Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/ozcLkAz45fg2XiPfdbNY66acf7g.roa
File: ozcLkAz45fg2XiPfdbNY66acf7g.roa (raw, json)
Hash identifier: eevKHtHg7V8lwaEfFwaa/UoD5Eife7aN2it5vyjJKeQ=
Subject key identifier: A3:37:0B:90:0C:F8:E5:F8:36:5E:23:DF:75:B3:58:EB:A6:9C:7F:B8
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 01942521879349D88F93D8D114C003B4A0A4
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/ozcLkAz45fg2XiPfdbNY66acf7g.roa
Signing time: Thu 02 Jan 2025 03:49:01 +0000
ROA not before: Thu 02 Jan 2025 03:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51305
IP address blocks: 128.127.93.0/24 maxlen: 24
2a00:10a0:b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:87:93:49:d8:8f:93:d8:d1:14:c0:03:b4:a0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Jan 2 03:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3370b900cf8e5f8365e23df75b358eba69c7fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:76:48:e1:92:9c:0e:7a:63:9c:c0:6a:ae:
7a:4e:eb:2d:f9:fa:40:85:3c:e7:ce:e1:53:20:42:
e4:cd:83:4c:79:15:fd:39:f0:b2:dc:e3:2e:80:02:
b1:cf:e2:87:c2:04:30:57:7d:4a:bf:00:69:ec:08:
86:ca:3e:c5:d2:d3:46:e8:30:c9:d3:c2:41:21:a1:
ad:0b:6e:ca:39:82:70:ea:e2:93:b8:44:75:67:f8:
60:2b:37:94:28:d6:ee:63:2f:5f:7a:b8:97:6a:82:
96:2a:aa:8b:26:05:7b:dd:e4:fb:4c:c1:0f:75:e8:
f5:ce:59:3c:99:ac:f7:ca:bc:d7:75:05:8c:83:af:
73:96:39:06:69:14:ec:9b:c0:ab:67:67:7b:63:cd:
b9:b2:ff:cd:3d:6c:73:f6:e2:92:2c:b7:79:f2:7f:
39:b0:d8:ab:a4:d6:9e:2d:48:c4:46:ae:17:ce:64:
75:3d:36:73:f3:eb:11:e9:98:0f:7b:72:a0:8e:0a:
b4:27:7e:e6:0e:56:1e:76:7a:8c:00:09:3b:f5:33:
46:59:9f:5b:ab:14:83:3a:69:12:c5:2d:c2:fe:ce:
7d:25:c0:f2:36:b2:39:76:fd:12:8a:2e:7f:ce:d9:
ea:b5:e9:33:0c:07:96:b5:c2:40:a6:f0:9c:f1:01:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:37:0B:90:0C:F8:E5:F8:36:5E:23:DF:75:B3:58:EB:A6:9C:7F:B8
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/ozcLkAz45fg2XiPfdbNY66acf7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.93.0/24
IPv6:
2a00:10a0:b::/48
Signature Algorithm: sha256WithRSAEncryption
a6:c8:ba:c3:a9:9c:d7:06:78:48:65:a0:cd:50:8a:bb:36:8e:
72:4b:47:da:ac:fc:b0:6a:81:df:c3:11:ec:29:a9:17:05:2e:
6f:fa:22:8f:37:7a:22:6d:ee:b5:0e:7f:ea:58:f7:3f:11:f2:
04:78:76:07:f5:46:04:90:e4:b0:6e:d2:2e:30:1d:b6:1d:6e:
72:43:25:d0:1b:d5:d9:67:13:42:6e:56:74:99:d5:69:b7:70:
06:38:23:93:60:de:aa:c9:7d:19:c7:03:77:60:35:e8:8a:d6:
4f:fb:5f:a3:3e:a6:d8:35:75:c1:70:fd:f0:d7:72:d6:94:e5:
33:71:36:72:2d:fa:8a:10:bf:ef:14:58:fc:b9:f2:4e:4a:e8:
9d:84:4f:54:70:8d:f8:6a:09:6c:7e:cb:1d:ca:6b:ea:e9:91:
ed:97:5d:55:5c:07:a8:08:1b:5d:45:3e:d8:8c:84:bb:a2:3c:
a4:52:d6:61:66:4b:e6:25:3b:bc:5b:ab:5e:b4:41:b7:6f:08:
92:d5:6e:03:84:ed:93:70:d4:57:55:f8:9a:c4:33:45:f4:a1:
12:ec:c8:41:5a:50:8d:24:8e:9f:86:c0:67:92:f1:be:e7:49:
a6:97:80:3e:3c:35:7c:6a:08:45:31:43:69:5d:6b:96:a6:a2:
d1:ea:44:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:42:18 2025 by rpki-client