Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/OpF39dteeAgdG0uMSaeSye2QMl4.roa
File: OpF39dteeAgdG0uMSaeSye2QMl4.roa (raw, json)
Hash identifier: 6AawtRpq3DsNtx6xd7OyKZI4o4kWWfOmTgahYICncm4=
Subject key identifier: 3A:91:77:F5:DB:5E:78:08:1D:1B:4B:8C:49:A7:92:C9:ED:90:32:5E
Certificate issuer: /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Certificate serial: 019421B1F861564CA7BFEC6C6BC2B02889E2
Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/OpF39dteeAgdG0uMSaeSye2QMl4.roa
Signing time: Wed 01 Jan 2025 11:48:19 +0000
ROA not before: Wed 01 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204378
IP address blocks: 2a0c:3800:300::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f8:61:56:4c:a7:bf:ec:6c:6b:c2:b0:28:89:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a9177f5db5e78081d1b4b8c49a792c9ed90325e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:28:b3:53:73:c4:02:9d:a1:b7:61:fe:48:
3c:ed:27:71:c1:5f:db:2f:13:5a:7b:44:d8:d4:97:
dd:82:d2:4b:64:bb:7d:93:4e:c2:dd:3d:de:fa:16:
74:38:b9:ac:34:e6:9c:8f:a0:0b:7b:75:fa:a9:62:
3c:8d:8e:7b:12:65:d0:d9:35:ad:f6:5d:ee:00:87:
78:fa:30:22:3f:d2:7e:21:07:58:df:1a:b3:64:c1:
1f:a8:26:30:ef:51:6b:40:73:34:1c:89:8b:f7:92:
b7:ba:d6:4e:41:14:e5:8a:5d:26:bb:2b:55:4c:c2:
b9:57:81:32:6a:4b:8a:cc:c7:4d:37:30:31:e1:0b:
31:c3:9b:01:a4:db:69:84:ec:7d:a7:48:83:30:12:
bb:68:bc:da:4c:7c:53:f6:2c:e1:55:27:0c:c9:15:
5e:66:9f:a1:65:20:3f:9e:31:12:55:ed:e3:d1:50:
a7:0e:e8:80:f4:fd:8a:e8:0d:6c:a8:30:9e:c3:30:
21:6a:1b:6e:01:e3:78:1a:ca:a6:dc:e6:1c:7d:bc:
55:f2:bd:f0:5a:8d:b2:91:23:81:86:08:72:3f:8c:
2b:82:14:22:c0:7c:43:d7:3f:39:6e:12:e3:30:58:
df:5d:43:d1:ec:56:55:b2:ba:f3:ed:76:62:32:6b:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:91:77:F5:DB:5E:78:08:1D:1B:4B:8C:49:A7:92:C9:ED:90:32:5E
X509v3 Authority Key Identifier:
keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/OpF39dteeAgdG0uMSaeSye2QMl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3800:300::/48
Signature Algorithm: sha256WithRSAEncryption
ca:5b:ae:d7:40:a2:92:89:84:5c:61:37:2f:f6:fa:e7:65:86:
2a:92:0b:76:10:b2:d2:72:fd:74:a0:04:cb:16:ba:18:3a:40:
90:cc:d4:4a:1f:3d:0a:01:d8:56:31:14:1a:92:08:85:01:b6:
9a:bb:b4:b2:5e:da:8a:f9:ce:59:43:2b:70:d1:36:86:e5:ed:
a3:f5:67:f1:7a:b4:fd:fc:e8:44:57:a9:9a:d4:45:01:7f:a8:
38:50:76:3b:a3:84:e5:f3:8d:09:b1:11:62:7c:e3:93:c7:96:
f6:0a:02:f4:f1:b4:0f:38:ed:24:17:2c:ce:03:bb:59:37:1b:
51:ad:14:f9:25:c5:03:ce:66:c4:10:b8:dd:6d:a8:f0:b8:d8:
ea:ab:e8:b5:d5:39:82:e0:a7:84:e3:56:80:4c:12:3b:af:09:
a1:79:1e:46:94:3a:b5:96:4c:ff:d4:1b:7e:74:9a:5f:04:13:
dd:67:28:17:4b:d8:11:04:5f:f4:e1:8e:cf:2c:8e:e7:14:db:
23:3b:4c:02:50:6a:af:e1:bd:20:c5:4f:a8:60:48:e4:e5:5c:
79:0a:76:75:ab:cf:14:df:60:32:a6:49:54:01:43:d8:5d:64:
e1:61:98:e3:2f:47:6d:44:65:d4:8b:85:c9:09:6c:cc:d6:98:
23:55:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net