Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/ozGik-9_sBnUMoYXrZRViJEmIeY.roa
File: ozGik-9_sBnUMoYXrZRViJEmIeY.roa (raw, json)
Hash identifier: 3AnFoieE3CjYtQiFDGskoD5Nyb6r911fFXwGIZ9/+iA=
Subject key identifier: A3:31:A2:93:EF:7F:B0:19:D4:32:86:17:AD:94:55:88:91:26:21:E6
Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial: 019427B4957F005362EA7CE0D31754192ED5
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/ozGik-9_sBnUMoYXrZRViJEmIeY.roa
Signing time: Thu 02 Jan 2025 15:48:53 +0000
ROA not before: Thu 02 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57295
IP address blocks: 2001:67c:2ba8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:95:7f:00:53:62:ea:7c:e0:d3:17:54:19:2e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Validity
Not Before: Jan 2 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a331a293ef7fb019d4328617ad945588912621e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f2:b1:1c:f6:5c:ad:9d:0f:f2:2e:43:12:83:
86:60:f5:10:0f:4d:f0:2b:e6:b4:d2:cd:c6:88:8c:
7e:11:f2:bd:51:7e:c3:96:bf:61:99:bd:49:a5:0f:
44:40:f4:38:0c:28:d2:cd:e5:5a:77:e8:cc:84:0f:
aa:15:72:cd:e8:a3:f6:97:aa:9e:52:74:e1:b4:5d:
83:4f:55:5b:9d:82:9f:5f:7c:31:89:da:9c:60:57:
bc:9a:44:20:14:62:40:88:93:eb:c1:62:45:12:8e:
43:55:8a:a8:92:96:a7:4a:dc:5e:6d:f9:07:36:d8:
83:05:f8:c8:69:ea:70:f9:b1:12:7e:3e:b1:3e:47:
73:72:8a:3c:a4:af:c9:54:39:20:72:c8:33:7d:ed:
49:f4:77:cd:5d:5a:74:d7:44:54:cb:68:88:af:28:
28:1e:52:a7:67:61:d9:f5:99:2d:3d:0a:cc:b3:d0:
b8:d0:67:59:9d:1f:e4:b1:c7:06:33:4d:b1:0e:31:
61:27:52:d8:27:de:e0:7d:ea:dd:7c:29:4d:18:ec:
dd:a3:14:a6:a9:e8:36:7a:be:df:ba:23:49:8e:c9:
d3:db:58:9b:bc:0d:b2:b8:1e:45:09:9d:f8:48:c0:
b9:43:27:ae:d3:39:25:10:36:e0:d0:26:f8:1a:68:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:31:A2:93:EF:7F:B0:19:D4:32:86:17:AD:94:55:88:91:26:21:E6
X509v3 Authority Key Identifier:
keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/ozGik-9_sBnUMoYXrZRViJEmIeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ba8::/48
Signature Algorithm: sha256WithRSAEncryption
85:35:f2:03:82:e9:7c:d3:e8:19:f5:b7:d4:8e:10:f0:e4:c7:
05:75:ae:35:1d:5a:60:c9:91:85:74:9f:fc:d9:d6:ca:28:13:
c1:9a:5c:9e:dc:b7:80:9f:91:35:00:f0:50:10:de:d3:ca:d1:
4c:ac:1a:07:a8:4f:39:d0:db:e5:c2:a4:ef:33:0d:aa:99:a5:
d1:c8:75:e2:7a:e0:0a:18:85:6f:12:9d:5c:fe:9e:4a:79:38:
64:7a:29:9b:18:aa:72:8a:57:7e:bb:5c:b4:0d:c5:22:b4:17:
09:e2:48:c0:47:cc:f7:c4:c8:f3:a1:45:66:23:9f:d4:b5:de:
5c:b2:35:7e:35:d0:11:44:67:05:73:38:65:7a:bd:11:8b:46:
b0:c4:9c:ac:fe:2f:ce:f3:2c:bd:d6:ae:a6:ad:1e:88:1c:22:
c5:37:a0:27:f4:31:9a:fc:a8:62:65:e7:42:6b:5d:cb:89:fb:
01:5b:ee:d7:12:86:7a:be:01:d8:ab:9d:78:c5:25:b7:8e:e9:
74:6a:a6:8a:7d:bd:a1:4e:5f:65:65:8e:3f:52:c5:3c:c7:93:
60:8a:5f:c6:2b:e0:b4:b9:f7:6d:4f:d3:3f:d7:28:c9:3f:91:
a8:f0:71:9e:ce:cb:03:8b:4a:9b:b6:20:8c:55:b9:a8:3f:eb:
3a:a6:c6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:10:35 2025 by rpki-client