Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/orkmW_eZCcL4kmC7TM2XcG_njxM.roa
File: orkmW_eZCcL4kmC7TM2XcG_njxM.roa (raw, json)
Hash identifier: WZm+hYZMy+CXUU6Z/uI/WhkL+3h0cGl03UVgN4cUA58=
Subject key identifier: A2:B9:26:5B:F7:99:09:C2:F8:92:60:BB:4C:CD:97:70:6F:E7:8F:13
Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial: 019420686FAB527550602D3015A268D2AA29
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/orkmW_eZCcL4kmC7TM2XcG_njxM.roa
Signing time: Wed 01 Jan 2025 05:48:22 +0000
ROA not before: Wed 01 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213092
IP address blocks: 2001:678:d90::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6f:ab:52:75:50:60:2d:30:15:a2:68:d2:aa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Validity
Not Before: Jan 1 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2b9265bf79909c2f89260bb4ccd97706fe78f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ab:fc:93:89:43:c6:33:23:f9:4b:30:42:46:
5c:8b:f6:97:1b:50:92:a4:0f:76:db:23:61:db:49:
59:55:c3:fc:03:b1:f6:be:46:c5:84:d0:bb:81:2b:
bd:df:f6:36:ba:28:f5:ea:17:ff:83:e3:42:44:c7:
1d:8c:fd:f0:d8:90:aa:99:50:a2:7f:89:72:67:06:
1a:03:26:1b:d0:26:7b:02:78:c5:b0:d8:7f:e2:1b:
0b:c0:f0:af:9a:0a:bb:37:17:74:a8:31:44:8c:38:
1b:d5:34:bd:45:3f:ff:3e:86:53:72:d3:78:81:4c:
2f:c2:71:29:a8:8e:03:db:ea:f3:fe:d5:9e:f9:ce:
38:26:86:cf:f6:50:f3:3e:6d:f5:81:76:52:2a:fb:
cd:cf:97:48:a8:c9:31:34:29:ba:c0:eb:a8:76:71:
a7:64:28:3a:b8:1e:89:31:33:f0:df:e6:6f:ec:20:
5d:3a:3b:af:30:f8:30:ef:22:b6:d6:11:f7:3b:89:
9e:40:65:34:6e:26:94:76:de:63:df:a5:70:88:80:
c9:1d:ce:5a:1e:cc:87:c0:52:29:46:d9:47:9e:57:
33:86:be:4f:55:38:aa:aa:f6:3a:b8:f0:be:b6:f1:
2b:2a:b8:b7:2f:ad:34:1f:6b:55:c4:d7:e8:87:54:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B9:26:5B:F7:99:09:C2:F8:92:60:BB:4C:CD:97:70:6F:E7:8F:13
X509v3 Authority Key Identifier:
keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/orkmW_eZCcL4kmC7TM2XcG_njxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d90::/48
Signature Algorithm: sha256WithRSAEncryption
50:5d:7a:ac:25:af:ee:fb:88:8d:cd:bd:03:9e:6d:a7:4f:40:
d8:b2:6d:f9:9f:d0:4f:f9:a0:1d:1d:66:ea:e9:55:a1:99:2c:
d7:74:2e:66:c4:bf:4b:e9:34:40:a6:ad:d7:b6:10:8d:db:84:
b1:2d:01:1b:3c:23:93:c8:2a:4d:00:3e:4a:57:b3:66:ad:0f:
eb:d7:b0:f9:83:48:c8:f4:49:af:57:34:df:ab:51:d1:20:cc:
f4:cf:cc:82:fd:5b:a6:b1:d6:15:f1:d3:64:d3:83:59:00:37:
ff:18:1e:f0:fb:a9:a9:9c:89:a4:c9:66:82:a3:81:0b:55:d3:
6a:07:71:24:f0:70:a6:88:b6:db:ed:d6:19:48:8d:91:98:b8:
4e:9f:86:52:1b:17:c3:3b:12:c1:f2:ec:2f:1a:ff:e0:10:8a:
95:92:36:f5:ed:47:b6:2e:95:04:a3:78:46:e6:e8:3f:6f:ec:
22:19:74:f3:82:b7:80:dc:58:3f:7d:b5:68:73:13:3d:da:2c:
8b:62:1c:ba:8e:d1:43:a6:c5:15:1e:87:e1:79:2e:ff:5e:06:
22:29:3d:f6:a5:84:66:1e:0b:ed:c5:17:7d:7b:24:7f:46:2e:
a5:80:ab:c2:cd:6b:31:f0:6b:b0:8c:e0:bc:e7:14:17:a0:7f:
dd:1f:4f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:41:08 2025 by rpki-client