Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DH9wWRsMhsePe0BictlYhDr2_b4.roa
File: DH9wWRsMhsePe0BictlYhDr2_b4.roa (raw, json)
Hash identifier: ywXnQSQTvHaCquLtIv8rYpG4R7b6i5cuKCc7vWHfQmM=
Subject key identifier: 0C:7F:70:59:1B:0C:86:C7:8F:7B:40:62:72:D9:58:84:3A:F6:FD:BE
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBC701EFBB4ED93B47B5CC7B25D654
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DH9wWRsMhsePe0BictlYhDr2_b4.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50917
IP address blocks: 2a0c:9a40:8520::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c7:01:ef:bb:4e:d9:3b:47:b5:cc:7b:25:d6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c7f70591b0c86c78f7b406272d958843af6fdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c7:6f:f0:db:2e:60:db:c6:ce:8c:dd:46:4e:
a4:8e:58:fa:36:c8:cb:ed:f3:46:c3:eb:b2:96:3a:
22:d2:19:9b:8f:6e:d8:5b:7e:d6:70:b4:6f:c4:ee:
1a:55:6a:ea:bf:bf:d5:ab:f1:5b:86:3e:5e:44:ef:
80:0b:16:37:40:27:e3:c3:92:67:4d:11:01:b9:d3:
b8:a0:a5:ee:57:1b:ef:ab:90:c6:b8:de:16:00:11:
d5:78:57:26:81:1c:a5:61:0a:f9:e2:9c:6d:fd:e6:
3d:9f:a6:bf:1e:cc:81:77:05:2e:58:a7:19:6f:61:
c0:4a:57:dd:86:b6:6e:26:15:ba:b4:96:85:91:ae:
c9:7d:ad:3a:27:6d:68:5b:37:7f:24:ae:97:90:f0:
88:f7:3d:98:7f:1c:71:07:c0:fa:a6:32:b2:09:0f:
e1:e9:68:bb:f0:94:fd:48:32:e9:eb:16:3d:96:ce:
27:7f:a1:c6:14:2e:f2:68:f8:8b:a2:32:4f:45:6d:
2a:3c:59:f9:0a:32:da:26:e1:ec:92:cb:40:3f:86:
ee:fd:24:11:31:24:d5:5a:a6:a1:05:49:89:24:73:
f1:1d:d4:f3:c4:0d:b9:8d:0c:eb:19:1a:35:bf:37:
e6:89:36:50:04:f2:52:37:b0:01:6c:7f:9b:0d:95:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7F:70:59:1B:0C:86:C7:8F:7B:40:62:72:D9:58:84:3A:F6:FD:BE
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DH9wWRsMhsePe0BictlYhDr2_b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8520::/48
Signature Algorithm: sha256WithRSAEncryption
18:ef:8e:2f:ee:d6:61:db:9d:86:1c:be:98:dc:db:64:bf:f9:
4b:26:ab:8a:7a:e7:69:e7:24:5d:a2:32:a1:a6:8d:85:c6:de:
c4:0c:91:1c:e0:96:90:35:55:98:08:5f:56:9d:fd:f1:50:ea:
31:d3:cf:80:82:4d:72:63:d4:bf:cc:29:44:48:6d:75:88:05:
18:c8:9f:8d:f9:a8:f7:0e:a7:aa:af:71:c6:2f:ab:e1:a4:28:
e1:d7:75:8b:a7:f5:78:57:a6:63:e4:c6:41:42:73:8d:de:dd:
4d:9d:3c:93:7a:fe:a9:7c:64:e5:3d:95:16:24:7c:d2:07:d7:
a1:d4:0b:91:6d:34:2c:9d:00:62:f7:77:46:75:ba:cf:3e:ec:
4d:5d:f5:c8:96:95:28:de:f4:fd:50:26:60:2d:7d:bf:35:3d:
e6:67:ce:99:ef:5b:33:8b:73:2d:9a:ea:3d:34:f1:ba:78:f5:
e9:a9:25:18:a9:56:f9:f7:3f:fe:51:6f:93:30:de:7a:44:9f:
f1:9e:69:51:8c:3c:c5:8c:78:7b:5e:40:62:9f:ed:46:0c:7d:
8a:bd:03:d5:ae:f3:d4:11:90:0b:b3:2c:81:89:46:7f:73:bd:
01:6e:4a:bb:e3:64:5d:09:eb:9a:c3:cd:1e:fe:d4:bd:c8:a2:
9c:f3:65:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:36 2025 by rpki-client