Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ovwazcYPOsd_f1y4lNe7y_rOpTw.roa
File: ovwazcYPOsd_f1y4lNe7y_rOpTw.roa (raw, json)
Hash identifier: SlFVfn/TEMsBz9XdMlDA9sYZIasb27k6TlSHhy6Xjkg=
Subject key identifier: A2:FC:1A:CD:C6:0F:3A:C7:7F:7F:5C:B8:94:D7:BB:CB:FA:CE:A5:3C
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01942825755EB1B84479C82FD15D5B17E292
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ovwazcYPOsd_f1y4lNe7y_rOpTw.roa
Signing time: Thu 02 Jan 2025 17:52:10 +0000
ROA not before: Thu 02 Jan 2025 17:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205980
IP address blocks: 2a0f:b241:3a::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:75:5e:b1:b8:44:79:c8:2f:d1:5d:5b:17:e2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jan 2 17:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2fc1acdc60f3ac77f7f5cb894d7bbcbfacea53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:b6:18:0f:95:d6:65:0f:c2:5e:7b:ee:d4:
88:36:0a:db:45:01:90:b7:e7:81:b5:a0:5a:ac:3c:
99:66:17:4d:79:a4:85:d2:10:57:f5:e0:1f:bc:1c:
2a:63:fc:43:3c:ab:4f:3f:a0:e8:6f:5c:5b:2a:29:
77:92:a4:2a:0c:98:6b:13:62:80:e7:57:33:79:8d:
ec:1b:2a:a2:53:ea:fc:bb:5f:92:47:5e:a8:83:6e:
04:07:38:05:ce:14:81:0e:9b:bb:ef:e7:00:6d:86:
20:aa:73:c0:c5:bb:44:8e:16:2a:50:7b:ae:4c:04:
da:d5:28:4d:e5:c1:49:b0:39:cd:76:33:b2:95:6e:
a0:87:13:f7:f3:7a:1d:fb:de:3d:8d:08:91:56:34:
61:5f:17:e3:df:b8:c8:29:07:7d:e5:4b:d1:23:c4:
c5:05:8b:53:a0:33:86:37:1c:55:d4:ce:3f:30:92:
78:23:9c:ec:47:8a:19:94:fd:b2:af:a6:19:61:39:
26:ef:f6:aa:3d:0f:cd:03:6a:65:ff:60:ed:81:2a:
ef:80:c4:3a:50:b3:ac:c6:02:61:69:26:50:db:b5:
2b:37:16:6d:37:83:1b:d7:78:06:8e:11:54:11:9c:
36:50:84:85:7d:85:5d:3f:4c:79:dc:4a:42:2b:97:
c0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FC:1A:CD:C6:0F:3A:C7:7F:7F:5C:B8:94:D7:BB:CB:FA:CE:A5:3C
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ovwazcYPOsd_f1y4lNe7y_rOpTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:3a::/48
Signature Algorithm: sha256WithRSAEncryption
3e:79:25:27:d4:62:d5:1a:36:8c:a7:a1:ff:4f:1d:d1:a0:02:
48:05:47:96:f9:58:8b:8d:7b:0d:e1:2d:84:8e:21:fd:2b:7c:
44:f1:93:21:fc:db:d1:64:04:88:44:13:a0:3c:2f:3c:66:fb:
6e:d0:8b:86:ea:7a:28:ae:da:89:ff:59:d6:29:32:1c:26:f7:
fc:b1:0b:7f:62:bf:53:f6:61:13:74:60:f9:b0:a1:72:ed:c0:
48:dc:d8:1b:16:df:e8:99:3e:ff:6b:ae:fd:50:63:e9:c8:13:
47:f3:34:cb:01:36:af:c9:74:63:e1:29:29:c6:ce:f6:1f:02:
e7:e5:0c:43:e5:62:8d:4e:89:6e:09:f4:af:af:96:83:ed:7c:
2a:64:36:96:21:eb:c5:ea:1a:9a:df:c2:6a:ad:10:9d:3f:32:
0e:10:f3:4d:ae:67:16:ee:ff:48:de:c1:93:27:af:14:88:99:
3e:4a:ef:d6:9b:03:64:90:ea:01:cd:7f:99:3d:cb:4c:47:ca:
5b:6b:ef:f5:a5:e2:d0:83:d8:05:d7:62:2f:e7:16:84:eb:29:
29:6a:d2:30:56:80:39:08:9a:ca:94:63:8a:3a:db:c5:fe:6c:
0e:6d:2e:e4:c6:4c:0e:9f:3e:d9:d6:0a:2c:bf:a6:1a:86:d5:
81:60:70:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:18:30 2025 by rpki-client