Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/0wOoiFHzK5gzC_uXVajeXvQ84lQ.roa
File: 0wOoiFHzK5gzC_uXVajeXvQ84lQ.roa (raw, json)
Hash identifier: D+Egwm0bBebREDROj/rAkXF059VDkGROSzqMP1pIH44=
Subject key identifier: D3:03:A8:88:51:F3:2B:98:33:0B:FB:97:55:A8:DE:5E:F4:3C:E2:54
Certificate issuer: /CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Certificate serial: 018B91A204AA524623BCE8E21AAB0C49C124
Authority key identifier: 22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/0wOoiFHzK5gzC_uXVajeXvQ84lQ.roa
Signing time: Thu 02 Nov 2023 20:03:16 +0000
ROA not before: Thu 02 Nov 2023 20:03:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 945
IP address blocks: 2a06:a346::/31 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:91:a2:04:aa:52:46:23:bc:e8:e2:1a:ab:0c:49:c1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Validity
Not Before: Nov 2 20:03:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d303a88851f32b98330bfb9755a8de5ef43ce254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:86:98:4b:7d:5c:5d:78:05:80:fd:91:98:f9:
4e:c6:d2:bd:38:5f:8e:91:fe:dc:09:1c:a4:bc:7d:
00:8d:61:0a:04:9b:39:ad:5e:18:52:47:db:3b:12:
db:e1:85:17:26:20:51:1f:49:d8:17:8f:30:0a:a8:
35:33:e9:63:f2:c7:2b:e8:74:04:9a:80:58:0e:6d:
da:ed:97:6e:5c:de:12:8b:a8:e8:dd:88:c4:94:86:
99:5d:1a:d7:f7:ee:97:1d:03:50:a9:2b:c6:4a:1e:
0c:6e:c3:78:e6:3c:a9:bc:d5:be:f0:25:f4:40:92:
29:ad:74:bf:05:1c:f6:2e:ce:6d:74:c7:f0:08:22:
79:ba:57:3f:32:4c:50:64:c1:3a:5f:a7:a4:9e:63:
37:90:e8:4e:01:e3:eb:95:f4:39:20:17:d2:85:d0:
2c:77:d8:e8:4b:a3:28:9c:d1:62:b2:14:28:d6:2c:
08:4f:4e:0e:81:b4:fc:ba:43:22:c4:d5:28:78:01:
21:08:d7:a8:33:41:ec:42:b4:30:8c:b8:f4:b4:03:
e6:0b:8b:14:a6:91:8a:7a:3d:90:45:1f:5a:36:23:
e7:5a:9b:13:9e:44:c8:13:92:40:26:52:e2:9f:7f:
c4:cc:27:79:93:c2:22:93:0f:dd:73:cc:3c:7f:52:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:03:A8:88:51:F3:2B:98:33:0B:FB:97:55:A8:DE:5E:F4:3C:E2:54
X509v3 Authority Key Identifier:
keyid:22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/0wOoiFHzK5gzC_uXVajeXvQ84lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/IqltP2kyPQi0zLmVKUrVC0Ieaw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a346::/31
Signature Algorithm: sha256WithRSAEncryption
63:06:1d:a3:3e:19:64:2f:8d:97:df:81:45:09:13:bc:91:f5:
43:b7:a8:a8:8c:42:06:67:ac:1e:39:be:60:14:2e:67:55:d3:
6b:8e:e5:06:33:14:bf:15:a7:8b:6c:82:e2:91:76:3f:56:8d:
6a:6e:a4:6f:48:83:29:ee:34:da:98:7e:3a:2c:d6:f0:1e:a1:
da:49:18:4f:0a:5a:cb:e2:cc:3c:4a:73:aa:d0:de:aa:f7:12:
8c:a8:dc:8c:f6:40:56:54:b2:41:dd:b9:36:e9:2d:a4:2f:dc:
ca:a7:f8:d9:82:27:04:fd:f5:05:12:6e:37:04:95:cd:8a:01:
1e:69:aa:14:57:d0:7d:30:63:b8:be:ab:a3:c3:94:fe:8b:93:
61:f0:59:b5:8f:25:56:06:39:1e:21:35:f1:d3:58:91:d2:a1:
9b:8d:2b:0f:1a:05:9b:a3:4b:0d:29:c8:96:b2:60:3b:6c:1f:
9d:0d:e9:02:ac:53:5d:89:8f:f5:c4:38:3f:2d:d7:fb:05:37:
ae:1d:9a:fe:ab:11:4c:08:ae:ac:40:b4:ed:e3:c9:62:97:33:
18:cb:f8:4f:9d:05:bd:84:1c:a0:59:96:a5:17:da:90:51:5c:
ad:a6:da:41:8c:30:38:d9:e1:9e:69:d1:78:12:7c:cb:75:56:
6f:17:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:35:36 2025 by rpki-client