Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DePc2KHDEcpBERpWQ6iKkkPvadg.roa
File: DePc2KHDEcpBERpWQ6iKkkPvadg.roa (raw, json)
Hash identifier: adDWelg3oWmodhZbP6Q+w60OvojBIrlXB16p5C2XUv8=
Subject key identifier: 0D:E3:DC:D8:A1:C3:11:CA:41:11:1A:56:43:A8:8A:92:43:EF:69:D8
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018C104A6B59434DBB198A27319B062F3200
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DePc2KHDEcpBERpWQ6iKkkPvadg.roa
Signing time: Mon 27 Nov 2023 10:19:21 +0000
ROA not before: Mon 27 Nov 2023 10:19:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134090
IP address blocks: 2a0c:9a40:8cb0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:10:4a:6b:59:43:4d:bb:19:8a:27:31:9b:06:2f:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Nov 27 10:19:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0de3dcd8a1c311ca41111a5643a88a9243ef69d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:75:3d:57:9f:e6:57:a8:2b:3c:19:d1:bd:54:
ea:fe:d2:0e:14:38:c5:11:7d:a8:79:15:9d:10:21:
e1:45:71:8b:0e:a7:a6:77:b8:bd:9a:27:1b:02:f3:
1b:3e:73:76:e2:a4:7b:f2:e5:ae:50:c0:00:0e:e9:
3b:aa:b1:62:39:f2:76:cf:10:1b:0b:96:53:3b:64:
e4:a9:b7:26:17:2b:e9:9e:7d:5a:ae:8a:d6:d5:8e:
48:c3:2e:46:bc:52:6c:e0:5f:2e:58:e4:20:ec:fc:
28:16:c5:43:22:49:18:1c:80:d5:f4:33:fc:48:cd:
06:9d:a0:5a:ab:88:fb:01:b8:84:43:de:87:6f:6d:
ca:02:57:7e:8a:46:ca:80:fe:6d:d4:70:5d:88:1f:
0d:3b:bc:2c:aa:86:35:22:b1:17:b0:19:d5:08:c8:
7d:4a:b2:82:e3:b0:c2:30:d8:31:04:f8:cc:26:42:
06:73:d0:e2:2a:49:a3:32:c3:41:f6:c9:15:5c:bb:
97:a3:84:32:88:0b:95:58:a5:57:3d:a0:f2:6c:30:
1c:8d:42:27:eb:9e:05:8f:f0:d3:b6:46:04:b9:99:
5f:58:6d:2b:b3:95:4d:be:0b:21:22:ef:95:cb:c5:
87:e4:b6:ce:1b:54:d5:f0:1e:01:91:ec:33:99:9d:
aa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E3:DC:D8:A1:C3:11:CA:41:11:1A:56:43:A8:8A:92:43:EF:69:D8
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DePc2KHDEcpBERpWQ6iKkkPvadg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8cb0::/48
Signature Algorithm: sha256WithRSAEncryption
35:c7:d8:3d:38:27:03:c9:69:63:ea:14:f6:ad:46:5d:25:7a:
86:e7:87:e5:c0:f3:da:f3:c9:58:33:55:7e:83:4b:88:d1:39:
31:9e:56:dc:9a:3a:f2:6c:6a:14:d7:d8:7f:64:d6:3c:70:b8:
82:11:ee:73:ec:f2:d5:f7:02:16:21:dc:bc:81:ec:be:79:62:
b8:a9:c3:f3:13:ee:82:a8:3c:65:6c:39:07:c9:ff:57:19:a7:
48:00:55:d9:d4:75:45:34:a5:6f:38:2b:3c:20:30:03:f2:20:
31:e0:47:b2:c7:14:36:2b:da:71:bd:c1:5d:a5:6e:0b:77:0d:
2a:43:5d:7d:fd:3f:bf:b3:f4:61:45:de:78:b0:81:bf:aa:de:
ab:55:d8:ec:54:4e:bc:a1:ff:c9:c0:88:7c:4b:21:03:a7:22:
65:0a:6b:ac:a2:b6:3f:2b:d2:7d:3b:5e:bd:9b:7c:b5:cf:88:
f5:0d:b9:81:d5:8d:85:91:d0:d3:20:cd:2f:3c:50:7d:4c:2e:
16:45:90:6d:dd:a2:36:44:a7:db:e8:b6:d8:bd:16:57:51:50:
1f:61:5d:b5:fc:ef:71:20:95:2d:ab:c7:c0:8f:b1:35:2e:21:
4a:10:ee:c7:f2:43:43:3a:0d:30:0d:e4:fb:0e:1d:04:a9:c0:
34:54:19:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:01 2025 by rpki-client