Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/Ot7K37c41MVu-6Ir2VOkUuixgHw.roa
File: Ot7K37c41MVu-6Ir2VOkUuixgHw.roa (raw, json)
Hash identifier: 7Ylv6CILYrMD9u/uD4SkYHlbdsDQ05xlERBBPqPUVnQ=
Subject key identifier: 3A:DE:CA:DF:B7:38:D4:C5:6E:FB:A2:2B:D9:53:A4:52:E8:B1:80:7C
Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial: 019422202C5683F1146EBCB049AAF7DDE3D4
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/Ot7K37c41MVu-6Ir2VOkUuixgHw.roa
Signing time: Wed 01 Jan 2025 13:48:41 +0000
ROA not before: Wed 01 Jan 2025 13:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208853
IP address blocks: 2a0e:6ac0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2c:56:83:f1:14:6e:bc:b0:49:aa:f7:dd:e3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3adecadfb738d4c56efba22bd953a452e8b1807c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:47:47:a5:2f:52:e6:9d:9b:1d:88:07:84:
b0:c6:3b:6b:96:ff:57:a7:bf:37:e7:09:5b:59:fc:
b5:72:72:54:41:17:f1:18:30:9b:f9:62:f4:3a:ee:
1b:b5:30:20:e8:55:24:8a:b7:f7:44:ac:13:64:f3:
00:d5:f2:6f:4b:bd:d6:ac:3a:db:5d:bd:59:50:fd:
01:09:b8:cc:fd:de:ef:5c:88:21:ae:5d:70:d5:d3:
a3:42:65:e2:d3:f7:f8:e3:c5:dc:33:14:18:d4:2e:
ea:2d:7c:39:65:05:ef:f1:20:c6:58:66:47:e7:72:
f4:3e:e0:82:03:9c:68:98:32:c2:d5:6a:d9:f1:7a:
70:49:fb:56:00:f6:b2:41:0c:9d:ff:9f:02:ba:22:
a8:4c:28:d4:68:f2:bd:16:08:32:09:f1:20:95:58:
23:c7:f9:c7:47:17:2e:2f:43:ce:ef:ca:3e:8a:65:
e5:44:bd:18:39:0a:13:76:5e:60:91:57:f3:63:08:
ea:69:e6:1d:df:eb:c3:5f:9d:2b:d4:62:51:51:9b:
96:92:88:5f:5a:7f:15:da:08:87:9c:3c:2e:7f:12:
2e:04:ba:db:41:9f:0f:13:aa:61:a1:c9:26:95:35:
f8:e3:67:83:63:83:f7:2d:9f:8f:a5:af:c5:5a:65:
e4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DE:CA:DF:B7:38:D4:C5:6E:FB:A2:2B:D9:53:A4:52:E8:B1:80:7C
X509v3 Authority Key Identifier:
keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/Ot7K37c41MVu-6Ir2VOkUuixgHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:6ac0:1::/48
Signature Algorithm: sha256WithRSAEncryption
1a:41:0d:ce:be:d8:98:32:bf:42:f1:c1:ca:8b:1f:3e:05:bf:
1a:30:4f:47:42:41:f1:02:85:6a:3f:55:d0:13:b9:e6:b7:3a:
67:cf:2c:f7:ee:4d:24:ee:08:b6:1c:df:2b:50:63:4a:e4:02:
fe:4f:b1:4b:ce:85:a5:28:b7:60:7d:68:c8:ab:ae:b4:d6:39:
5d:3d:65:f3:76:9e:ca:09:19:4d:8b:52:4f:7c:5a:08:90:11:
60:eb:51:37:6f:e1:58:94:01:43:f6:bd:ba:16:cb:f9:d7:a0:
ee:a5:56:06:48:0a:72:16:8b:28:0f:2b:04:05:85:76:c1:f2:
1f:c0:59:d5:db:ff:9f:5a:37:a2:f4:ce:f5:e5:48:d8:bb:e8:
31:5d:36:e7:8e:94:fe:e0:af:af:fe:3a:eb:c2:32:02:2a:71:
c4:94:77:8a:d1:2d:df:97:45:96:3b:8d:9c:30:93:f9:86:bf:
5b:a5:69:05:84:68:88:cf:07:74:b2:fd:50:ed:a3:17:b0:be:
f9:28:86:03:13:48:dd:b5:c3:a6:5d:45:70:9e:c9:45:d5:ca:
b6:4c:b3:5f:01:bd:72:c7:2c:a4:c3:26:48:ee:83:e4:56:e6:
1d:3d:52:1a:bc:67:ad:16:07:da:e9:53:43:8d:cf:6d:03:34:
47:de:07:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:11 2025 by rpki-client