Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/OMLGm3M8AukdVmECZgGAm5oBI6w.roa
File: OMLGm3M8AukdVmECZgGAm5oBI6w.roa (raw, json)
Hash identifier: NhtCtzcMBYjPL2amj6HhHMrktNr+dPVzL27OzOSW9VY=
Subject key identifier: 38:C2:C6:9B:73:3C:02:E9:1D:56:61:02:66:01:80:9B:9A:01:23:AC
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01941FFA7FB02063FC99E347B21F16E7C18A
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/OMLGm3M8AukdVmECZgGAm5oBI6w.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43474
IP address blocks: 2a00:ece1:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7f:b0:20:63:fc:99:e3:47:b2:1f:16:e7:c1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38c2c69b733c02e91d5661026601809b9a0123ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:ac:23:18:15:ba:44:4c:00:10:40:4a:1d:
78:86:86:4a:49:3a:e7:64:8e:39:f9:67:24:9a:c7:
74:21:b0:de:0d:e8:95:f1:40:f9:33:e1:c4:71:b7:
bc:f9:07:92:fc:af:66:f7:a4:3c:73:00:45:53:62:
87:fd:55:80:3b:19:22:42:2f:c8:30:74:11:68:b5:
61:e9:f0:ba:93:65:1a:c7:9a:b8:0c:bd:9c:a9:33:
1d:63:e1:9f:f2:14:ac:5c:12:fb:11:de:72:11:f5:
4b:bc:c8:21:1f:7c:02:c6:65:32:51:26:80:cf:3c:
fe:7f:ba:40:b9:63:9e:41:e0:03:81:ad:cc:df:16:
89:40:ae:31:d7:4c:18:93:20:b2:d9:64:c7:23:17:
b9:ce:62:89:b8:21:99:a7:4a:7c:ac:fa:1d:b8:63:
e3:da:d5:b2:25:d4:c5:87:a2:92:9e:c7:a1:68:f7:
1f:e4:55:f7:71:76:8c:6e:62:cd:c6:c0:49:d5:23:
a5:ec:9d:09:e3:ed:bb:0a:c4:91:f2:a9:27:90:aa:
2e:e9:1a:ba:ce:19:20:54:3b:e9:38:fc:d3:ea:48:
94:42:bb:f7:d5:bb:ff:f6:d3:16:89:0b:e6:d3:3a:
82:97:d7:81:ff:41:03:b0:4c:3d:9f:f9:a5:0a:96:
08:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C2:C6:9B:73:3C:02:E9:1D:56:61:02:66:01:80:9B:9A:01:23:AC
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/OMLGm3M8AukdVmECZgGAm5oBI6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ece1:2::/48
Signature Algorithm: sha256WithRSAEncryption
36:cc:4b:bd:85:a6:fa:cd:02:9f:e1:64:6f:aa:54:6a:30:92:
d8:06:83:ac:5f:7f:9a:a4:51:fc:44:c6:7f:2c:25:4e:57:6b:
bd:dc:bc:bb:ef:2a:bd:13:fa:dc:db:b0:a3:25:f4:31:b0:6d:
6c:5e:79:71:f7:48:5a:2a:91:5e:b9:94:46:fc:ef:e6:7d:78:
49:ad:8d:dd:53:08:0f:e5:5e:cc:1c:5d:54:7d:f7:44:d8:19:
54:52:dd:9c:d2:f4:ea:73:17:29:ad:00:36:5f:fb:8e:3b:1f:
9b:d2:ed:5f:c9:2c:43:56:c4:4f:5f:a9:a0:98:1e:6d:fe:58:
44:b5:72:37:79:b1:a7:14:90:bd:b5:1b:68:89:df:fd:d7:fb:
ba:a1:92:af:37:17:b1:25:ab:1d:cf:83:2e:f4:75:44:bd:ca:
59:09:f2:d3:de:a9:81:bf:12:0f:1e:21:ec:97:6a:4f:9e:50:
e2:93:36:e7:62:0e:4b:86:46:78:6e:3e:b1:61:e2:4f:1b:b1:
44:4e:f0:c6:8c:b1:b3:da:80:1e:e4:3f:2d:16:c3:6c:57:b7:
66:be:ba:f4:ed:41:68:b9:85:1f:b4:93:c6:ad:5d:00:9c:15:
f1:66:cd:ca:2e:ce:69:84:9c:aa:04:c9:ac:94:62:ac:42:3d:
af:96:b5:0e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQf+n+wIGP8meNHsh8W58GKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk
YmM3YjMwHhcNMjUwMTAxMDM0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGMyYzY5YjczM2MwMmU5MWQ1NjYxMDI2NjAxODA5YjlhMDEyM2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5qsIxgVukRMABBASh14hoZKSTrn
ZI45+Wckmsd0IbDeDeiV8UD5M+HEcbe8+QeS/K9m96Q8cwBFU2KH/VWAOxkiQi/I
MHQRaLVh6fC6k2Uax5q4DL2cqTMdY+Gf8hSsXBL7Ed5yEfVLvMghH3wCxmUyUSaA
zzz+f7pAuWOeQeADga3M3xaJQK4x10wYkyCy2WTHIxe5zmKJuCGZp0p8rPoduGPj
2tWyJdTFh6KSnsehaPcf5FX3cXaMbmLNxsBJ1SOl7J0J4+27CsSR8qknkKou6Rq6
zhkgVDvpOPzT6kiUQrv31bv/9tMWiQvm0zqCl9eB/0EDsEw9n/mlCpYIfwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDjCxptzPALpHVZhAmYBgJuaASOsMB8GA1UdIwQY
MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt
NTQ4NDQwMmNlYjdhLzEvT01MR20zTThBdWtkVm1FQ1pnR0FtNW9CSTZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh
LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgDs4QAC
MA0GCSqGSIb3DQEBCwUAA4IBAQA2zEu9hab6zQKf4WRvqlRqMJLYBoOsX3+apFH8
RMZ/LCVOV2u93Ly77yq9E/rc27CjJfQxsG1sXnlx90haKpFeuZRG/O/mfXhJrY3d
UwgP5V7MHF1UffdE2BlUUt2c0vTqcxcprQA2X/uOOx+b0u1fySxDVsRPX6mgmB5t
/lhEtXI3ebGnFJC9tRtoid/91/u6oZKvNxexJasdz4Mu9HVEvcpZCfLT3qmBvxIP
HiHsl2pPnlDikzbnYg5LhkZ4bj6xYeJPG7FETvDGjLGz2oAe5D8tFsNsV7dmvrr0
7UFouYUftJPGrV0AnBXxZs3KLs5phJyqBMmslGKsQj2vlrUO
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:42 2025 by rpki-client