Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/OXV0-TxR9fTn7R31A0-Uw0G4ujo.roa
File: OXV0-TxR9fTn7R31A0-Uw0G4ujo.roa (raw, json)
Hash identifier: 3WsJ+LJL05UI01VNuUtaF+j1jHQBCRtShSGIP5WWMP8=
Subject key identifier: 39:75:74:F9:3C:51:F5:F4:E7:ED:1D:F5:03:4F:94:C3:41:B8:BA:3A
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019426D98F2E3A56B814D44DBFDE05283760
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/OXV0-TxR9fTn7R31A0-Uw0G4ujo.roa
Signing time: Thu 02 Jan 2025 11:49:39 +0000
ROA not before: Thu 02 Jan 2025 11:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214106
IP address blocks: 2a14:6780:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8f:2e:3a:56:b8:14:d4:4d:bf:de:05:28:37:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jan 2 11:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=397574f93c51f5f4e7ed1df5034f94c341b8ba3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:88:d1:d6:f8:83:d2:8f:e8:45:ea:19:76:
c5:1b:de:a0:6c:c0:ed:3f:6f:be:e6:95:50:6d:51:
1d:f8:6b:d7:65:10:84:ea:3d:16:9e:85:93:55:0b:
7b:c6:d4:18:e0:b6:4d:d9:0c:27:2a:83:07:16:e1:
93:30:29:0c:a8:27:96:be:0d:fe:03:3c:10:bf:05:
d2:cf:3f:63:71:5e:20:1a:8d:d3:35:30:6a:71:b8:
cf:84:19:ce:d1:3e:86:ee:b4:8f:b9:b0:e2:2e:c4:
7d:af:3f:0f:c7:43:34:53:68:68:8b:de:d4:00:d3:
e7:fe:8e:37:2e:51:60:f2:5c:bd:a5:99:fc:c1:de:
d8:38:04:66:30:41:a2:75:23:75:a2:a9:67:9e:d6:
93:e4:1c:3c:4a:75:fd:1a:3e:92:fc:07:24:ff:bc:
c9:88:02:86:a8:19:eb:07:7e:dd:77:34:8a:91:4a:
67:01:e1:34:4d:ae:dc:9c:10:cf:94:8e:61:5a:c5:
f2:e9:f7:04:8d:cb:4a:5b:3a:f5:8b:ad:4f:1a:f2:
a7:7e:b8:35:39:4a:58:d2:11:f0:da:0b:64:4c:a2:
15:a6:0e:89:c3:d4:4a:24:47:d4:4e:cf:09:31:77:
d6:4e:4c:11:e8:21:e8:5a:63:fc:6c:59:06:da:17:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:75:74:F9:3C:51:F5:F4:E7:ED:1D:F5:03:4F:94:C3:41:B8:BA:3A
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/OXV0-TxR9fTn7R31A0-Uw0G4ujo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6780:3::/48
Signature Algorithm: sha256WithRSAEncryption
2a:8c:eb:71:ec:0d:76:2c:ef:2b:b7:ba:15:1d:fd:fe:e2:88:
6b:77:21:6a:01:18:78:fb:89:f5:a3:47:ca:5c:b9:75:3e:fc:
70:9d:44:49:ae:73:44:ca:17:71:be:66:ae:4c:d0:05:4e:fa:
de:ab:c5:3d:b3:0a:c9:3c:c3:87:18:84:49:63:d7:95:19:5a:
73:30:91:e5:6e:10:b7:7f:61:00:1e:de:45:97:36:a1:3b:f4:
58:e4:a2:e9:67:5e:3b:c0:12:1c:50:aa:1a:44:de:e5:f1:b0:
bf:b3:53:5e:ad:bd:10:b4:17:28:8e:c9:1d:56:d7:76:a7:b2:
4a:25:10:eb:bc:ef:9b:51:5e:dc:cc:90:92:c2:74:29:54:e9:
63:f1:56:2d:32:6e:53:f8:98:8c:8d:d7:db:8c:31:3a:95:7c:
ea:0e:64:a9:2d:f4:fd:0c:be:43:fa:94:59:5d:b0:68:0d:56:
48:6a:c1:bc:75:5d:34:dd:d3:4b:59:99:e7:8a:d2:5a:19:3e:
17:9b:70:92:ae:47:db:81:d0:30:20:91:fb:7c:19:e7:ed:27:
22:6f:95:5b:36:b5:40:03:55:9a:50:21:c2:26:d7:26:81:0a:
dc:b4:e8:57:49:44:15:56:6a:c8:9f:c3:f2:23:e1:e2:e6:16:
20:c8:f7:d2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQm2Y8uOla4FNRNv94FKDdgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjUwMTAyMTE0OTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTc1NzRmOTNjNTFmNWY0ZTdlZDFkZjUwMzRmOTRjMzQxYjhiYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNKI0db4g9KP6EXqGXbFG96gbMDt
P2++5pVQbVEd+GvXZRCE6j0WnoWTVQt7xtQY4LZN2QwnKoMHFuGTMCkMqCeWvg3+
AzwQvwXSzz9jcV4gGo3TNTBqcbjPhBnO0T6G7rSPubDiLsR9rz8Px0M0U2hoi97U
ANPn/o43LlFg8ly9pZn8wd7YOARmMEGidSN1oqlnntaT5Bw8SnX9Gj6S/Ack/7zJ
iAKGqBnrB37ddzSKkUpnAeE0Ta7cnBDPlI5hWsXy6fcEjctKWzr1i61PGvKnfrg1
OUpY0hHw2gtkTKIVpg6Jw9RKJEfUTs8JMXfWTkwR6CHoWmP8bFkG2heKpwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDl1dPk8UfX05+0d9QNPlMNBuLo6MB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvT1hWMC1UeFI5ZlRuN1IzMUEwLVV3MEc0dWpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRngAAD
MA0GCSqGSIb3DQEBCwUAA4IBAQAqjOtx7A12LO8rt7oVHf3+4ohrdyFqARh4+4n1
o0fKXLl1PvxwnURJrnNEyhdxvmauTNAFTvreq8U9swrJPMOHGIRJY9eVGVpzMJHl
bhC3f2EAHt5FlzahO/RY5KLpZ147wBIcUKoaRN7l8bC/s1Nerb0QtBcojskdVtd2
p7JKJRDrvO+bUV7czJCSwnQpVOlj8VYtMm5T+JiMjdfbjDE6lXzqDmSpLfT9DL5D
+pRZXbBoDVZIasG8dV003dNLWZnnitJaGT4Xm3CSrkfbgdAwIJH7fBnn7Scib5Vb
NrVAA1WaUCHCJtcmgQrctOhXSUQVVmrIn8PyI+Hi5hYgyPfS
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:20 2025 by rpki-client