Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/oH-KuzEBTT1Jj9jRIYSrJhWWDA0.roa
File: oH-KuzEBTT1Jj9jRIYSrJhWWDA0.roa (raw, json)
Hash identifier: OT0X0o4GJQ8rzCrOkZIscdAmjhqqaxADA5FmAXxEAv8=
Subject key identifier: A0:7F:8A:BB:31:01:4D:3D:49:8F:D8:D1:21:84:AB:26:15:96:0C:0D
Certificate issuer: /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial: 019420D63D14F0D9049E117A550B0C3E98B5
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/oH-KuzEBTT1Jj9jRIYSrJhWWDA0.roa
Signing time: Wed 01 Jan 2025 07:48:18 +0000
ROA not before: Wed 01 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205630
IP address blocks: 2a07:22c0:8004::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3d:14:f0:d9:04:9e:11:7a:55:0b:0c:3e:98:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a07f8abb31014d3d498fd8d12184ab2615960c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:eb:79:18:37:4b:ca:7a:71:1c:f5:a7:be:
12:4c:41:b9:f2:e7:be:3c:56:09:4d:e4:f3:7a:b6:
1e:c4:e2:53:38:0c:48:a6:b5:69:b3:94:c7:ba:81:
91:75:ff:ad:a6:23:de:df:c1:f7:4c:5c:f9:37:96:
37:90:62:43:8a:f1:4a:de:89:39:50:08:11:82:ad:
c1:d8:20:09:a6:65:7f:bd:b5:27:d4:64:a5:f3:67:
43:1d:58:f0:c3:e7:86:6c:13:cc:56:b4:b0:6b:24:
f7:89:1a:90:38:1d:38:75:23:8a:fd:ac:f4:4c:8e:
11:e0:b7:0c:bd:c4:64:6a:a9:ec:99:67:34:7b:29:
e7:19:96:90:78:f9:2a:f4:bd:b1:1c:d8:f2:00:31:
03:ec:81:90:cf:7b:19:4a:8c:b9:76:a7:26:14:f9:
46:34:d2:e3:ad:f4:7a:56:0b:12:4f:aa:64:c4:cc:
cc:f3:08:2c:1a:f9:b1:a2:10:57:f9:39:f1:5f:b0:
ce:9b:17:d8:57:73:e2:80:ac:ce:68:9c:c8:12:94:
cf:a9:46:91:4d:6b:f9:ce:4c:c4:b4:0a:fa:d1:25:
9c:dd:92:90:40:37:09:b8:06:d9:e3:86:9a:59:cf:
3c:ab:8b:1a:8d:9a:7d:e3:b9:cc:14:a0:9f:ee:75:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7F:8A:BB:31:01:4D:3D:49:8F:D8:D1:21:84:AB:26:15:96:0C:0D
X509v3 Authority Key Identifier:
keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/oH-KuzEBTT1Jj9jRIYSrJhWWDA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:22c0:8004::/48
Signature Algorithm: sha256WithRSAEncryption
30:27:32:9c:17:4a:ba:53:2d:b3:a8:31:78:8c:de:52:8c:d6:
00:04:ea:d9:8f:47:36:5f:f0:ec:b5:7f:bb:45:98:6c:3e:6e:
fa:3f:1f:55:ca:37:e7:83:8e:30:2f:14:e3:76:71:4a:d0:3e:
f4:85:a0:88:a3:80:16:15:c8:b9:79:6e:cb:ba:1c:ea:81:07:
7d:34:79:89:b1:e1:aa:8c:95:df:60:a2:61:e8:eb:2d:a5:17:
2f:10:00:92:0d:2c:b8:2b:d9:45:be:90:42:4c:4f:db:66:df:
7a:9a:d6:a3:c3:5d:b6:7a:3e:bd:2b:e1:1b:16:2d:84:48:0e:
0d:5f:78:b8:92:86:99:71:08:87:38:4b:d8:cc:f1:5c:e0:1f:
b0:ec:3b:6d:a9:91:ef:b6:14:c5:54:6f:6f:c3:9e:cf:89:f1:
94:bb:a1:2f:91:c5:af:54:8b:ad:1d:40:5c:ee:3e:bf:3b:59:
2d:dc:75:93:95:13:62:1b:37:b5:a4:78:09:b4:fb:9b:8a:ef:
a8:d0:63:9f:b2:78:7b:ff:a8:ce:13:87:28:af:cf:db:7f:da:
82:ba:33:15:7c:fc:ab:3f:89:f2:cc:1b:9f:04:b9:35:fd:9d:
59:61:53:25:bd:78:2b:10:57:57:30:88:d6:b5:1e:d5:2f:5b:
74:50:96:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:55:29 2025 by rpki-client