Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/nqCIAF2bfu_8KSdVodkN8vwI3Go.roa
File: nqCIAF2bfu_8KSdVodkN8vwI3Go.roa (raw, json)
Hash identifier: l4JpuSESqVWTQClD2F+91Fcynq5Lji52+fZq5Llt1S0=
Subject key identifier: 9E:A0:88:00:5D:9B:7E:EF:FC:29:27:55:A1:D9:0D:F2:FC:08:DC:6A
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258ED2DFA877C9D15020EC531F2095F2
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/nqCIAF2bfu_8KSdVodkN8vwI3Go.roa
Signing time: Thu 02 Jan 2025 05:48:24 +0000
ROA not before: Thu 02 Jan 2025 05:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203874
IP address blocks: 2a0e:aa07:e046::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d2:df:a8:77:c9:d1:50:20:ec:53:1f:20:95:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ea088005d9b7eeffc292755a1d90df2fc08dc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:36:23:6e:49:d2:43:45:8b:e6:e4:37:d2:41:
c9:5c:91:b7:40:ef:99:52:31:e2:77:ec:88:f0:0b:
0d:7f:dc:53:53:b3:89:d0:42:1b:bf:74:56:b5:fb:
e9:7e:03:08:2f:54:30:b2:10:4f:75:47:9e:85:29:
bd:39:d8:92:d6:d9:6d:49:bb:7c:0e:d8:3b:08:5f:
0a:47:31:88:b5:03:ca:9e:90:5d:64:b3:be:d9:b1:
9a:df:cc:20:46:09:a6:a6:54:17:d5:7e:9f:eb:8d:
e5:be:f8:09:8f:d1:91:dd:81:38:15:27:fb:47:4a:
de:5c:0a:7c:5f:7b:42:06:7d:e9:57:01:97:2b:9d:
4b:e4:7e:c4:c2:bb:4b:51:be:41:95:e9:7c:81:b1:
8c:f6:7a:a0:64:e9:98:14:c2:91:ac:46:e0:8c:3e:
b2:b4:6f:4b:f0:b4:db:a1:21:bd:e6:bc:9c:03:98:
4d:59:46:da:aa:48:2e:16:f5:eb:d9:c7:39:af:39:
fb:21:59:9b:d1:19:75:a4:55:c7:74:7c:ea:bf:16:
42:fd:cb:a9:ba:f9:30:f2:90:c2:dc:01:70:e1:bc:
61:7f:7d:50:81:40:17:ca:4c:1c:16:a8:e4:fd:d8:
ba:08:c4:65:e0:28:d4:e6:98:7a:4a:0f:26:1f:a1:
3d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A0:88:00:5D:9B:7E:EF:FC:29:27:55:A1:D9:0D:F2:FC:08:DC:6A
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/nqCIAF2bfu_8KSdVodkN8vwI3Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e046::/48
Signature Algorithm: sha256WithRSAEncryption
7e:19:f8:2d:9f:5f:6a:44:2e:5b:19:02:81:88:27:64:ca:eb:
8a:13:5a:26:6b:3c:72:87:4f:ec:ee:5a:f0:b5:09:1c:39:fb:
5a:23:45:8e:a2:f5:26:ca:6a:46:22:f5:c2:0f:a8:16:f5:4a:
d9:93:e4:6c:97:98:91:e3:d3:cc:39:b6:71:68:61:95:09:e9:
a7:20:2a:71:f2:f9:85:88:a7:7f:97:e7:c4:c7:97:5b:2f:55:
1b:cc:93:6c:90:74:6b:d2:09:31:f4:9c:10:93:d8:08:19:33:
4f:f6:0b:43:76:81:9d:1d:82:6d:bf:68:0c:ab:d0:d4:ad:76:
70:42:c3:92:13:78:46:8e:ec:91:b2:93:41:cc:7c:48:83:e3:
af:4d:67:99:8a:a2:a5:96:56:ee:52:58:03:6c:b7:14:76:8c:
10:a7:ea:79:63:5b:07:4b:1f:8a:eb:9b:a5:94:03:9c:52:6c:
40:18:bf:1b:27:cf:91:94:40:cf:f2:35:4a:8f:50:4f:47:d2:
5b:96:09:25:f3:24:16:52:e7:cf:2f:e3:6f:2d:d4:5c:b9:81:
d2:f7:c0:63:c2:0c:10:68:9b:29:a4:1a:de:28:37:a4:2a:34:
9a:85:24:0e:0a:6b:6c:78:41:58:69:52:49:f1:3c:7f:e9:3e:
5a:cf:cc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:17 2025 by rpki-client