Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/IXi9V4KA8c-MLVayB4iAncM-z9A.roa
File: IXi9V4KA8c-MLVayB4iAncM-z9A.roa (raw, json)
Hash identifier: 1pUPd8d8nthEufHK9VJP/KTSplfl1M4A1xs/jejXdPM=
Subject key identifier: 21:78:BD:57:82:80:F1:CF:8C:2D:56:B2:07:88:80:9D:C3:3E:CF:D0
Certificate issuer: /CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Certificate serial: 019537CAF5A22051D53E48CB9B5D97486347
Authority key identifier: CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/IXi9V4KA8c-MLVayB4iAncM-z9A.roa
Signing time: Mon 24 Feb 2025 11:50:02 +0000
ROA not before: Mon 24 Feb 2025 11:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:7f40::/32 maxlen: 32
2a11:2085::/32 maxlen: 32
2a11:6504::/32 maxlen: 32
2a11:8f85::/32 maxlen: 32
2a11:f186::/32 maxlen: 32
2a11:fb45::/32 maxlen: 32
2a12:1804::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:ca:f5:a2:20:51:d5:3e:48:cb:9b:5d:97:48:63:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Validity
Not Before: Feb 24 11:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2178bd578280f1cf8c2d56b20788809dc33ecfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c4:2f:0d:7a:2a:f0:d2:f5:04:ea:3a:e9:99:
c6:4c:a8:04:cb:85:3e:ab:96:43:21:cd:18:f7:c4:
2c:99:58:6e:69:7f:3d:6e:54:0f:e2:0e:49:02:bc:
e2:01:73:a8:fc:b7:ee:bd:9b:40:b0:d1:8f:5e:02:
55:6a:b1:df:3f:74:be:58:71:a5:43:82:fb:b8:51:
67:44:78:e0:8b:af:5c:88:1f:46:76:e8:56:f8:19:
17:00:28:9c:5f:90:62:d1:05:bf:25:bc:d7:e1:31:
5b:3f:6b:71:a0:88:0f:41:c7:ef:4d:70:e0:b8:2e:
eb:62:ae:65:bf:00:77:4c:a6:b3:ce:dd:00:e4:72:
3a:7f:79:be:22:66:84:25:ca:11:67:a3:f9:4c:70:
4e:4a:7e:43:09:2c:11:cd:02:31:96:14:b2:5d:71:
f0:7b:a2:03:d6:38:44:4d:1b:53:4f:0a:80:ca:a2:
0a:7d:5d:62:30:12:de:d0:96:f7:d5:77:21:34:86:
4c:d2:ce:77:f2:04:54:65:c7:65:a8:97:e1:c6:08:
67:a7:dc:dd:ec:e1:7b:60:7c:7a:d7:fd:0d:d2:01:
0b:5e:d4:d6:b7:e8:69:e5:21:ce:85:59:2c:4d:66:
f5:e2:28:59:65:1b:53:d8:96:bf:b9:e8:0f:2b:51:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:78:BD:57:82:80:F1:CF:8C:2D:56:B2:07:88:80:9D:C3:3E:CF:D0
X509v3 Authority Key Identifier:
keyid:CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/IXi9V4KA8c-MLVayB4iAncM-z9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7f40::/32
2a11:2085::/32
2a11:6504::/32
2a11:8f85::/32
2a11:f186::/32
2a11:fb45::/32
2a12:1804::/32
Signature Algorithm: sha256WithRSAEncryption
a0:c9:19:bd:66:dd:f7:f0:f4:ff:81:8a:0d:c5:88:83:4e:03:
ed:04:a3:75:27:21:90:29:d9:7f:e5:3a:54:8b:2e:6c:fe:90:
d6:18:88:ac:6f:39:61:1b:6f:b9:49:b3:47:67:dd:60:ca:eb:
4e:4c:df:74:d0:2d:73:6a:c3:15:a5:fb:bd:47:9f:0c:9c:9f:
0e:3f:70:45:dc:d3:36:00:63:b6:9c:b4:70:8f:4c:22:15:db:
95:ad:1a:fb:cb:8e:72:87:6b:20:5f:b0:0b:57:38:c3:24:be:
8d:cf:af:a9:86:d2:65:0b:cb:a4:11:89:6b:ee:c3:4e:72:86:
ab:81:4b:51:7d:2c:f6:0f:45:15:48:b5:36:34:a5:0b:b7:ed:
a3:42:6d:28:c1:42:27:e5:c0:e6:f5:cf:9d:e1:db:21:94:4a:
27:b8:0f:d0:e5:f2:f7:39:9e:98:94:8e:89:49:4b:7f:6d:58:
78:da:72:51:0c:c4:dd:ae:e3:32:a7:f6:c5:5e:b3:cf:1d:38:
bb:21:6a:6d:ae:76:07:2d:7f:42:8d:eb:34:78:35:90:52:12:
35:9b:53:49:35:7f:34:d5:d1:f5:e0:d6:8b:22:88:52:37:d5:
42:9a:40:64:8d:22:02:e9:41:6d:54:09:37:0d:23:71:c5:a2:
e0:83:50:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:11 2025 by rpki-client