Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/oNBMbwaOMIQ3gc1brZ79tHvusAk.roa
File: oNBMbwaOMIQ3gc1brZ79tHvusAk.roa (raw, json)
Hash identifier: ysE/JGbhhCWnTVWZQIC1rfv8V4VscJDcwpcwjlUthoY=
Subject key identifier: A0:D0:4C:6F:06:8E:30:84:37:81:CD:5B:AD:9E:FD:B4:7B:EE:B0:09
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 01941FFA3D091B76D6948DD7DC74F2BF746E
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/oNBMbwaOMIQ3gc1brZ79tHvusAk.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216193
IP address blocks: 2a13:1c47:c0d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3d:09:1b:76:d6:94:8d:d7:dc:74:f2:bf:74:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0d04c6f068e30843781cd5bad9efdb47beeb009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:29:64:02:50:f6:2b:61:68:eb:e6:29:a5:b7:
de:2b:58:48:40:46:a7:16:0b:5e:70:90:62:51:4f:
51:94:3f:98:ef:f2:21:3e:95:17:a0:46:d2:16:e0:
fa:b9:c4:40:a7:a2:a1:47:05:a5:de:e3:92:12:61:
e2:7e:20:b7:0d:ce:e2:73:17:6d:76:9b:7d:66:a3:
33:16:d7:92:33:1b:ca:7a:31:85:60:0f:1b:ec:e0:
2f:d1:15:42:4e:81:7f:3b:8a:b3:d3:52:f7:24:86:
eb:b1:2d:7b:20:83:0f:1e:aa:89:70:c9:3e:ed:4c:
e8:cd:7f:ae:f5:db:1b:46:d2:d7:63:fd:8e:01:96:
0e:a8:46:c4:aa:22:95:63:9d:1d:b6:71:89:15:b1:
3c:4f:b3:8b:70:45:61:a7:9a:39:33:43:61:07:0d:
ef:7b:bc:dd:c3:87:7e:2b:9a:a4:25:f7:b3:bf:66:
e3:d3:e3:d9:8e:7c:78:3a:a6:c6:34:af:04:c6:84:
9f:ae:9b:d6:a2:2a:72:1a:74:4d:17:1a:78:b8:ea:
68:62:21:b9:5f:4e:55:10:79:52:00:d9:d7:d7:6d:
c9:3e:98:ed:3b:18:35:4e:70:a7:f2:93:73:2e:20:
5a:40:1c:bd:d9:8c:30:c6:d8:84:89:6d:8d:8a:9b:
e1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D0:4C:6F:06:8E:30:84:37:81:CD:5B:AD:9E:FD:B4:7B:EE:B0:09
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/oNBMbwaOMIQ3gc1brZ79tHvusAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1c47:c0d0::/44
Signature Algorithm: sha256WithRSAEncryption
9e:0a:96:0a:dd:1f:5e:72:09:43:15:c3:84:e0:a0:21:f6:7d:
92:e0:9c:ad:04:e1:af:df:bd:c0:98:49:b1:14:4b:b5:7e:4c:
29:70:0c:04:a6:67:0b:31:18:3b:08:0a:42:79:70:5f:79:25:
7e:f6:5c:1f:2d:fd:06:55:bb:77:05:c8:e9:6c:8c:26:74:1d:
48:10:2b:c6:dd:99:29:cf:45:25:00:84:dc:57:bf:d8:72:46:
75:e8:55:38:20:e1:6f:c6:52:2a:15:f3:a0:41:28:89:da:97:
9b:af:23:08:21:20:44:7d:f3:1f:84:a8:0b:da:c1:00:7c:2e:
9a:ad:6a:0b:c3:fc:8a:2e:23:b1:51:2f:9d:6e:7c:8e:08:dd:
a0:a0:d7:91:21:75:14:d7:24:83:67:3e:c3:79:3f:a7:b2:88:
09:e2:2a:66:4c:03:8a:54:a4:bc:61:d9:b0:a8:f8:c7:d6:18:
a3:b4:9c:aa:81:7e:d5:25:cf:06:08:fc:ab:b1:4e:58:43:be:
83:f0:63:16:da:28:b8:a2:ff:09:55:09:6c:92:fb:8f:38:e8:
09:13:f4:e6:7c:1b:0c:76:09:f5:fb:49:2d:07:04:38:22:51:
56:00:7e:a1:0c:29:ab:5a:24:24:df:a7:0f:cf:18:23:ab:12:
28:7d:01:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:03:55 2025 by rpki-client