Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/kOLB1EphrfqUXSkkLaUwaVvFrU4.roa
File: kOLB1EphrfqUXSkkLaUwaVvFrU4.roa (raw, json)
Hash identifier: YkPfWUPXu7p+n7Mg+8D2wVjpEqFMWVXtcvGvgRRvDac=
Subject key identifier: 90:E2:C1:D4:4A:61:AD:FA:94:5D:29:24:2D:A5:30:69:5B:C5:AD:4E
Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial: 01941FFA0B394E116115C1FD2EF0D6357C10
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/kOLB1EphrfqUXSkkLaUwaVvFrU4.roa
Signing time: Wed 01 Jan 2025 03:47:48 +0000
ROA not before: Wed 01 Jan 2025 03:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215581
IP address blocks: 2a13:cc82::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0b:39:4e:11:61:15:c1:fd:2e:f0:d6:35:7c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Validity
Not Before: Jan 1 03:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90e2c1d44a61adfa945d29242da530695bc5ad4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:0b:6b:de:d1:c5:41:ad:c6:28:71:ec:eb:
d6:04:d9:b3:91:54:5b:5c:88:b6:6c:8a:11:01:bf:
5b:d2:48:f0:b7:5e:f6:24:b2:39:f9:72:97:f5:a3:
f5:7d:45:f9:d5:27:3b:f3:d7:3d:79:d1:f5:2e:6e:
b2:3d:fe:2e:73:52:75:29:37:19:ab:9b:28:9c:fe:
65:9d:78:71:f1:75:59:77:4e:4e:60:6c:40:84:3d:
1d:fe:8f:f8:fc:0a:09:9a:26:1b:0d:91:ce:9d:ee:
f5:7f:a0:ea:2f:97:9c:89:23:93:96:f9:8b:d9:cc:
65:10:76:3e:5f:09:38:40:61:b5:28:3e:8d:f4:1a:
30:d7:5b:31:30:a1:1b:d4:5a:32:ce:60:2b:6b:f7:
5a:ed:3f:18:8f:47:0a:5d:ee:1d:19:50:4f:57:5b:
f6:04:6e:b6:06:f3:f1:1b:86:2f:a1:84:6d:ea:2a:
74:c5:3f:1e:ed:0c:07:c6:08:ba:90:6d:a7:f3:35:
ce:27:24:d1:5b:31:ea:fb:b5:48:b2:e5:7b:24:53:
c7:ce:03:33:14:dc:e3:35:02:83:9c:88:40:fd:89:
d1:83:4c:f6:70:b8:d6:42:73:f3:3a:af:44:63:58:
82:6b:a9:24:79:8e:7d:6c:03:e2:c2:7d:62:c6:9a:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E2:C1:D4:4A:61:AD:FA:94:5D:29:24:2D:A5:30:69:5B:C5:AD:4E
X509v3 Authority Key Identifier:
keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/kOLB1EphrfqUXSkkLaUwaVvFrU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cc82::/48
Signature Algorithm: sha256WithRSAEncryption
77:cc:38:af:64:e3:08:b1:46:c1:db:c6:12:78:9d:c9:79:c1:
d6:fc:84:d3:7b:0c:20:d9:35:e4:b0:51:93:d4:4a:76:39:03:
46:7b:01:eb:1f:23:e2:c9:eb:a7:d3:43:f8:42:2a:7b:57:03:
b7:be:06:87:ac:cf:d6:b1:67:f0:fc:95:b0:64:8e:80:bc:e9:
6a:6a:49:20:8d:88:d3:5a:47:e4:4a:73:d4:c8:6f:6d:cb:d0:
e8:53:63:9a:82:d5:39:98:db:56:7c:9e:ae:b4:b2:93:cb:a4:
91:bf:e9:e7:69:0e:0d:9e:fc:48:ca:47:8c:eb:26:7c:51:07:
b9:f5:9b:c4:a7:e9:18:e0:73:b1:41:eb:b4:a3:86:45:ee:77:
10:a9:e1:fc:d2:a5:13:73:62:76:99:ce:83:df:4f:8a:f3:b9:
26:44:e0:c7:0b:6a:44:0a:8b:44:89:51:32:1e:9b:43:8d:d2:
d6:23:88:a3:d5:f3:b5:78:1c:8f:f3:f3:01:0e:00:1e:e6:08:
70:9b:a7:16:c7:d2:b0:87:6a:3b:4d:b2:c5:61:12:e2:5b:c0:
9c:0c:94:4b:8b:9e:33:b9:a9:e5:48:51:b4:d2:b9:7c:6f:c5:
bc:49:66:ca:84:59:d4:85:5a:c7:7e:f8:53:3f:4e:84:71:46:
85:3f:1f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:34:31 2025 by rpki-client