Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/OCqT2SjGMMWeIBjHxVTvXg0kfww.roa
File: OCqT2SjGMMWeIBjHxVTvXg0kfww.roa (raw, json)
Hash identifier: BRNaPX9Wpyv6K2R1mKj+i0BF5kdt5SltVJUcHrbScDY=
Subject key identifier: 38:2A:93:D9:28:C6:30:C5:9E:20:18:C7:C5:54:EF:5E:0D:24:7F:0C
Certificate issuer: /CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Certificate serial: 01927DD1765BDD2BD7CD316E712FB0743986
Authority key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/OCqT2SjGMMWeIBjHxVTvXg0kfww.roa
Signing time: Fri 11 Oct 2024 23:02:12 +0000
ROA not before: Fri 11 Oct 2024 23:02:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35196
IP address blocks: 2a0c:7b83::/32 maxlen: 32
2a0c:7b87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7d:d1:76:5b:dd:2b:d7:cd:31:6e:71:2f:b0:74:39:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Validity
Not Before: Oct 11 23:02:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=382a93d928c630c59e2018c7c554ef5e0d247f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7e:93:41:b9:ae:a3:5e:56:e9:7c:5b:a5:8a:
c8:01:1c:fc:b0:50:13:c6:28:57:f5:cd:07:c9:c8:
8a:41:d6:36:dd:2b:1a:3d:dc:1f:fb:29:be:31:4f:
e0:b7:7e:dc:2f:1c:59:39:ea:94:15:9f:07:6b:94:
c5:2d:42:ec:f9:84:48:b7:01:fb:de:1d:f5:03:8f:
c2:13:25:79:66:b2:66:d8:e6:ee:c4:e7:81:b0:c4:
ff:9a:0a:ec:d7:9c:ef:7c:b5:fb:1d:36:76:fe:02:
56:5c:e2:07:4d:08:c8:01:46:7f:f1:01:33:34:6f:
b5:42:da:cd:8e:27:f2:76:1a:53:de:18:67:6d:bb:
c3:85:d8:78:ef:2e:31:c8:6d:17:71:75:d2:a9:53:
2e:ce:15:37:f6:2a:eb:c2:d1:37:97:1c:dc:71:46:
f0:5f:9e:21:ff:04:57:0a:d7:49:d0:94:c2:a0:8f:
f8:86:6a:45:30:49:ac:8e:29:ef:c0:2f:c3:81:fc:
9e:90:95:69:e6:ea:f4:eb:83:b7:dc:d1:ba:56:f8:
5d:3c:41:b1:a9:ea:73:9a:c0:c3:d4:7f:24:15:87:
27:7b:21:ef:5b:6b:7c:14:93:c0:26:1b:a8:f9:74:
85:6d:ab:05:b6:61:5c:73:90:20:e0:2b:82:e1:d0:
e5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2A:93:D9:28:C6:30:C5:9E:20:18:C7:C5:54:EF:5E:0D:24:7F:0C
X509v3 Authority Key Identifier:
keyid:F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/OCqT2SjGMMWeIBjHxVTvXg0kfww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7b83::/32
2a0c:7b87::/32
Signature Algorithm: sha256WithRSAEncryption
0b:e3:5a:34:b4:b1:9e:cf:ac:14:fa:4e:f5:79:84:e5:7e:de:
f0:8f:dd:65:52:79:38:a7:e7:a4:d1:db:34:41:b8:be:41:a0:
cd:e0:57:4f:d8:72:b6:db:42:6e:fd:57:46:7f:74:56:61:7b:
75:0e:17:e5:e8:af:4a:cc:95:7e:d7:68:91:c2:fb:b4:1f:70:
9d:6f:77:03:3c:27:f3:5e:95:21:58:30:11:6e:22:86:fb:46:
00:d1:bd:87:d0:4f:0f:2b:32:4e:bd:0e:2b:df:63:09:f7:2c:
93:0d:85:b7:63:41:38:2b:98:18:c0:52:8f:b8:99:3c:82:cc:
35:95:40:4c:23:44:74:99:f8:ed:f2:ea:7e:c9:82:55:80:65:
c9:b8:40:4e:7a:6e:70:c2:a5:1d:d5:23:cc:0f:ea:d1:b6:87:
cb:14:e0:6d:2d:fe:c8:a9:e4:c5:8a:48:db:19:d3:a9:e5:02:
0e:64:ea:dc:63:20:4a:e3:2b:7b:82:cd:5e:c5:79:34:c4:32:
2d:18:6b:b4:20:d9:f8:49:95:85:6c:8f:25:c1:68:fd:bb:24:
92:ec:70:fa:5a:3b:c8:fc:73:5a:01:52:a6:71:f8:fb:b2:28:
5d:ae:fe:fe:e6:ce:ab:c1:21:41:8f:0e:d4:12:da:25:22:92:
eb:de:cc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:53 2025 by rpki-client