Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/aOM8GgaoW1G7QCNU_L_vXRvAMEM.roa
File: aOM8GgaoW1G7QCNU_L_vXRvAMEM.roa (raw, json)
Hash identifier: tukb95Gwd6x2BRzhLsZA0PSUEck+o+zvt8A2/7nuQh4=
Subject key identifier: 68:E3:3C:1A:06:A8:5B:51:BB:40:23:54:FC:BF:EF:5D:1B:C0:30:43
Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial: 01941F8CA3AF3DC6BE28009AA9FA9B83A6FC
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/aOM8GgaoW1G7QCNU_L_vXRvAMEM.roa
Signing time: Wed 01 Jan 2025 01:48:18 +0000
ROA not before: Wed 01 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207021
IP address blocks: 2001:67c:10e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a3:af:3d:c6:be:28:00:9a:a9:fa:9b:83:a6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68e33c1a06a85b51bb402354fcbfef5d1bc03043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:c1:c0:f6:bb:dd:62:d3:c8:38:42:e2:33:
fe:74:96:77:fd:df:d2:ee:bd:57:3f:75:3a:cf:67:
ce:93:f3:ab:7b:b7:7f:3c:6f:f0:4a:1e:bb:d4:9f:
c7:3f:42:ec:71:8d:0f:3a:91:dc:27:69:38:08:81:
41:77:5a:93:e2:63:8f:95:f3:77:06:2c:8c:33:a8:
a7:59:f5:f9:0f:45:2f:cf:36:68:87:a8:bc:9c:00:
fc:50:96:0a:4c:76:40:e5:bb:30:b5:e9:15:c8:da:
73:39:3c:77:94:26:41:fa:86:de:78:7d:30:ed:44:
41:51:ca:a2:fd:c8:bc:89:e1:65:ff:ce:9f:66:02:
26:9c:1d:9f:1c:2f:21:80:cd:94:35:df:51:70:3d:
4f:96:ce:fc:a4:76:f4:00:f4:b0:88:12:da:bb:16:
da:7f:c2:6d:a4:64:44:93:a1:32:0b:f8:ec:b1:70:
ab:8a:ac:25:ec:6e:66:03:04:f1:bc:d6:a4:50:92:
9d:84:aa:58:bc:75:b6:d1:fc:37:e6:8d:49:88:66:
ed:c2:64:57:ce:31:c1:a5:b8:89:0d:b3:7e:39:38:
12:c5:f8:99:d7:a6:8d:3f:0f:46:b5:87:6b:88:c8:
0f:a5:2b:c9:f4:d9:81:a6:8c:9a:a5:35:15:87:ff:
2f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E3:3C:1A:06:A8:5B:51:BB:40:23:54:FC:BF:EF:5D:1B:C0:30:43
X509v3 Authority Key Identifier:
keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/aOM8GgaoW1G7QCNU_L_vXRvAMEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:10e0::/48
Signature Algorithm: sha256WithRSAEncryption
96:a8:5d:74:52:1f:08:31:02:74:e7:fd:3f:ab:54:8a:1b:2a:
57:7b:7a:39:55:1b:8d:88:ac:80:38:46:da:85:4a:1c:7f:a8:
6f:bd:70:f2:fe:3b:7d:0f:e6:eb:23:d8:4f:b6:02:2e:1f:79:
06:ab:64:4b:f0:0b:85:f0:d7:b1:fd:af:3e:8a:80:f9:9b:7f:
aa:3e:9b:68:51:3d:1d:9e:24:cb:cc:a0:6a:40:90:af:62:19:
65:ea:1b:c4:6d:28:dd:53:31:b3:ac:15:52:0c:e1:35:70:e5:
62:71:a4:0c:a6:3f:21:67:03:b6:07:21:53:5f:90:64:3d:5f:
cf:94:be:5f:da:47:20:2f:a0:98:ab:2a:8f:a8:c2:36:09:1d:
15:62:d9:03:bb:2c:1d:fb:39:48:f5:4d:c7:92:07:9f:e6:02:
6e:39:c0:5c:ef:12:5d:33:37:15:10:4e:96:56:43:77:d7:2a:
e2:f4:2d:e2:41:5d:f6:07:1f:1d:db:fc:bc:7a:dd:72:df:6d:
4d:ae:e4:88:6e:3c:9e:fc:b9:fb:37:25:28:8c:d2:fc:d4:02:
f6:22:9b:eb:96:f5:08:3a:9a:13:8d:18:c3:fc:e2:8c:4f:68:
fe:ae:df:19:89:b4:2e:c8:b0:39:48:ad:90:35:1e:17:31:f7:
20:0a:8c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:33 2025 by rpki-client