Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Oo3wgsgA5IAMTCpPgrh7ZciH0xE.roa
File: Oo3wgsgA5IAMTCpPgrh7ZciH0xE.roa (raw, json)
Hash identifier: FMvw+uNDe6Gd0xeNf8v9z90QDDQF9czn+XiT6cIOvnY=
Subject key identifier: 3A:8D:F0:82:C8:00:E4:80:0C:4C:2A:4F:82:B8:7B:65:C8:87:D3:11
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369F8EA80E03660CD5777BBFBDD7132
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Oo3wgsgA5IAMTCpPgrh7ZciH0xE.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215315
IP address blocks: 2a0f:7803:faf0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f8:ea:80:e0:36:60:cd:57:77:bb:fb:dd:71:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a8df082c800e4800c4c2a4f82b87b65c887d311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:3b:ff:42:67:4c:31:65:d2:9d:ad:2c:9d:
9d:19:b7:26:32:7a:7c:86:2c:67:ac:56:1b:ac:3d:
9b:5e:af:62:63:eb:32:51:1b:1c:a7:44:9d:ee:8b:
7d:96:e9:b5:0d:ac:5e:41:4f:36:72:6e:44:2d:35:
45:94:06:0b:8b:b4:66:d4:d9:a3:af:c8:05:3a:c0:
ce:1d:2e:d6:2f:05:ca:8e:ca:93:aa:32:27:01:36:
e7:f3:24:0f:32:47:f1:13:b5:83:b8:8e:ed:22:72:
52:b5:73:ec:03:8f:a6:03:51:51:d8:51:fb:78:98:
aa:1a:ce:53:d1:bd:0c:ba:64:45:e7:b2:8b:aa:7b:
35:b9:68:93:8c:1d:59:fb:8a:2e:ce:c3:98:29:52:
93:81:22:94:74:0b:2a:c8:aa:cc:10:04:28:d6:8d:
f6:73:19:31:41:2a:78:aa:61:0d:3f:a5:ad:58:be:
d4:b3:8c:dd:75:36:36:88:4e:93:74:bd:6a:44:8e:
66:2b:1e:c8:5a:25:83:ce:f5:d2:15:46:88:b8:7f:
13:0c:36:ca:c3:85:b5:6d:07:07:06:27:23:78:2e:
71:0a:a5:1f:d8:c2:19:cd:b6:60:ed:95:ab:e8:3d:
6f:e9:4f:97:96:2e:ec:aa:61:92:69:07:39:74:41:
ce:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8D:F0:82:C8:00:E4:80:0C:4C:2A:4F:82:B8:7B:65:C8:87:D3:11
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/Oo3wgsgA5IAMTCpPgrh7ZciH0xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:faf0::/44
Signature Algorithm: sha256WithRSAEncryption
31:32:94:75:da:29:97:e1:9c:c2:b4:e8:83:1d:1c:ca:ac:0f:
39:2f:d7:ee:25:4f:ab:b0:34:6b:d8:fa:8d:af:b1:93:4a:c9:
a8:0f:1c:03:19:ee:da:0b:44:8f:2a:da:cf:97:bd:29:05:15:
a6:6a:6c:60:b5:bb:be:5d:f8:f1:17:95:29:56:05:1a:ad:56:
78:01:75:3e:f1:32:82:5f:92:9c:e7:1c:6e:01:8b:e8:83:0c:
44:cc:8e:3f:78:60:ae:78:3a:1b:dc:3b:5b:d9:be:08:e7:c6:
78:a1:ec:0f:84:21:bf:a1:1a:76:8b:84:6f:7a:28:58:34:b3:
64:22:e3:4a:5b:de:fd:cd:2c:1f:3b:d0:fc:4f:1c:5f:17:4b:
c9:bb:cb:57:11:3f:3d:5c:1d:e5:dd:da:50:c6:c5:55:44:0e:
7d:bc:36:bc:31:f6:7a:b8:21:68:44:b7:57:7e:65:a7:2f:14:
56:17:69:79:f1:d2:db:9a:9a:8b:dc:6d:c7:35:4a:5f:2a:cb:
50:e0:8e:04:06:91:2d:82:ed:7e:1f:a5:17:92:df:f4:0a:3e:
5a:b8:66:35:4b:9e:92:14:84:92:6f:f5:f9:6b:d8:b7:b2:27:
6a:2c:5e:31:b1:80:fa:dd:c2:ee:89:03:2e:1a:aa:76:71:c0:
e3:9c:73:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:42 2025 by rpki-client