Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/oU-Dh2GrIk6DJo0B3ckZobCZQLg.roa
File: oU-Dh2GrIk6DJo0B3ckZobCZQLg.roa (raw, json)
Hash identifier: 3M/n9wvPmKU+uLTP2MTaGav/2cb5GDciUi4YXKv/+G0=
Subject key identifier: A1:4F:83:87:61:AB:22:4E:83:26:8D:01:DD:C9:19:A1:B0:99:40:B8
Certificate issuer: /CN=3a48e033deb64ac4243c72ce899d53822df6996d
Certificate serial: 019420D635BC46B8A29D8A9EE027B4F0B8A4
Authority key identifier: 3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/oU-Dh2GrIk6DJo0B3ckZobCZQLg.roa
Signing time: Wed 01 Jan 2025 07:48:16 +0000
ROA not before: Wed 01 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47543
IP address blocks: 2001:678:1c8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:35:bc:46:b8:a2:9d:8a:9e:e0:27:b4:f0:b8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a48e033deb64ac4243c72ce899d53822df6996d
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a14f838761ab224e83268d01ddc919a1b09940b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:70:7a:21:c6:b6:e4:86:7d:16:dc:1e:e4:c9:
86:e0:24:9d:d9:7e:db:0b:33:20:62:5b:22:3a:ee:
51:03:d9:41:22:f1:c6:5d:fa:57:3a:d5:d0:fa:61:
e6:e2:d9:68:a7:9d:89:44:17:e6:4e:1f:df:64:80:
86:59:be:fc:a6:48:87:e9:ce:62:83:00:47:87:13:
5f:37:1d:ca:9c:37:81:1e:0c:a4:e3:75:e0:bc:39:
e3:ab:53:8f:05:b3:f3:b4:fa:fc:9f:11:e6:23:1a:
7f:37:33:d7:40:77:e2:0f:f5:d1:5f:8d:3b:37:ee:
91:02:b1:e0:b8:f5:0d:f7:63:1e:2c:33:6a:ab:47:
84:ab:42:3f:2f:95:86:13:b9:45:01:a1:08:5f:8f:
54:2b:f1:65:58:ed:b9:72:76:9a:5f:39:7b:d9:86:
2a:35:95:7f:b6:78:b1:9d:06:bc:48:04:8f:79:2a:
53:8c:6c:4e:5b:8c:69:1b:19:c1:b1:78:1b:4b:f4:
14:dc:08:5b:c0:d1:58:74:77:09:9a:d9:45:77:97:
5c:a1:0c:4c:fb:ca:a4:ad:03:fa:1a:a1:63:0f:be:
c6:d1:87:fa:a4:8e:9c:dc:18:e2:0f:c8:57:ed:86:
03:0d:74:5b:8e:72:21:7e:bf:3b:bb:5c:64:6b:75:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4F:83:87:61:AB:22:4E:83:26:8D:01:DD:C9:19:A1:B0:99:40:B8
X509v3 Authority Key Identifier:
keyid:3A:48:E0:33:DE:B6:4A:C4:24:3C:72:CE:89:9D:53:82:2D:F6:99:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkjgM962SsQkPHLOiZ1Tgi32mW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/oU-Dh2GrIk6DJo0B3ckZobCZQLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7fa7b0-ace4-492d-8e91-c5321dc9e64b/1/OkjgM962SsQkPHLOiZ1Tgi32mW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1c8::/48
Signature Algorithm: sha256WithRSAEncryption
2f:38:eb:ee:39:b1:a7:8b:04:08:7a:38:bd:1d:b7:54:0e:de:
36:34:e7:56:fe:bc:d2:f2:5b:d5:6f:f2:92:fe:10:5c:85:ff:
15:99:8b:62:86:65:57:f2:37:ef:ce:15:8f:a1:d5:c8:fc:a4:
73:36:56:26:58:09:a1:28:82:72:5b:ac:01:ef:16:3c:ff:7c:
0d:6d:76:4c:9a:0c:44:58:a7:95:7e:a8:4a:4a:da:e0:fd:b8:
c9:4e:d9:50:78:82:f1:33:58:d9:f9:01:77:9b:cb:36:b8:85:
3a:56:bb:f3:97:3d:d6:6c:18:1d:1f:aa:0f:8f:e6:e1:08:ef:
7f:78:f4:aa:a4:d4:03:f9:9f:4c:7a:24:21:d8:d3:74:b3:94:
64:8b:80:ef:69:e7:71:28:13:68:b9:1f:ad:b9:d5:cd:76:f5:
b2:fc:30:6a:b2:9c:ff:2a:cd:da:16:56:80:ec:11:40:9c:e3:
b1:21:d9:2f:c5:d2:47:ca:76:b8:65:ab:e0:be:50:ca:c1:4c:
c8:fa:6c:19:7c:d5:d7:93:9a:42:9b:b9:b7:da:b1:6f:df:17:
74:bd:01:e9:f0:c1:ef:a8:d5:6d:3a:9f:29:1d:cb:1d:9f:45:
0b:71:da:33:0d:a4:1f:b0:f9:33:8e:e0:4c:ed:d6:e5:d0:f0:
14:db:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:03:22 2025 by rpki-client