Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/nMvhW6NBx2oWyQA-NXSGrP8fw64.roa
File: nMvhW6NBx2oWyQA-NXSGrP8fw64.roa (raw, json)
Hash identifier: yBfS/pe9bzr2OuI7LotAdRvEdOw9zHqxGHNxvbBRsq4=
Subject key identifier: 9C:CB:E1:5B:A3:41:C7:6A:16:C9:00:3E:35:74:86:AC:FF:1F:C3:AE
Certificate issuer: /CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Certificate serial: 9046D2
Authority key identifier: 72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/nMvhW6NBx2oWyQA-NXSGrP8fw64.roa
Signing time: Sat 01 Jan 2022 01:54:59 +0000
ROA not before: Sat 01 Jan 2022 01:54:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49718
IP address blocks: 2a06:1301:4003::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9455314 (0x9046d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Validity
Not Before: Jan 1 01:54:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ccbe15ba341c76a16c9003e357486acff1fc3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:94:b3:4e:a0:97:e2:ec:ab:50:fd:3c:26:
3c:56:be:f0:ad:7b:d9:0a:87:c1:c7:6e:e9:cf:6b:
22:2b:be:5f:4e:65:2e:ef:2c:3c:bb:4e:cc:5a:ec:
85:fb:7c:ea:e8:b0:70:27:36:c5:26:4d:b9:83:36:
43:77:6d:d4:82:90:68:d3:31:dd:ea:f3:37:44:69:
cd:32:30:d9:8a:e2:79:f7:58:94:9e:3d:eb:75:2b:
eb:72:6f:49:aa:41:21:d6:f7:aa:1d:2c:ee:a5:87:
e2:53:74:2f:bb:64:b1:ca:3f:5f:fe:86:2a:71:76:
27:41:fd:36:4a:df:40:7f:4d:8e:4c:30:6b:ea:f7:
ae:69:c9:9c:e0:54:5c:2e:82:5a:4b:af:1c:f8:76:
8b:7e:b1:52:0f:00:8a:d3:30:fc:93:4d:e1:bd:07:
4d:d2:2a:a9:2f:b4:a9:3a:5e:8d:94:f9:8f:fe:78:
0d:5a:fc:74:08:e8:8f:51:0d:67:e1:6a:e3:ec:f8:
7c:94:c7:87:28:5c:79:e8:b7:07:70:85:2c:c9:6a:
4b:c6:3f:a3:cc:ce:0c:14:03:ff:b6:e0:22:63:7c:
58:18:e1:51:f1:5b:58:44:c8:2d:52:c4:f9:a2:9c:
f5:83:ef:f2:33:d0:e6:57:f2:f3:a6:0b:90:05:9a:
1a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CB:E1:5B:A3:41:C7:6A:16:C9:00:3E:35:74:86:AC:FF:1F:C3:AE
X509v3 Authority Key Identifier:
keyid:72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/nMvhW6NBx2oWyQA-NXSGrP8fw64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1301:4003::/48
Signature Algorithm: sha256WithRSAEncryption
58:7b:bb:21:14:1c:a3:d9:60:df:16:62:f0:f9:ca:12:4f:cd:
67:2b:4a:cb:7e:6a:1b:73:0c:ed:2a:b5:5b:88:2d:9b:ea:ab:
c0:79:87:c7:2b:eb:a5:ab:15:3f:f2:48:68:6f:ad:d3:c4:b7:
3b:95:00:c1:87:01:5e:26:aa:47:cc:18:94:c2:1d:39:53:57:
63:35:77:b0:a9:0e:23:d6:7f:97:00:1b:1d:ec:97:26:b7:96:
89:49:d8:4c:63:4b:51:8c:e3:21:13:8b:81:f9:79:99:ec:8c:
55:e3:33:27:db:9c:04:43:aa:9b:12:22:86:d5:d8:63:e8:35:
2a:95:2a:58:c1:b6:81:8d:3e:12:59:62:bc:13:88:0f:45:99:
b1:6a:82:14:a2:68:25:ae:ee:03:b0:b0:29:d5:ec:e9:dd:dd:
23:83:1e:a6:35:96:7c:62:27:e4:de:61:95:71:6e:3b:70:1f:
d2:5d:f5:ec:30:60:df:95:c6:c6:5d:93:12:60:8a:45:26:02:
bc:cd:11:a5:45:3b:ee:25:46:00:e2:08:4c:77:ac:d6:ad:c5:
64:95:b4:d1:c6:8d:ec:00:71:13:11:89:02:80:6c:5d:09:96:
1c:e6:b9:2c:0f:9a:e7:3f:6f:7a:b7:12:42:a2:49:25:18:65:
00:0f:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:12:08 2025 by rpki-client