Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/oHUs9hdvnMW6zTc3LDV58bmp6b4.roa
File: oHUs9hdvnMW6zTc3LDV58bmp6b4.roa (raw, json)
Hash identifier: v8L9nl+zE6xdLyqJHTQx9K4JzMTFmxelK6yrz+m96gM=
Subject key identifier: A0:75:2C:F6:17:6F:9C:C5:BA:CD:37:37:2C:35:79:F1:B9:A9:E9:BE
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0195F262663D06611482E8089A126FAF084B
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/oHUs9hdvnMW6zTc3LDV58bmp6b4.roa
Signing time: Tue 01 Apr 2025 17:24:49 +0000
ROA not before: Tue 01 Apr 2025 17:24:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a0b:3e00::/29 maxlen: 29
2a0c:8340::/29 maxlen: 29
2a13:b840::/29 maxlen: 29
2a13:ddc0::/29 maxlen: 29
2a14:35c0::/29 maxlen: 29
2a14:72c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f2:62:66:3d:06:61:14:82:e8:08:9a:12:6f:af:08:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Apr 1 17:24:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0752cf6176f9cc5bacd37372c3579f1b9a9e9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:96:f8:67:3e:27:bd:ac:a6:36:85:79:28:
fc:46:19:ea:b1:ed:35:a3:77:84:7c:81:cc:b5:10:
6c:cc:33:cd:3d:9e:8d:e2:83:9c:54:02:a7:d4:8d:
1a:c8:dd:59:82:eb:be:04:f9:f0:1e:47:f7:60:ef:
34:62:95:22:e3:15:3e:0a:96:43:3c:f8:f7:25:4b:
ec:83:8b:94:ad:b1:aa:9d:78:0c:15:31:23:97:0d:
4f:17:de:0a:40:be:73:45:ef:1c:18:d0:1b:f0:82:
09:09:06:00:3d:75:10:ba:d3:f8:7f:43:03:79:cb:
38:c6:0b:f4:15:9e:7f:4d:7b:16:c0:5f:82:78:80:
63:1f:b1:58:c3:ed:19:ae:05:0d:f2:ae:9a:80:e0:
f3:dc:32:a8:65:d6:38:d8:6b:cb:af:a1:bb:bb:20:
62:dd:c3:ab:5b:08:8e:08:80:84:9f:75:54:2a:f6:
fb:26:27:4a:9d:57:75:1c:d2:3e:77:d5:13:9f:c2:
9c:04:5f:a7:fb:36:56:ab:b6:7c:bd:07:9e:df:f0:
8a:ea:86:ad:93:38:8e:8f:25:c8:02:4c:f7:a0:62:
b4:ea:0c:f0:88:9e:42:13:53:f0:45:fd:ac:03:ed:
52:8b:60:89:62:8f:3f:ff:e0:6a:1a:3b:d6:e4:db:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:75:2C:F6:17:6F:9C:C5:BA:CD:37:37:2C:35:79:F1:B9:A9:E9:BE
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/oHUs9hdvnMW6zTc3LDV58bmp6b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:3e00::/29
2a0c:8340::/29
2a13:b840::/29
2a13:ddc0::/29
2a14:35c0::/29
2a14:72c0::/29
Signature Algorithm: sha256WithRSAEncryption
46:53:0a:e3:d6:50:0d:01:9e:bd:c3:44:27:bd:cb:9c:3d:28:
7b:06:1e:72:4f:6c:e8:ec:ae:e3:dd:94:82:33:fd:8d:3b:4a:
1a:90:22:bd:1b:a4:0f:9a:89:c8:7a:7a:86:36:02:a3:56:f8:
8d:8e:e6:cf:02:5b:00:e5:33:d4:4f:1a:24:ae:56:33:11:7d:
b9:41:cf:32:36:30:cc:fa:c7:2c:1c:ee:86:7d:ba:0a:a8:af:
5e:03:5e:29:a3:af:17:a2:a3:07:56:c6:a9:b6:5c:86:92:c3:
e6:63:4b:9b:12:f0:b2:b0:eb:e4:2e:10:21:fd:55:a5:e6:52:
2b:6b:c9:9c:ee:e1:b8:3c:53:27:b6:45:5b:6d:f1:9a:34:71:
22:d0:69:d8:37:27:bf:7c:fa:0d:e9:0a:cc:37:03:c0:73:07:
49:1c:65:70:e3:1d:09:7c:aa:26:b0:66:b4:70:5d:bc:d1:da:
ef:4d:83:7b:8b:09:5c:c6:19:3f:dd:ae:df:78:d9:9a:c5:bb:
9e:a7:15:07:64:e4:4a:65:67:ee:be:a4:3f:33:ef:c3:2a:15:
a0:89:0f:78:cd:20:b4:e4:8d:68:ad:70:71:5c:69:5e:67:12:
47:4d:ec:7f:09:d8:23:40:30:38:5b:4e:8b:20:39:ee:fc:e2:
59:3e:43:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net