Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6E719mZDk2zm2f3sWqs7LuuzhzY.roa
File: 6E719mZDk2zm2f3sWqs7LuuzhzY.roa (raw, json)
Hash identifier: 3jADMPANTmaH1FOm5eoQ9gxak0vJ1DueLjeQFtIVBoA=
Subject key identifier: E8:4E:F5:F6:66:43:93:6C:E6:D9:FD:EC:5A:AB:3B:2E:EB:B3:87:36
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBF1D4F8F52BCC46084FC55E816BBD
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6E719mZDk2zm2f3sWqs7LuuzhzY.roa
Signing time: Wed 01 Jan 2025 17:48:44 +0000
ROA not before: Wed 01 Jan 2025 17:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214496
IP address blocks: 2a0c:9a40:8af0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f1:d4:f8:f5:2b:cc:46:08:4f:c5:5e:81:6b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e84ef5f66643936ce6d9fdec5aab3b2eebb38736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:66:cd:8a:83:bf:a4:07:7a:00:a2:c8:0f:08:
a8:65:68:f5:94:1a:ff:a0:5a:a4:4e:3b:f6:97:2d:
c7:70:a1:b7:39:3d:c5:73:31:c0:40:20:a4:08:d4:
ae:f3:38:48:81:ce:84:c1:4b:1a:af:5b:7a:7b:40:
2c:1e:c1:09:d6:71:6c:58:d3:61:32:24:f7:a9:f6:
6a:42:8c:6d:2a:bf:46:29:bd:bc:45:07:8b:b4:6f:
a6:42:c7:b1:8c:39:c3:7d:d0:51:bb:91:83:38:3a:
22:2b:95:01:c1:75:b0:51:ad:f0:1c:0d:59:9c:e9:
33:88:f4:51:7e:ea:74:cb:cd:63:3c:ea:35:b1:91:
80:8e:bf:75:a2:4a:6e:67:68:16:bc:a2:95:f3:fc:
62:c3:5b:fe:28:e8:0f:71:97:e5:4c:96:4b:36:5a:
de:35:ba:cf:2e:39:f1:6d:ff:d7:a8:7b:94:63:6d:
0a:d4:6a:af:49:02:85:7d:4c:54:d7:ee:d9:6a:29:
eb:6a:fc:20:6d:42:e0:23:2b:70:c8:ac:c1:7c:fc:
0d:e2:b0:99:9e:af:54:fe:f8:b2:9a:5a:39:d9:bb:
8a:d1:4f:12:3d:f8:96:19:72:c6:37:27:52:0c:eb:
a3:f6:d2:90:81:0c:cf:30:e4:3d:30:83:00:01:c2:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4E:F5:F6:66:43:93:6C:E6:D9:FD:EC:5A:AB:3B:2E:EB:B3:87:36
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/6E719mZDk2zm2f3sWqs7LuuzhzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8af0::/48
Signature Algorithm: sha256WithRSAEncryption
87:0b:86:92:70:b4:a7:46:01:b7:d2:5c:7d:e8:2b:a5:cb:02:
84:39:0d:75:c6:a6:b6:49:e5:08:8b:9a:b0:e6:01:d1:e6:e0:
78:80:5f:a8:68:ea:66:a1:fc:b6:7d:58:f4:d7:a7:23:fd:b3:
28:d3:98:53:7d:f7:ce:90:97:0d:ba:72:be:26:a6:ed:ee:d0:
8a:82:ad:3a:09:06:b8:ad:5c:39:c5:6c:f4:47:ad:15:dd:d4:
12:f7:a9:b0:a3:ff:25:eb:87:10:0f:93:46:b3:da:47:fb:d9:
f8:ae:18:ef:a7:ed:da:97:64:92:ff:0b:43:77:96:35:36:54:
e0:46:df:e1:eb:c6:50:6f:d5:14:3f:cb:d0:3c:a2:43:09:cc:
83:f9:a3:af:ea:5c:d1:1e:25:14:07:6f:a1:dd:e3:90:18:bb:
7c:e6:36:37:ba:20:30:34:9a:1e:1d:42:14:58:f1:fb:ff:ea:
46:0c:72:45:08:ca:be:79:4e:d0:4e:c2:d7:44:9f:b1:ca:0c:
17:8b:19:6d:00:6e:8e:93:37:0b:11:d0:e8:77:86:74:a1:86:
01:28:f2:bc:b1:c7:1e:b9:b3:49:88:ef:20:08:39:d9:04:ea:
d3:db:6c:14:5b:f4:e8:11:76:5b:25:68:6c:a6:32:39:6f:d6:
ff:7a:aa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:34 2025 by rpki-client