Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/obW6OP_TwhwF5onkjJQKoKfjNUI.roa
File: obW6OP_TwhwF5onkjJQKoKfjNUI.roa (raw, json)
Hash identifier: l/D/ppG7tJiDZNB6ndliGGQdEPYg23vbQP0qpyOUO3E=
Subject key identifier: A1:B5:BA:38:FF:D3:C2:1C:05:E6:89:E4:8C:94:0A:A0:A7:E3:35:42
Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial: 019425215B99465C0BB43E92BCA156BAFA95
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/obW6OP_TwhwF5onkjJQKoKfjNUI.roa
Signing time: Thu 02 Jan 2025 03:48:50 +0000
ROA not before: Thu 02 Jan 2025 03:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51903
IP address blocks: 2a0c:3a81::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:5b:99:46:5c:0b:b4:3e:92:bc:a1:56:ba:fa:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
Validity
Not Before: Jan 2 03:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1b5ba38ffd3c21c05e689e48c940aa0a7e33542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:2c:6e:e3:95:20:1e:c1:8c:d9:f2:d6:9f:
5b:90:ce:47:91:01:38:bd:03:34:7c:d2:0f:4c:4a:
a3:51:dc:c9:0f:8c:98:19:bd:73:76:7b:d6:f1:6b:
3f:a3:87:87:18:25:87:b4:f5:46:7e:00:3f:cd:d8:
12:85:9f:2c:bc:68:1c:c3:ed:18:c3:4e:48:f9:11:
5f:51:49:7c:fb:45:6f:f6:d8:13:ef:05:61:f5:18:
77:0c:f4:9c:90:d5:22:3a:03:ba:92:32:09:ff:5e:
27:5f:bb:c1:5d:0f:92:c1:80:d3:5d:71:36:96:f3:
f0:77:e1:34:31:4d:84:e0:1f:4b:1d:8c:c8:e9:31:
27:34:f5:09:6b:b7:13:e0:35:96:ff:59:ee:25:b9:
3b:2f:d1:f3:19:2a:a8:44:b4:c9:a0:fa:50:bd:a1:
7f:df:cc:fe:c0:9d:e9:52:16:b8:47:f4:c4:c0:2e:
56:87:01:cf:f4:12:ed:b4:c7:99:a0:a0:8f:08:5d:
d4:d6:6f:5e:a9:e8:f9:53:bb:9c:c8:74:52:a2:9a:
5c:1a:01:09:5f:44:6d:e6:d5:70:2e:82:60:1f:52:
92:db:a7:c1:1d:df:98:c5:dc:82:0e:68:75:eb:88:
8c:a3:73:c1:5e:3e:38:0d:7b:26:ec:90:81:64:f1:
5f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B5:BA:38:FF:D3:C2:1C:05:E6:89:E4:8C:94:0A:A0:A7:E3:35:42
X509v3 Authority Key Identifier:
keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/obW6OP_TwhwF5onkjJQKoKfjNUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3a81::/40
Signature Algorithm: sha256WithRSAEncryption
25:ff:67:67:49:40:bf:8d:6c:5c:61:d1:81:fe:00:b2:99:e4:
8a:cf:a5:ba:c6:aa:79:9a:fc:07:4f:6a:f2:0f:2b:eb:54:7b:
ed:4a:7c:34:d3:f0:dd:f0:d5:a1:ef:4e:51:e2:ca:a2:27:0c:
7a:74:49:45:d4:29:4b:6f:51:1d:ce:88:58:03:c4:ab:2c:5c:
6d:14:54:13:c5:c8:ec:09:92:63:9d:9b:6b:7e:51:49:31:f3:
42:9a:37:ec:c4:83:3e:c2:01:1d:ca:a8:50:99:2a:63:fd:55:
2c:2b:e4:f2:13:f5:ca:64:f8:e8:45:c3:c7:87:44:5e:30:cf:
d0:8a:d5:52:bc:ec:83:78:9e:fe:80:26:1a:f5:35:e8:82:70:
b8:5e:de:20:cb:eb:16:e0:a3:6b:40:54:4f:ca:26:4d:08:cd:
2d:39:5e:3f:27:19:12:7f:03:45:13:c5:16:5b:90:d3:93:a6:
cc:d7:86:d7:c4:b6:ab:1c:07:b8:0a:9c:29:7c:82:ad:23:a0:
9e:78:f9:3d:8c:1f:dd:ce:22:82:4d:3c:eb:b7:b4:35:83:d0:
cd:ca:87:ac:ed:f2:83:f3:2c:48:b6:e0:72:95:69:83:84:d1:
35:93:de:5d:04:2b:ac:73:75:5a:20:63:a8:41:fc:fe:c1:dc:
cc:8e:64:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:04:56 2025 by rpki-client