79:5d:c2:0f:4c:60:
be:34:03:e4:57:09:0b:08:7d:d8:a8:c1:29:7a:b4:31:e6:08:
4e:1c:f4:ea:de:ae:64:86:c7:2f:09:47:50:4f:12:7f:e9:bb:
e5:ed:43:e8:30:78:2f:6e:0c:2e:8a:5c:61:d3:eb:47:d0:6c:
92:f7:02:99:e3:fd:63:5d:1c:0b:dc:33:4c:c4:90:77:9d:f4:
ef:a4:64:b5:46:9c:65:ab:cf:d1:0b:a8:7c:f8:c1:e9:a2:57:
1a:03:58:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:20 2025 by rpki-client