Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/omWB9hPSfJqYq8YufHlUgI8aUWY.roa
File: omWB9hPSfJqYq8YufHlUgI8aUWY.roa (raw, json)
Hash identifier: on6rgqS8fjjA4mGZBUT0Jen0hmEvcEs8P1kH7F/85g0=
Subject key identifier: A2:65:81:F6:13:D2:7C:9A:98:AB:C6:2E:7C:79:54:80:8F:1A:51:66
Certificate issuer: /CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Certificate serial: 018F061F0C2BD7E14427457D605A69ABD09E
Authority key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/omWB9hPSfJqYq8YufHlUgI8aUWY.roa
Signing time: Mon 22 Apr 2024 14:04:08 +0000
ROA not before: Mon 22 Apr 2024 14:04:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0c:7b83::/32 maxlen: 32
2a0c:7b87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:06:1f:0c:2b:d7:e1:44:27:45:7d:60:5a:69:ab:d0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Validity
Not Before: Apr 22 14:04:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a26581f613d27c9a98abc62e7c7954808f1a5166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:3b:7a:e3:f3:8b:55:62:e9:b2:7f:fe:ed:
bf:ca:73:fe:b1:46:31:4e:2a:16:9a:0b:e0:11:46:
16:9b:06:77:c2:46:8a:a7:e2:c8:54:3d:ab:1a:ee:
9a:c1:24:32:9b:c0:d2:8c:3b:80:d1:12:5e:fd:8b:
a1:b8:b6:3e:f5:52:67:f7:9f:64:2e:ac:8e:d0:ef:
03:b3:1b:19:d6:99:31:d0:2c:8e:f6:2f:9f:fa:ee:
7c:8a:c4:f5:3f:cf:74:41:8d:59:7d:ff:d5:d2:66:
81:c3:a2:89:37:9b:64:6f:3f:c1:78:c4:98:fc:75:
ee:ce:cb:dd:fb:7c:bd:67:ff:93:e8:ff:05:a3:f4:
4e:89:f1:ea:08:dd:e2:b4:e1:34:29:97:00:e6:fc:
ff:30:75:ce:a2:f9:15:30:85:45:5e:d5:bd:94:49:
3e:0a:ba:f5:4c:e6:42:6b:25:53:50:7f:c3:33:6e:
2a:ad:fa:47:db:bc:ce:39:58:ae:3f:ba:b0:a9:32:
a8:f9:6c:79:9e:e0:4f:37:d7:42:59:cc:8a:fb:af:
f5:f6:eb:1d:5c:08:03:16:92:8d:15:ff:32:4b:92:
ac:26:1f:b0:ac:69:91:73:13:72:69:23:1f:c5:48:
06:52:77:d0:17:63:f5:a1:ab:59:ba:38:5c:b8:dc:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:65:81:F6:13:D2:7C:9A:98:AB:C6:2E:7C:79:54:80:8F:1A:51:66
X509v3 Authority Key Identifier:
keyid:F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/omWB9hPSfJqYq8YufHlUgI8aUWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7b83::/32
2a0c:7b87::/32
Signature Algorithm: sha256WithRSAEncryption
96:1f:af:26:27:e8:16:07:1b:d5:7c:62:9c:7d:e0:63:28:15:
e9:11:88:f4:9b:da:b0:8a:07:58:32:f3:42:03:02:2b:04:ad:
ea:bf:83:d0:06:27:99:2b:3e:0a:04:5d:31:72:de:46:70:8e:
69:37:5f:2f:09:81:d4:f7:d1:19:3b:80:ec:c0:12:b9:26:db:
e9:ac:d3:7b:d2:4b:e9:56:60:d3:72:0a:65:d0:d4:1c:c3:dc:
e4:7f:59:d8:f5:43:67:c9:0b:ba:f6:42:4d:62:7b:89:f2:93:
db:2f:2a:69:73:7f:06:be:51:4e:3c:0b:47:4f:d4:3b:d5:de:
bc:52:de:74:8f:22:69:5f:24:db:21:2e:af:0c:dc:b6:12:b7:
4a:41:69:c7:2c:b6:71:5e:c0:22:f9:fc:73:98:1d:60:06:e0:
87:b4:52:f8:82:4c:f7:f8:a0:87:e0:5f:ba:ce:37:51:12:95:
52:e7:5e:bc:bf:3a:57:37:23:a3:10:91:52:2d:c5:cf:41:29:
9a:57:de:bc:13:40:9a:f3:c1:fc:f7:27:03:0b:4c:37:8f:20:
a8:76:8a:1b:51:2f:13:98:50:c0:fc:7f:2b:79:3b:fe:af:fa:
d5:00:50:02:ae:54:6c:06:7e:bc:dd:72:fe:c1:7c:c5:f2:72:
68:bf:1b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:40 2025 by rpki-client