Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/odQGUN-Kmc4e9-CaRDN5nSDsv3c.roa
File: odQGUN-Kmc4e9-CaRDN5nSDsv3c.roa (raw, json)
Hash identifier: 5YkjQrGLAuUCDKfkmJYVY1GAYOevmrtsFzJdDn6fqmU=
Subject key identifier: A1:D4:06:50:DF:8A:99:CE:1E:F7:E0:9A:44:33:79:9D:20:EC:BF:77
Certificate issuer: /CN=220c904d430e4f999d147e214515e9cba7ac7e84
Certificate serial: 0194266BFB9967ED07BB854578F8360BDC2E
Authority key identifier: 22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/odQGUN-Kmc4e9-CaRDN5nSDsv3c.roa
Signing time: Thu 02 Jan 2025 09:49:58 +0000
ROA not before: Thu 02 Jan 2025 09:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16074
IP address blocks: 2001:67c:2f04::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:fb:99:67:ed:07:bb:85:45:78:f8:36:0b:dc:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220c904d430e4f999d147e214515e9cba7ac7e84
Validity
Not Before: Jan 2 09:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1d40650df8a99ce1ef7e09a4433799d20ecbf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b3:24:7e:e2:3a:75:36:a0:a7:0b:ba:f3:d3:
bb:a0:1c:f0:b1:eb:ec:44:38:bc:70:dc:93:44:11:
e3:ed:f2:fe:6d:2f:42:d0:53:6b:1a:6d:98:5b:9d:
72:d4:f1:c8:81:aa:5f:8e:f3:6e:d5:ec:4e:37:df:
97:c2:e6:5e:19:81:c0:38:a1:16:8e:fa:bc:5c:a1:
6e:80:28:df:26:ef:b5:fd:cd:e9:e7:8a:4d:a8:1d:
ef:7c:12:1c:fc:36:33:b8:bb:d9:0a:f3:32:57:34:
68:94:5b:2f:7b:65:42:38:a4:27:6b:a4:ce:64:b2:
b7:61:1a:28:5a:5f:87:64:38:eb:e1:be:8e:83:46:
12:4e:5c:2a:5e:ab:ac:a4:ab:e5:eb:db:fe:5a:b3:
d2:31:09:93:83:58:f5:ac:ed:8b:66:fb:d5:4f:28:
1e:3a:35:84:5d:13:9b:9a:30:85:38:64:61:2b:e6:
1d:81:65:71:63:9f:66:4a:aa:54:82:9b:e5:28:42:
db:93:24:24:10:e8:b0:98:7d:dc:e1:d8:91:8f:20:
0b:b8:ec:9a:fc:04:28:4c:4b:70:19:4c:f1:17:38:
1c:0a:c7:f5:fc:c2:b5:62:bc:f9:0c:d5:8d:97:48:
a8:f1:44:91:51:6f:37:a4:ca:dc:fa:69:7f:48:a1:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D4:06:50:DF:8A:99:CE:1E:F7:E0:9A:44:33:79:9D:20:EC:BF:77
X509v3 Authority Key Identifier:
keyid:22:0C:90:4D:43:0E:4F:99:9D:14:7E:21:45:15:E9:CB:A7:AC:7E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgyQTUMOT5mdFH4hRRXpy6esfoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/odQGUN-Kmc4e9-CaRDN5nSDsv3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4b06d3-a58b-4a29-b68d-764de3b7bf3d/1/IgyQTUMOT5mdFH4hRRXpy6esfoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2f04::/48
Signature Algorithm: sha256WithRSAEncryption
15:b9:e7:60:bc:cc:32:27:9f:d6:99:f2:03:38:55:67:5b:3e:
3e:cc:a3:f6:59:1d:89:14:81:3e:70:09:ec:aa:60:3e:8c:99:
f6:ad:61:4c:23:17:21:8c:5e:06:9e:d9:20:c5:30:d4:25:0d:
e6:5a:20:ec:51:9c:fb:0d:b5:ee:19:55:c0:a8:1e:65:29:e8:
1c:b1:d0:1b:70:ae:8c:2f:11:1d:b5:5c:6b:a7:be:0c:b6:c6:
37:f9:c2:cf:e6:88:11:46:df:09:29:94:c8:75:d0:81:e0:9b:
6d:a8:c6:13:15:df:44:2d:37:6c:6b:a4:29:92:14:e6:a5:17:
20:e7:f5:0d:e8:11:4e:29:50:54:2f:44:d3:af:16:51:af:ee:
1f:8b:10:b7:f5:48:16:41:e9:de:19:cb:7e:3b:53:a8:ff:30:
a1:45:14:63:2e:f6:bf:49:7b:e3:1f:71:35:1d:d3:bf:3b:ef:
31:9e:41:0a:71:ba:d0:34:17:8c:4b:82:77:72:4e:02:4d:c0:
fe:c5:ab:cd:96:f2:c1:be:6b:dc:4f:32:74:ab:a6:82:d9:fe:
b5:7f:55:c9:51:84:74:75:13:d1:91:67:37:18:2f:96:3e:1c:
d5:e7:56:96:19:f2:28:3d:25:2e:07:b2:59:ed:1b:b7:57:70:
1a:9e:e8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:44:37 2025 by rpki-client