Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0QMpcZdSDtbB3lhRzvKxVcaNRRE.roa
File: 0QMpcZdSDtbB3lhRzvKxVcaNRRE.roa (raw, json)
Hash identifier: mX4H1a8ADwkbOD4PBUalJN0lsf3WZPO9MqvS7roL/n4=
Subject key identifier: D1:03:29:71:97:52:0E:D6:C1:DE:58:51:CE:F2:B1:55:C6:8D:45:11
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBEBEBB122988411FA54E9663DA167
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0QMpcZdSDtbB3lhRzvKxVcaNRRE.roa
Signing time: Wed 01 Jan 2025 17:48:42 +0000
ROA not before: Wed 01 Jan 2025 17:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213253
IP address blocks: 2a0c:9a40:81fb::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:eb:eb:b1:22:98:84:11:fa:54:e9:66:3d:a1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d103297197520ed6c1de5851cef2b155c68d4511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:56:0d:1a:ab:2f:77:35:4a:16:6d:96:c0:43:
0a:75:d9:ab:0a:e9:be:ed:59:38:45:6c:6f:e6:22:
25:f7:c1:39:f6:26:21:17:3a:5f:13:df:e1:32:81:
3d:09:c5:53:58:68:fd:6d:bd:2e:69:58:fd:ef:cb:
c1:c3:2f:80:29:27:7a:cf:b3:16:8d:1b:ad:f1:44:
b7:d6:ac:ad:0e:62:c1:aa:60:d7:f0:ad:ac:76:ca:
4b:bc:0c:2f:5e:8f:0e:9f:ad:05:6d:0f:08:12:a1:
c9:b7:57:74:84:74:bb:7e:2b:74:2a:9c:d6:4c:26:
31:6e:d6:b0:f3:90:70:6c:03:48:67:79:9e:26:6e:
1d:e9:50:a7:5a:fb:a0:e1:74:9a:55:b8:58:5a:7d:
f9:67:1e:cd:af:67:5d:a8:3f:a2:56:8c:0c:0a:94:
00:67:67:c3:35:82:7a:53:72:a1:2c:3c:fe:eb:64:
04:e5:7c:92:aa:0d:d2:2c:f2:12:9f:6d:9a:37:f8:
d6:c8:ea:43:2c:a5:37:d9:6d:c9:4f:a4:ef:f4:3a:
00:8f:ab:79:ca:d0:9b:0c:32:eb:b9:6b:42:e8:b5:
95:23:45:e4:63:c6:40:95:58:3d:72:25:fe:82:09:
04:7e:88:1b:1a:e3:f0:66:fb:b9:19:e6:08:61:00:
ea:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:03:29:71:97:52:0E:D6:C1:DE:58:51:CE:F2:B1:55:C6:8D:45:11
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0QMpcZdSDtbB3lhRzvKxVcaNRRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:81fb::/48
Signature Algorithm: sha256WithRSAEncryption
b0:42:7a:c9:fc:4a:b9:26:58:c1:da:d7:5c:1c:88:ae:94:36:
04:51:ba:f6:04:ce:96:5c:ff:8d:a8:d8:14:d7:bf:3b:26:1e:
3b:18:00:ae:a9:da:f9:c2:18:a2:f3:f5:a4:1e:db:32:ea:73:
03:de:62:7b:e2:27:f2:32:19:7c:a1:ee:be:b5:80:6b:3c:69:
88:c9:a9:9a:ec:e6:82:55:80:f1:ab:7e:ea:ff:2a:17:35:4f:
67:42:0d:73:64:bd:04:7d:de:9f:c6:be:75:dc:5c:4b:68:32:
6a:1d:15:79:e6:a1:a8:5b:06:82:f7:0d:c4:d1:6d:26:a5:b3:
54:84:bc:ca:d5:73:66:0f:8e:cd:e8:7a:a1:41:8d:73:a6:9c:
e2:d6:a3:cd:8d:15:78:b9:4d:e3:10:f8:24:63:26:f8:aa:21:
73:7a:e9:0f:e4:2f:9a:a2:51:fd:55:aa:4d:d7:f1:63:7d:5f:
66:cb:f4:4e:43:d6:e4:23:e2:21:f7:00:ab:92:c9:9b:f9:f6:
f4:24:69:30:50:74:19:00:ef:28:50:b9:1a:64:fa:05:bd:f7:
cc:ea:67:55:bc:43:e9:86:0e:80:35:9c:6c:ed:c1:3a:e6:fd:
01:0c:36:dc:ca:c7:62:e2:3e:a2:89:30:3f:45:7a:ed:20:51:
43:26:66:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:18 2025 by rpki-client