Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/oXiTTcRkcwNsNmrBR8X98THxTnA.roa
File: oXiTTcRkcwNsNmrBR8X98THxTnA.roa (raw, json)
Hash identifier: S3S6MlBADbon7pLTq6DSED/lTUqvyWEFbwp4dTxcf5A=
Subject key identifier: A1:78:93:4D:C4:64:73:03:6C:36:6A:C1:47:C5:FD:F1:31:F1:4E:70
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018EE669F4F332E6980EAE19DD1D7C12D61A
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/oXiTTcRkcwNsNmrBR8X98THxTnA.roa
Signing time: Tue 16 Apr 2024 10:18:07 +0000
ROA not before: Tue 16 Apr 2024 10:18:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 2a0f:db80::/32 maxlen: 32
2a0f:db81::/32 maxlen: 32
2a0f:db82::/32 maxlen: 32
2a0f:db83::/32 maxlen: 32
2a0f:db84::/32 maxlen: 32
2a0f:db85::/32 maxlen: 32
2a0f:db86::/32 maxlen: 32
2a0f:db87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:69:f4:f3:32:e6:98:0e:ae:19:dd:1d:7c:12:d6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Apr 16 10:18:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a178934dc46473036c366ac147c5fdf131f14e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:ec:58:e5:18:46:9f:4e:d4:f0:9f:c9:cc:
72:0a:f9:8d:10:eb:52:a0:21:8f:e7:c0:4d:f5:d9:
15:47:ba:1d:b1:66:e2:4a:5c:cd:2d:6d:9c:da:0c:
0f:55:a1:6f:6a:fe:fd:e6:8c:3c:c1:a7:39:eb:6a:
2b:df:60:f1:4f:3c:ec:15:b7:2c:f0:b5:41:77:99:
8f:91:1e:72:f5:d0:99:39:cb:e1:91:6a:e6:7e:d7:
02:dc:5d:01:79:11:9d:79:fa:f6:ee:56:03:f5:6e:
c8:40:cc:ab:a9:93:16:d9:ab:e5:be:34:db:9d:d4:
63:d0:bb:d7:6d:ed:cb:19:10:7e:44:be:e6:ea:28:
23:b3:11:52:83:f2:e1:77:29:f7:ea:dd:f3:05:de:
4a:7f:a1:3e:a1:0e:92:c0:68:ae:3c:69:48:d7:47:
e6:f1:00:32:c7:1e:f6:0a:6c:9c:cc:84:e0:04:05:
f7:2a:94:30:a3:ef:1e:26:db:78:c1:c8:c0:bc:b7:
e9:a9:d2:88:2d:b2:5b:65:c3:a3:57:d9:08:25:1a:
a6:a9:ed:df:43:ea:7e:35:88:d7:cf:4d:16:0c:48:
7d:17:88:bf:c7:5a:8e:65:63:15:92:26:2a:67:8a:
db:58:3e:3c:a1:7d:b4:9a:73:86:70:e8:f3:bc:2d:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:78:93:4D:C4:64:73:03:6C:36:6A:C1:47:C5:FD:F1:31:F1:4E:70
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/oXiTTcRkcwNsNmrBR8X98THxTnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:db80::/29
Signature Algorithm: sha256WithRSAEncryption
4a:da:64:6f:20:5f:f1:a4:c9:43:49:23:e9:ff:0d:02:f3:fb:
0a:53:d9:d2:7d:b2:6c:da:51:a5:69:24:ab:fb:54:d1:56:ba:
5d:74:66:16:9f:a0:eb:ba:c8:75:c4:13:e7:ac:9f:08:2f:79:
71:f3:ae:73:b2:b8:e3:db:6f:93:4c:2f:c7:5b:5a:14:1f:eb:
b8:09:5f:f6:85:3e:00:7b:15:34:3a:b1:51:87:cf:9a:ba:13:
e7:29:13:3d:dd:0e:9a:ca:1e:46:64:5b:de:03:cd:ea:aa:9a:
cb:c4:3a:fe:e0:20:e4:c8:ca:9d:4a:65:d3:94:4b:8b:b2:43:
88:a0:0e:3f:42:32:52:8a:67:58:61:3c:cf:2a:dd:d7:5a:ab:
02:dc:09:5e:6d:d0:f1:3d:0f:8b:db:d9:aa:ba:16:74:7f:55:
75:34:a9:d7:0c:0c:12:50:b8:f3:5f:6c:77:81:aa:cc:2f:cc:
57:8d:6f:65:db:88:6b:fc:66:f7:e0:3a:af:76:33:f2:12:b9:
cf:9e:f3:98:30:4d:6e:56:b5:56:74:6b:9e:39:2d:b5:bc:be:
1e:f5:9d:8d:6f:4f:7d:82:78:f5:e9:98:1d:2a:f3:fd:d3:5b:
bf:f5:d2:c3:44:55:6c:ab:c3:0e:bb:ad:ec:05:35:51:1f:6a:
59:ef:e0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:10 2025 by rpki-client