Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3hCn0e_ye64bdlcrllHmvSvdSxM.roa
File: 3hCn0e_ye64bdlcrllHmvSvdSxM.roa (raw, json)
Hash identifier: Z6FypfHSIOjEDq4crdYMGwSOM0kU/yq8/m7fSL3rYFo=
Subject key identifier: DE:10:A7:D1:EF:F2:7B:AE:1B:76:57:2B:96:51:E6:BD:2B:DD:4B:13
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBE21D6ABAAF0A54853E98ADAD00C0
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3hCn0e_ye64bdlcrllHmvSvdSxM.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207618
IP address blocks: 2a0e:7d44:f000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e2:1d:6a:ba:af:0a:54:85:3e:98:ad:ad:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de10a7d1eff27bae1b76572b9651e6bd2bdd4b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:49:6b:37:44:55:52:44:bf:17:0c:d2:f8:
d5:76:7c:7c:32:fd:fd:d8:05:f9:bc:4c:d1:54:c6:
37:32:35:fc:b0:27:bd:50:53:a6:c7:c2:b8:e7:37:
d7:d7:df:6e:47:3e:74:1c:56:77:b0:a9:ca:a0:09:
a1:de:ce:aa:47:10:dc:0f:62:b8:10:88:7b:63:67:
97:52:b8:99:b6:b0:3a:9e:c1:21:a5:2f:e6:28:47:
8e:d8:06:3d:66:cb:ae:b8:88:af:cc:3a:5e:55:fd:
92:d9:7a:8a:a7:b0:2b:49:53:2e:9d:b2:59:01:d1:
f6:67:1a:30:7d:5b:d7:e5:2c:c7:bb:30:c2:96:ef:
63:f2:c8:39:7b:e6:d5:68:c0:4c:16:50:32:40:0b:
a8:0d:a9:d1:d8:5d:9f:d5:94:12:a2:e4:a6:bd:a9:
71:65:d4:c6:78:af:93:60:c6:76:b4:df:20:0b:45:
9b:00:92:55:21:c4:45:c4:b5:36:9f:c3:a0:3a:24:
0f:39:54:22:04:ea:cd:66:03:ef:b7:bc:d3:0c:a6:
dd:d7:b6:a9:0f:1b:03:c7:9c:eb:8e:8e:af:95:2e:
2a:16:a0:44:2e:bc:7a:8e:de:e4:4a:26:33:1e:9e:
a5:16:bc:a7:48:b5:a5:51:0c:50:35:de:ac:b8:05:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:10:A7:D1:EF:F2:7B:AE:1B:76:57:2B:96:51:E6:BD:2B:DD:4B:13
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3hCn0e_ye64bdlcrllHmvSvdSxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7d44:f000::/40
Signature Algorithm: sha256WithRSAEncryption
bb:4f:a5:47:51:66:98:00:57:f7:f0:7a:2a:3f:8c:23:2b:c9:
28:89:52:ba:98:08:60:b7:bc:b4:d1:d2:d8:28:37:a8:0b:38:
e3:be:4e:8c:63:c0:5d:48:6d:9c:e7:58:d6:16:e1:f9:6e:db:
88:27:2a:d6:6f:6b:bc:4a:b8:aa:0f:7b:0d:44:f9:b7:6f:cc:
3b:5d:c4:38:52:b7:3c:86:7a:48:1e:fe:04:79:52:4d:63:7a:
aa:d9:8a:c0:d0:6b:d2:40:26:fd:27:39:bb:db:f7:02:2b:47:
87:05:3d:9a:4e:4d:6e:7e:6d:1f:c8:65:87:3f:41:9b:29:05:
75:c6:5a:08:e2:55:3d:e7:35:82:02:e8:1c:bb:93:b8:bd:cf:
8f:84:bc:17:9a:c2:9a:fe:08:70:f8:54:7b:5b:ec:25:71:a1:
ba:25:85:1a:b9:8b:61:f8:b1:bc:46:82:5b:b8:ce:6a:22:dc:
a2:64:b0:f5:0f:eb:3c:d7:45:12:54:4b:18:60:dd:38:9c:9c:
2a:2a:91:06:78:63:ad:4d:29:0a:4c:ac:91:23:cf:bf:db:2d:
89:1a:4f:5b:a9:98:0e:ec:8b:43:d0:89:c2:3d:41:37:e7:a4:
68:c1:41:34:48:59:73:14:30:4e:d3:8d:38:f5:35:e3:a6:18:
27:9b:e7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:12 2025 by rpki-client