Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5HXk6HhcqzEn0_N3b2JDEcNzHWw.roa
File: 5HXk6HhcqzEn0_N3b2JDEcNzHWw.roa (raw, json)
Hash identifier: XQz0ysBb8uVeiaYzN/CBg09xgK1LqGXQPFX0O199MG8=
Subject key identifier: E4:75:E4:E8:78:5C:AB:31:27:D3:F3:77:6F:62:43:11:C3:73:1D:6C
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBBD93CED330FB689B8C9EF8D9C1CE
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5HXk6HhcqzEn0_N3b2JDEcNzHWw.roa
Signing time: Wed 01 Jan 2025 17:48:30 +0000
ROA not before: Wed 01 Jan 2025 17:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a0c:9a44:cf::/48 maxlen: 48
2a0e:7d41:8888::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:bd:93:ce:d3:30:fb:68:9b:8c:9e:f8:d9:c1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e475e4e8785cab3127d3f3776f624311c3731d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:0e:1d:51:d6:2f:05:4d:4e:1e:a7:c9:42:
53:80:dc:07:c9:68:6c:42:af:d9:a6:79:d4:c9:ca:
ed:1d:8f:14:25:83:64:87:27:bc:fa:8e:28:5f:dd:
6c:cd:c1:48:d6:03:86:20:11:80:6a:6a:ef:76:85:
3f:09:93:48:19:a6:63:62:5c:ff:fe:39:25:f2:78:
96:0d:85:52:54:28:8c:3f:fe:58:2b:f5:8d:6e:74:
76:ac:05:7d:d2:e5:26:57:4d:a8:e9:35:20:f6:d0:
d6:01:ae:43:6a:a6:95:8a:5c:9c:e1:1b:51:63:11:
2e:13:33:be:d2:aa:f4:dc:58:9c:e6:aa:34:26:40:
9c:42:85:7e:2a:8f:a7:1c:43:2c:43:7c:4a:c3:4a:
83:ee:4f:ae:bb:69:c4:a7:20:7a:25:7a:a1:6e:0d:
21:d9:fc:c0:c1:e9:ef:ab:ce:0b:56:5a:20:7e:37:
c2:7e:20:e7:71:e6:83:b8:fc:69:72:d2:65:a1:88:
ac:ae:f3:3f:17:b6:0f:d1:35:80:cd:39:d3:12:ff:
1c:47:6b:ba:36:af:f0:55:4e:6c:cb:48:e6:6e:7e:
a3:8a:2a:6f:37:99:26:40:d7:03:b4:b6:5f:0c:02:
c1:17:b3:ad:61:81:8f:b1:3b:aa:79:8f:de:71:1b:
d3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:75:E4:E8:78:5C:AB:31:27:D3:F3:77:6F:62:43:11:C3:73:1D:6C
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5HXk6HhcqzEn0_N3b2JDEcNzHWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a44:cf::/48
2a0e:7d41:8888::/48
Signature Algorithm: sha256WithRSAEncryption
80:45:4c:66:c2:b9:37:a3:26:23:4e:67:aa:f5:0e:70:59:bf:
19:77:fa:d9:dc:b5:5a:6b:88:d7:db:38:26:50:1c:b8:f1:02:
fc:8a:ee:f7:88:27:d3:bb:7b:13:a3:1e:6e:7a:a1:8e:b9:24:
d1:d6:d4:33:71:47:30:c2:50:85:00:2f:4a:33:58:61:14:86:
46:a5:4c:56:2a:57:68:89:74:8b:47:14:cd:41:19:38:9d:52:
90:b2:e3:d7:b2:53:d4:9c:5a:eb:a5:1e:0c:bb:dd:0a:68:89:
6c:8e:9c:b2:05:eb:e5:73:4f:b0:a6:fe:61:5f:cc:9d:82:e7:
42:de:ec:42:09:37:28:20:98:91:4e:9b:b5:df:d8:e8:4f:27:
e0:23:c8:8f:5e:92:10:c4:e7:cd:6c:76:1f:51:30:ce:99:28:
23:b3:f6:09:29:52:f0:8c:3d:53:4f:a2:8b:09:00:80:c2:e7:
4e:b0:6a:34:1f:f5:88:cb:96:da:a1:18:15:56:26:07:b2:47:
31:4d:09:ba:4f:29:05:68:df:51:1d:6f:77:68:ce:c3:a0:d0:
57:f6:69:1a:87:1e:55:b8:96:45:7d:b3:49:d9:73:2d:12:21:
83:cd:5e:d4:34:4c:12:3b:a1:da:7a:61:46:41:d5:8f:23:67:
80:02:42:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:36 2025 by rpki-client