Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/OmnzyQFE71XE6EAnsfkaSo0Ho6Y.roa
File: OmnzyQFE71XE6EAnsfkaSo0Ho6Y.roa (raw, json)
Hash identifier: uSeIu317puSfHL9I4lyAGeG4Z/OqOMfkr63sXNfZn1I=
Subject key identifier: 3A:69:F3:C9:01:44:EF:55:C4:E8:40:27:B1:F9:1A:4A:8D:07:A3:A6
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 01941F8C1AC0B74F69F49CAC945853400C4D
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/OmnzyQFE71XE6EAnsfkaSo0Ho6Y.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215400
IP address blocks: 2a12:de40:27::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1a:c0:b7:4f:69:f4:9c:ac:94:58:53:40:0c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a69f3c90144ef55c4e84027b1f91a4a8d07a3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:07:9c:49:b0:06:30:b7:cb:fa:6d:a7:c0:
8f:10:f7:aa:c1:02:b5:e1:8c:11:fa:dd:dc:d2:46:
8c:dc:51:e9:cd:a7:1f:53:07:d0:c3:d7:e6:41:4a:
0b:58:9e:36:13:cd:31:ac:51:9e:04:42:5e:95:8d:
52:70:84:36:46:79:71:cf:2b:71:6e:81:b5:5d:0e:
d8:68:7a:f2:9c:0b:aa:23:b8:bd:b4:39:b9:ba:6d:
23:e9:a3:f8:6d:83:ee:6e:af:c8:be:6c:00:db:bd:
9d:bb:1e:8c:8d:5b:f2:8a:01:c7:f3:85:f9:56:98:
c6:4d:2d:d8:2e:3e:bc:ce:91:98:78:c9:e8:35:b4:
b3:63:ff:4d:3b:29:a0:52:c4:61:fa:ce:c5:25:d7:
17:7b:ea:8f:35:ed:88:d6:7c:f7:a3:ad:7e:e1:c8:
fe:97:9f:40:33:83:12:80:c4:17:46:6a:13:a0:f2:
e4:11:22:97:50:eb:c6:76:06:68:c3:79:17:35:bc:
ae:ea:39:7e:ff:d5:c9:07:fa:b1:70:7e:f0:ec:9f:
a6:fd:6c:92:8e:15:7e:59:e3:52:e6:c9:ca:9a:2e:
0e:f3:7c:c1:c1:9c:3c:53:17:e5:a3:92:98:ad:23:
d9:44:b2:ee:9a:75:0c:6c:ec:96:28:85:6d:27:52:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:69:F3:C9:01:44:EF:55:C4:E8:40:27:B1:F9:1A:4A:8D:07:A3:A6
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/OmnzyQFE71XE6EAnsfkaSo0Ho6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de40:27::/48
Signature Algorithm: sha256WithRSAEncryption
ae:6a:a8:1a:f1:4e:da:32:89:ca:31:b9:7e:b5:7d:10:10:81:
f7:fd:c9:0c:a0:11:58:bd:55:e6:d1:ca:fb:91:1e:68:f5:fe:
e0:a0:ce:29:0e:42:2f:66:5a:cf:75:ee:ae:f3:e5:8e:d8:1f:
a5:67:00:f6:4d:73:7f:b7:2c:c9:b2:c4:65:95:50:db:3c:30:
c5:62:78:ed:8d:0b:05:28:7b:fa:b5:72:09:7d:a4:ca:08:fa:
43:b0:0a:61:87:1c:2a:94:d4:c1:14:2a:85:81:cd:d5:73:67:
bc:09:95:2b:d8:c2:7f:41:8b:d0:c1:7c:6c:c2:34:8c:78:4b:
01:81:33:b8:29:90:94:37:8b:3a:51:5f:03:1a:b6:c8:a9:42:
fe:3f:58:e8:c4:08:f4:c1:9f:b3:be:49:f2:23:5c:28:ba:7c:
1b:03:36:bf:68:05:54:f9:bd:51:be:cf:e2:92:4a:3b:f9:18:
4f:29:b3:7f:91:33:fd:33:94:bf:24:12:b1:70:b0:9e:dd:f8:
42:82:f8:11:54:7b:92:c6:ee:bc:fd:2d:15:76:44:76:42:8e:
aa:a4:a8:69:8b:9f:c1:93:8e:84:af:03:7f:e6:e3:b7:ad:f3:
b3:42:45:11:a7:b6:e2:38:bc:40:cd:64:6f:c2:68:e5:65:c1:
d6:b4:70:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:57:57 2025 by rpki-client