Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8bqLR8fwAggBvtGEE_GJfhtmMx4.roa
File: 8bqLR8fwAggBvtGEE_GJfhtmMx4.roa (raw, json)
Hash identifier: OmqUBQkDlsc5ZoblVCHfNT+jy96oZ27610Q4qeYIYfo=
Subject key identifier: F1:BA:8B:47:C7:F0:02:08:01:BE:D1:84:13:F1:89:7E:1B:66:33:1E
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBF9675B640CCA3592FE1491BC7A91
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8bqLR8fwAggBvtGEE_GJfhtmMx4.roa
Signing time: Wed 01 Jan 2025 17:48:46 +0000
ROA not before: Wed 01 Jan 2025 17:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215563
IP address blocks: 2a0c:9a40:8500::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f9:67:5b:64:0c:ca:35:92:fe:14:91:bc:7a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1ba8b47c7f0020801bed18413f1897e1b66331e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:80:2b:96:2f:01:7a:18:90:2f:67:f9:06:
84:b4:c2:46:c9:28:5b:6c:dc:47:cc:5d:ce:6a:56:
38:59:04:bf:c4:fa:46:65:eb:83:02:b7:89:0b:6e:
d5:f0:91:5e:6f:7a:85:2c:46:28:13:8a:c2:1d:90:
6f:c4:c1:3d:71:20:04:7d:fe:7e:a9:c0:15:38:12:
0f:7e:d7:f9:64:f5:1a:68:87:26:db:d8:d5:c0:0b:
2a:49:30:2a:1a:e3:f6:cd:dc:b7:7e:2c:cd:0f:2a:
d5:60:cf:ad:72:90:97:96:92:ee:01:37:89:81:f4:
e2:bd:dc:1a:52:09:8e:a2:6e:34:e9:f8:25:ca:c6:
31:ed:39:d3:fc:dd:03:55:75:b0:02:29:d7:2b:60:
41:7b:be:77:0b:56:74:c5:df:1a:5c:e9:dc:df:b0:
0f:54:b8:ad:64:d3:70:1c:38:81:97:a9:d4:a9:3f:
63:b1:10:04:ed:dd:64:e1:15:6f:96:31:05:69:9c:
02:76:7a:d5:69:eb:8e:a3:11:4e:66:11:c1:cb:29:
9f:74:24:b7:a7:af:3f:f5:d5:23:ef:db:51:df:12:
77:b3:9f:a1:cb:36:f5:7e:24:92:1a:17:e3:17:31:
5c:91:0c:09:bb:e7:c6:84:81:58:f1:08:5f:e0:ec:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BA:8B:47:C7:F0:02:08:01:BE:D1:84:13:F1:89:7E:1B:66:33:1E
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8bqLR8fwAggBvtGEE_GJfhtmMx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8500::/48
Signature Algorithm: sha256WithRSAEncryption
0e:0f:fe:a1:4f:75:09:cc:8e:18:8f:63:25:21:65:32:4e:11:
d4:04:51:86:ab:0b:53:74:6d:4e:39:50:7a:1a:bb:c7:82:e8:
5c:83:7e:db:38:1f:f4:f3:1e:c6:3f:f8:50:b8:fe:de:25:6f:
2d:7f:a2:b6:5c:c8:a2:a4:10:4d:4b:82:51:e8:26:6a:0e:0b:
a3:75:db:71:71:ba:e7:75:0a:2a:5d:a7:2e:8a:db:1e:de:37:
09:96:88:72:e2:6e:41:eb:39:26:03:c8:39:49:72:2b:6e:14:
96:87:f0:f8:f6:5d:a9:57:7e:2b:9e:e4:27:98:00:28:30:fa:
94:36:47:17:35:65:d6:7b:40:c4:e0:8f:ab:e1:e3:a8:49:3a:
a5:1f:09:cd:3c:93:a7:57:81:32:01:a4:ef:b9:3d:92:b6:3e:
27:a7:4e:87:3b:da:8c:11:6b:96:e3:67:a7:49:23:91:0c:f0:
d0:bd:9c:b0:c2:a4:89:ad:d4:5f:c5:29:bc:2b:f2:c4:1f:d2:
d9:b2:df:0e:0c:70:c8:c4:d2:e7:fb:8b:a7:3f:51:c0:54:60:
12:48:f5:e0:d6:65:fc:4f:ff:6a:1a:11:6d:f0:2f:47:ff:23:
33:42:a8:e5:7b:46:96:a8:28:71:12:c5:49:e9:98:91:b4:82:
45:03:7e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:26 2025 by rpki-client