Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/OANXXNT4d7OJ6o497Ctf48xykTY.roa
File: OANXXNT4d7OJ6o497Ctf48xykTY.roa (raw, json)
Hash identifier: aZ2NtskCeNGxotOVm0/S/doAkEWhZqM1q8mtGb9yHS0=
Subject key identifier: 38:03:57:5C:D4:F8:77:B3:89:EA:8E:3D:EC:2B:5F:E3:CC:72:91:36
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01942444EDF89E7F9ECDBC982AD089B88196
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/OANXXNT4d7OJ6o497Ctf48xykTY.roa
Signing time: Wed 01 Jan 2025 23:48:04 +0000
ROA not before: Wed 01 Jan 2025 23:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60262
IP address blocks: 2a04:ca80::/29 maxlen: 29
2a07:dd80::/29 maxlen: 29
2a09:8140::/29 maxlen: 29
2a0a:ca40::/29 maxlen: 29
2a0c:b140::/29 maxlen: 29
2a0c:b500::/29 maxlen: 29
2a11:2dc0::/29 maxlen: 29
2a11:4840::/29 maxlen: 29
2a11:4d00::/29 maxlen: 29
2a11:5a00::/29 maxlen: 29
2a11:5c00::/29 maxlen: 29
2a11:5e40::/29 maxlen: 29
2a11:76c0::/29 maxlen: 29
2a11:9f80::/29 maxlen: 29
2a11:a4c0::/29 maxlen: 29
2a11:a900::/29 maxlen: 29
2a11:bf40::/29 maxlen: 29
2a11:cf80::/29 maxlen: 29
2a11:fa00::/29 maxlen: 29
2a12:200::/29 maxlen: 29
2a12:3000::/29 maxlen: 29
2a12:4480::/29 maxlen: 29
2a12:7500::/29 maxlen: 29
2a12:a680::/29 maxlen: 29
2a12:e600::/29 maxlen: 29
2a12:f700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ed:f8:9e:7f:9e:cd:bc:98:2a:d0:89:b8:81:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Jan 1 23:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3803575cd4f877b389ea8e3dec2b5fe3cc729136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:32:07:87:dd:28:62:d8:69:9c:04:2d:1d:
6c:e1:92:e6:ba:eb:3d:f2:72:7e:5d:a0:52:ee:4d:
93:47:24:51:7b:9f:31:b2:08:e4:25:21:61:28:06:
d7:91:6d:25:99:4a:2e:81:89:5c:7c:40:dd:08:7f:
78:a3:a2:cd:d0:c0:45:62:1d:bc:d3:e8:b2:8a:64:
45:fa:f1:67:24:da:d5:c2:b3:69:f9:25:3e:c1:99:
ac:15:f4:b7:d2:f3:87:af:59:73:a8:e2:38:e5:cd:
52:fd:55:6d:c9:3e:ec:9e:79:ee:d2:ec:54:8a:2a:
95:2c:79:da:1c:42:68:25:5f:12:94:25:1e:2c:a2:
e9:e1:ca:36:3b:63:28:a6:43:7d:20:bb:75:b8:e1:
2d:b3:20:d8:43:e0:d3:3b:e6:75:8a:01:a9:c3:ab:
83:6c:a2:33:00:da:d3:61:c4:17:bc:5c:db:8d:2d:
6d:8f:57:59:8d:19:e1:f6:cf:38:76:dd:4c:6e:74:
4c:65:5a:3a:63:59:0c:3b:f9:13:42:ff:7d:fc:ff:
93:c7:cf:d5:5a:1b:eb:45:3f:e4:cf:db:0a:8a:d1:
c7:1a:b6:65:7d:36:86:61:ea:75:2a:fb:13:65:45:
52:fd:17:06:b9:19:52:5a:f1:16:09:fe:f9:cb:7a:
86:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:03:57:5C:D4:F8:77:B3:89:EA:8E:3D:EC:2B:5F:E3:CC:72:91:36
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/OANXXNT4d7OJ6o497Ctf48xykTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ca80::/29
2a07:dd80::/29
2a09:8140::/29
2a0a:ca40::/29
2a0c:b140::/29
2a0c:b500::/29
2a11:2dc0::/29
2a11:4840::/29
2a11:4d00::/29
2a11:5a00::/29
2a11:5c00::/29
2a11:5e40::/29
2a11:76c0::/29
2a11:9f80::/29
2a11:a4c0::/29
2a11:a900::/29
2a11:bf40::/29
2a11:cf80::/29
2a11:fa00::/29
2a12:200::/29
2a12:3000::/29
2a12:4480::/29
2a12:7500::/29
2a12:a680::/29
2a12:e600::/29
2a12:f700::/29
Signature Algorithm: sha256WithRSAEncryption
47:55:43:be:df:e4:3c:b9:fa:ce:d4:fe:f6:63:e7:02:dd:f1:
e4:4d:3b:73:a1:81:fa:cb:ff:3d:4f:15:31:ba:a7:7a:6b:4b:
d3:20:4e:0a:e0:55:4a:78:88:64:c9:2f:41:ee:1e:34:3b:39:
ec:16:61:29:c0:ca:89:9e:f2:94:a5:84:f5:c5:bb:3d:2b:c3:
76:cb:3d:0e:a2:06:09:b5:f6:af:3a:3d:47:7e:d0:4b:99:d8:
89:02:65:26:ac:82:70:ae:6a:8d:42:eb:d6:52:cd:7e:17:26:
b2:5b:52:0b:74:0f:0c:47:52:57:f8:60:6c:67:bf:6c:02:b3:
41:76:91:97:c6:16:c4:ee:4c:27:81:90:77:50:ee:c3:c0:3c:
c3:ef:69:dc:a5:46:70:21:10:30:2e:89:fd:bc:3b:91:05:b5:
1b:ec:6f:2c:6c:14:b0:5f:9f:d9:82:27:f5:f6:7f:9b:57:61:
e6:88:07:cd:e2:20:49:cf:04:d6:b5:b8:37:8c:92:18:cd:9d:
74:c1:34:fd:36:19:69:06:04:1d:a5:83:42:50:1a:18:92:6c:
85:0e:d6:9b:6c:6f:7b:2c:94:0d:ae:73:43:c3:d8:d4:90:ee:
e9:14:0a:00:52:8b:91:e5:ca:c4:7a:cc:66:01:af:f0:f0:46:
12:9e:3a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:31 2025 by rpki-client