Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/ozWv7bU5ZFGqyms4ZyTgSklULO8.roa
File: ozWv7bU5ZFGqyms4ZyTgSklULO8.roa (raw, json)
Hash identifier: mNDmK352Yl78ZUM0HISc1woeJcefBn1mtScDTD+qYDs=
Subject key identifier: A3:35:AF:ED:B5:39:64:51:AA:CA:6B:38:67:24:E0:4A:49:54:2C:EF
Certificate issuer: /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial: 018CC80191F8B07F01D2031E4D5BABC1F342
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/ozWv7bU5ZFGqyms4ZyTgSklULO8.roa
Signing time: Tue 02 Jan 2024 02:29:55 +0000
ROA not before: Tue 02 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210896
IP address blocks: 2a0c:d540:1111::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:91:f8:b0:7f:01:d2:03:1e:4d:5b:ab:c1:f3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Validity
Not Before: Jan 2 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a335afedb5396451aaca6b386724e04a49542cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:38:c2:39:53:c3:10:01:36:62:2b:fe:32:
65:85:9f:16:e1:47:b4:b2:18:3a:bd:20:a3:20:c8:
3f:c5:c4:44:8d:bd:cc:bf:b0:bf:30:6f:a1:b8:7c:
78:81:6e:7c:78:fd:89:e8:9b:39:36:58:96:40:92:
4b:e8:a6:d0:4c:60:6e:4d:bf:e8:60:c6:8c:16:8e:
8b:3c:f3:30:75:d2:3d:51:27:c4:57:41:01:44:9c:
04:f6:0f:2e:d0:7f:f6:7c:a0:a9:a1:2e:28:48:fd:
78:f5:c6:27:9f:e4:a2:25:0d:0e:a8:73:c9:1b:3d:
eb:18:39:bc:40:1f:3e:cb:e3:86:03:3a:b6:cb:31:
38:54:92:7a:c3:41:21:56:06:79:9c:80:a9:46:4e:
89:87:88:fe:ae:e2:01:18:e6:7b:e3:fe:f3:bf:c3:
c1:87:a4:c0:6f:84:40:45:30:c7:d5:64:c2:1f:f0:
89:55:0c:7d:b8:5c:34:cb:45:f4:ba:60:22:6e:8f:
32:d3:c0:b9:56:cb:3b:c9:72:da:cb:b9:a7:88:27:
b2:50:3b:ac:a6:06:08:59:d1:ff:7a:97:6c:29:99:
ca:e2:ef:90:f8:f8:5b:63:9d:55:fc:6d:46:39:a3:
77:06:a6:3b:aa:89:e4:0d:b8:05:47:e6:1d:df:11:
fd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:35:AF:ED:B5:39:64:51:AA:CA:6B:38:67:24:E0:4A:49:54:2C:EF
X509v3 Authority Key Identifier:
keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/ozWv7bU5ZFGqyms4ZyTgSklULO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:d540:1111::/48
Signature Algorithm: sha256WithRSAEncryption
29:f9:36:aa:15:a9:73:4a:25:45:8d:b2:c3:ec:72:88:92:cb:
5a:f4:2d:c0:0e:f6:bb:da:3e:41:cc:a5:38:b8:8b:ab:b7:4f:
49:dd:8c:8a:7c:e4:52:2e:7a:d9:23:53:0e:12:95:6f:8a:95:
07:5b:9d:ac:98:a8:2d:c5:8f:4e:57:f3:8b:9c:91:db:e2:f4:
87:19:ec:2a:e9:bd:e3:cf:bc:93:cc:88:9a:af:27:f4:f1:b7:
40:c1:27:ea:3d:ce:a6:85:8d:98:ea:b8:f7:25:10:8b:1e:b9:
90:58:dc:71:e7:68:04:bc:92:a6:77:df:c9:f6:09:e2:79:ad:
90:3b:e3:8e:6f:17:a3:79:3d:84:06:11:89:f2:a1:e0:12:49:
78:c2:1a:bb:f4:dd:90:95:28:3e:fa:79:82:15:03:ef:7d:49:
5e:af:93:73:25:b0:aa:4c:0c:dc:3d:a6:2f:61:e0:7b:36:f4:
2a:96:b2:9f:81:e1:c1:48:ea:8b:e8:fb:25:0e:40:bc:d2:96:
21:b5:96:46:ed:8b:ce:13:5e:f4:6e:50:a9:a3:84:34:70:49:
03:d3:54:ea:7e:68:7f:11:08:38:7c:17:ff:19:85:92:88:bd:
7f:fd:75:09:79:8d:33:1d:de:67:30:e9:bd:c2:74:b1:55:ec:
de:d4:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:17:30 2025 by rpki-client