Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/OgXWLzQBIYvEON5mUedF6bX5aTo.roa
File: OgXWLzQBIYvEON5mUedF6bX5aTo.roa (raw, json)
Hash identifier: nqpCSiGASiQpy5G6Vl9R55sQwkNptiylFtL8c3H2opE=
Subject key identifier: 3A:05:D6:2F:34:01:21:8B:C4:38:DE:66:51:E7:45:E9:B5:F9:69:3A
Certificate issuer: /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial: 0194258FAFFD1C208B41B73FD73D1B029E38
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/OgXWLzQBIYvEON5mUedF6bX5aTo.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2001:67c:2c3c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:af:fd:1c:20:8b:41:b7:3f:d7:3d:1b:02:9e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a05d62f3401218bc438de6651e745e9b5f9693a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:1d:79:fa:cd:d2:e6:83:6b:c8:a1:f0:16:
0b:1e:ea:7d:ce:71:15:b3:df:69:a2:d4:af:23:f1:
c8:d6:5b:21:55:57:9c:24:24:9d:09:a8:94:cf:45:
f4:40:df:20:18:f1:36:72:94:9e:6f:61:88:7e:70:
a6:b6:98:7c:7f:81:e2:01:66:49:80:b4:0c:1c:71:
65:8b:7a:a5:b7:d4:53:a2:1a:a7:da:e4:2f:30:a1:
d4:b2:7a:b0:c1:d0:59:b3:54:96:4b:6d:27:0c:4c:
84:2a:05:1c:93:7b:2f:77:6f:7b:15:96:48:d3:23:
a2:c3:49:a8:94:2d:d0:d5:ee:b5:48:f1:04:2e:2c:
f1:10:00:30:6b:06:2f:ab:0d:9d:8b:75:ff:ac:a7:
1a:5c:85:f1:d9:f3:92:61:1c:d8:ba:7b:9c:c6:68:
72:67:6b:0e:80:c8:ab:f3:dd:ba:31:31:03:f5:81:
7b:7a:37:4b:47:3a:a2:23:56:2f:17:c5:8f:20:58:
79:f4:11:65:c6:18:59:11:63:f3:46:4d:39:1a:1e:
0d:5e:ce:45:dd:42:9b:b7:cf:44:53:d3:19:36:08:
80:95:7e:73:a2:81:3b:d0:ec:02:f7:91:aa:34:23:
fe:e1:63:d9:d6:e9:60:13:bb:03:f8:9a:6c:0d:6d:
ac:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:05:D6:2F:34:01:21:8B:C4:38:DE:66:51:E7:45:E9:B5:F9:69:3A
X509v3 Authority Key Identifier:
keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/OgXWLzQBIYvEON5mUedF6bX5aTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c3c::/48
Signature Algorithm: sha256WithRSAEncryption
34:df:86:15:86:bc:ea:79:15:91:fb:16:af:3f:37:1f:65:3f:
09:01:1b:3c:df:6b:52:2e:26:c7:49:17:c2:31:07:4d:82:77:
43:cf:30:ed:c7:2b:d3:d0:8b:5e:39:23:b0:5e:85:98:a7:30:
64:ff:40:64:e6:a5:75:e4:bb:7b:a5:b7:22:e6:7a:8c:d2:6b:
ac:4d:bc:de:9f:de:46:90:09:f4:3f:e7:a5:b6:b9:02:82:fa:
14:85:87:48:ac:c1:08:a0:5f:7f:d1:f2:73:5a:62:76:a6:20:
bd:ce:d5:3c:a1:9e:6e:ca:c2:22:3d:cb:48:74:2c:b7:4b:88:
4b:e0:61:c7:3a:4a:6a:21:37:72:60:92:42:6e:3e:f9:3a:ce:
38:95:a8:da:48:53:93:ba:47:be:7c:2a:7c:73:7a:9a:c7:95:
00:a8:af:1f:c9:36:0a:6b:e5:e6:47:8c:9c:ab:44:f2:6a:9e:
26:f9:82:00:00:7d:24:17:8c:4e:01:f8:fb:ce:b2:7f:45:dd:
37:23:cd:df:61:fb:15:f6:60:73:c5:63:c2:e3:81:33:c7:e4:
4f:f0:f3:92:95:6f:6c:37:55:40:d8:b9:45:f1:c6:5b:36:a4:
4d:26:f8:4a:b4:a2:4c:40:c8:08:9c:29:07:a7:ba:d6:86:ac:
55:e4:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:34:06 2025 by rpki-client