Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/4dLK3AMpRcPLeg9TB2SDmFeKrKM.roa
File: 4dLK3AMpRcPLeg9TB2SDmFeKrKM.roa (raw, json)
Hash identifier: K1pkS7hZLTp1mnIuznEfdCY/GC95Hf/lR8yCyoxaU2w=
Subject key identifier: E1:D2:CA:DC:03:29:45:C3:CB:7A:0F:53:07:64:83:98:57:8A:AC:A3
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBE6C7B3B8C312A54648E7907CAF1D
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/4dLK3AMpRcPLeg9TB2SDmFeKrKM.roa
Signing time: Wed 01 Jan 2025 17:48:41 +0000
ROA not before: Wed 01 Jan 2025 17:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210890
IP address blocks: 2a0c:9a40:8030::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e6:c7:b3:b8:c3:12:a5:46:48:e7:90:7c:af:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1d2cadc032945c3cb7a0f5307648398578aaca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:bd:25:77:72:a7:08:73:7a:5a:b5:fc:cf:
a6:ab:05:7c:24:fb:58:f8:b5:d0:89:2d:19:cc:f6:
9a:a1:09:6a:a0:7a:f0:bf:16:90:e1:5e:ba:95:74:
77:6c:5b:7e:02:8d:59:a6:0e:90:58:57:87:48:3f:
75:81:f0:b8:67:96:fb:ae:9a:6b:e9:aa:3d:32:5d:
2f:b1:aa:ef:69:89:c0:84:5a:14:24:cf:0b:a4:21:
27:2e:11:03:1e:35:be:06:c4:da:6c:70:f1:59:c4:
50:b0:5d:6a:03:dd:59:1d:af:ea:26:cf:e0:0d:95:
e2:cb:47:57:a5:da:94:26:20:3d:4a:ad:67:df:8d:
80:60:4e:42:b4:e5:fa:f1:79:8e:6f:27:ff:b3:9a:
27:62:cd:c7:25:93:23:94:07:ca:ee:b8:9d:ac:c7:
2a:7a:a7:e7:b3:d5:2c:b8:bd:cc:18:7e:db:85:47:
7e:37:fc:9a:a8:38:e2:c8:d3:54:8f:9f:f1:c1:6e:
08:4b:40:05:f2:15:21:d6:91:45:24:93:3d:47:e6:
fe:73:ff:a8:6e:dc:67:9b:00:35:fb:3c:00:ce:4e:
29:79:52:d7:14:c6:63:53:86:2e:59:b5:1a:af:0e:
69:f8:97:08:ae:7f:61:78:11:f7:00:94:1e:b0:0b:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D2:CA:DC:03:29:45:C3:CB:7A:0F:53:07:64:83:98:57:8A:AC:A3
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/4dLK3AMpRcPLeg9TB2SDmFeKrKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8030::/44
Signature Algorithm: sha256WithRSAEncryption
a0:98:d4:74:d7:a0:a6:9d:24:04:a0:60:8e:ec:9a:7e:79:ee:
b6:98:e0:e1:af:64:ea:3a:33:fd:44:b4:ca:10:7f:2e:72:80:
29:64:2a:ca:93:40:4f:f5:fa:07:3d:40:bb:08:17:ed:88:ff:
77:74:a7:4b:cb:23:95:84:90:c7:ae:3e:ff:2f:25:e5:61:49:
ce:df:50:08:c3:d4:be:19:d3:73:43:e8:2c:2e:2f:1b:6d:38:
bb:40:66:60:79:32:4f:20:66:07:5d:b8:24:8b:f3:df:5a:f5:
f8:ec:cd:08:a0:dd:9e:8d:1d:68:31:41:ec:3d:db:70:2a:4d:
16:39:35:67:f4:22:97:25:74:c5:20:1b:73:0b:87:ee:4f:93:
f9:d3:f4:80:05:47:e0:13:72:86:b9:c3:7c:40:68:fe:25:3c:
45:49:f4:db:bc:06:06:38:29:84:15:2d:d0:c2:97:42:ed:6f:
e8:80:26:04:9d:9e:c8:ed:3c:a9:86:58:3e:94:c5:30:d8:f7:
7d:95:b9:cc:5a:f2:e4:35:ae:e5:17:df:34:5a:4b:10:2d:47:
a7:8e:72:46:8e:e1:ed:05:02:6f:e2:88:03:60:bc:81:8f:7f:
41:b1:ba:8e:66:dd:5c:c7:b2:bc:75:b9:a2:7a:74:6f:29:5f:
36:98:c6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:46 2025 by rpki-client