Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OGZ3e6Rkcz_AdVPM-7rMX1ncgE4.roa
File: OGZ3e6Rkcz_AdVPM-7rMX1ncgE4.roa (raw, json)
Hash identifier: nJKvaPJjzo3HTFlfn/ylOZdY4m4E+0Eyq00Tcj7BJp4=
Subject key identifier: 38:66:77:7B:A4:64:73:3F:C0:75:53:CC:FB:BA:CC:5F:59:DC:80:4E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01944853BAEECF1EDF411245D8B1F19E4ACE
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OGZ3e6Rkcz_AdVPM-7rMX1ncgE4.roa
Signing time: Wed 08 Jan 2025 23:50:34 +0000
ROA not before: Wed 08 Jan 2025 23:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 922
IP address blocks: 2a0f:b241::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:48:53:ba:ee:cf:1e:df:41:12:45:d8:b1:f1:9e:4a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 8 23:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3866777ba464733fc07553ccfbbacc5f59dc804e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9d:3e:c7:ff:46:22:90:9c:92:6e:30:43:33:
ab:8b:6f:90:65:70:6c:75:fc:cb:84:1a:82:60:20:
e6:e2:c5:22:a3:c6:ec:7a:0c:35:4f:71:c7:49:14:
99:09:2e:53:34:d9:5c:be:cf:08:ca:9b:7d:47:c1:
28:70:cd:0f:f3:cc:c2:17:3e:e5:df:0e:0c:74:e7:
93:97:b2:b0:4d:ea:d1:98:88:df:8a:4c:c3:66:55:
91:9a:db:4c:1b:bb:a5:78:80:34:5a:3c:e5:f6:02:
6b:cd:17:5a:42:f2:1b:9c:92:2d:9d:f3:18:37:91:
b0:0f:68:f0:16:92:f9:24:2e:e4:76:f5:a4:4e:a3:
a4:c0:ed:bb:dd:67:6c:ae:63:be:bd:1d:ea:49:37:
57:0a:10:ed:41:c1:47:5f:f4:db:e1:48:62:23:f0:
1d:21:47:c9:3f:fe:b9:1f:cd:3a:d7:58:7e:4a:c3:
72:56:ff:3c:a1:7a:31:77:e3:e2:86:9a:1a:4a:8b:
ad:47:f6:7a:21:e3:4e:b4:82:1e:a7:ed:3d:8a:95:
0b:d7:12:47:6f:94:7c:93:e4:39:a0:d5:a1:f1:62:
72:3e:62:8e:b3:a8:4b:e6:0b:28:d6:35:3d:b9:30:
06:18:78:08:57:ef:67:40:46:60:a9:76:b3:86:6b:
bc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:66:77:7B:A4:64:73:3F:C0:75:53:CC:FB:BA:CC:5F:59:DC:80:4E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/OGZ3e6Rkcz_AdVPM-7rMX1ncgE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241::/48
Signature Algorithm: sha256WithRSAEncryption
28:16:84:49:88:77:c7:72:a9:09:4f:28:82:66:4a:39:d6:0a:
86:bd:72:98:9c:15:5b:9b:84:76:b3:1a:9c:2d:10:51:ff:37:
a6:e6:d5:4c:f9:82:3f:c3:62:ae:9c:3c:d6:6e:c6:7c:6b:2c:
7e:cc:14:97:ce:70:eb:81:88:b8:e5:d9:f6:1b:09:86:4e:89:
d5:bc:5d:62:ac:2e:f1:ee:55:63:3d:26:4d:d3:c3:21:1e:d8:
10:2d:d5:1b:e4:59:b0:d1:1c:d7:38:87:b2:4c:fc:23:b4:87:
24:88:16:c2:72:e4:10:73:2e:9c:34:c4:88:46:01:a6:45:37:
81:8d:c1:d9:36:f7:97:f3:a1:d3:ae:02:ca:8c:46:9d:39:e3:
d4:1d:f6:59:34:a3:1a:09:35:31:70:42:13:47:ad:28:d9:7b:
ff:64:48:e8:8b:14:a4:cc:c4:89:9e:01:8a:2c:43:0b:0a:97:
b1:a6:98:55:59:4f:64:a2:38:26:c5:55:9e:fe:99:a5:89:03:
f9:29:49:25:45:60:ac:a5:08:fa:e9:f4:4f:26:84:0d:81:fd:
f6:2d:01:45:4b:c6:7c:d9:a8:07:db:72:f3:58:86:39:a5:43:
30:c4:40:fa:a6:c1:c3:15:77:fc:ba:4c:39:33:67:66:3f:21:
47:76:fd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:29:12 2025 by rpki-client