Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DhrULRGA-Jwn5Fw39EiyUacrPg8.roa
File: DhrULRGA-Jwn5Fw39EiyUacrPg8.roa (raw, json)
Hash identifier: ngYPU3XkMoUYrQKmHMrfT5boNfqGuvppz5x6ScDIwnw=
Subject key identifier: 0E:1A:D4:2D:11:80:F8:9C:27:E4:5C:37:F4:48:B2:51:A7:2B:3E:0F
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBF15E1E588DCBA09DAD925C1C9C5C
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DhrULRGA-Jwn5Fw39EiyUacrPg8.roa
Signing time: Wed 01 Jan 2025 17:48:44 +0000
ROA not before: Wed 01 Jan 2025 17:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214376
IP address blocks: 2a0c:9a46:200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f1:5e:1e:58:8d:cb:a0:9d:ad:92:5c:1c:9c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e1ad42d1180f89c27e45c37f448b251a72b3e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:ab:d4:e2:8d:c2:71:e5:6e:7c:06:29:f2:
72:6e:8d:50:39:e3:86:7d:17:d2:65:a3:c0:84:d4:
67:b2:77:da:91:f4:14:07:b2:7e:7e:be:28:a2:75:
55:d4:08:fd:e5:40:96:c3:01:91:47:73:95:87:2b:
e6:15:51:94:ba:a2:d5:64:f3:a9:b0:ec:42:0d:9c:
78:cc:ea:6b:5a:49:1a:7f:c8:8d:82:dd:81:e6:be:
bc:aa:2f:dd:ea:da:35:8e:3b:5f:eb:8f:3a:44:af:
e0:c4:03:af:d5:7e:fa:c7:63:23:f5:95:86:e1:18:
86:22:b5:8e:7c:24:d3:5e:01:21:e6:0a:0c:8f:47:
c5:31:ae:e8:60:c5:02:72:b3:44:5c:8c:fe:24:2b:
6c:fe:95:57:21:fe:36:8f:b2:1a:91:2f:f0:3f:f6:
81:03:ad:6f:4a:12:be:cb:82:4a:53:c2:90:76:8d:
2f:ae:4f:f7:82:3e:24:2e:92:7e:d0:26:56:0c:91:
b6:2b:75:38:2f:dd:1e:ae:db:2a:d9:55:27:63:6b:
64:aa:d4:44:9a:27:91:2c:ee:48:83:2a:01:20:3c:
67:65:a7:83:e5:a7:0b:62:b9:be:ba:3a:d0:d2:d1:
39:57:f3:1b:71:94:f7:39:a2:ab:82:ba:9b:3d:be:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1A:D4:2D:11:80:F8:9C:27:E4:5C:37:F4:48:B2:51:A7:2B:3E:0F
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/DhrULRGA-Jwn5Fw39EiyUacrPg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a46:200::/40
Signature Algorithm: sha256WithRSAEncryption
25:d9:da:a2:5d:2a:1d:d7:5b:53:f1:c1:90:40:e2:78:e8:60:
a7:7f:36:6a:f0:f8:f8:46:72:7f:e2:f4:68:98:55:c5:46:00:
f3:31:26:88:32:46:f6:5e:87:7d:37:a7:bb:61:34:b4:0d:62:
8d:bc:3b:b0:9a:a1:b7:1e:08:bb:55:5c:ad:8f:45:c8:f1:81:
c4:98:cc:46:54:b5:08:f1:cf:a6:7f:30:c2:0c:f9:5a:a2:fb:
6c:24:56:39:31:33:25:03:2f:a3:fc:0a:d8:36:89:30:d6:ad:
ed:f3:6f:81:19:8b:4f:8b:d7:92:43:f8:d1:91:bd:c4:6c:cb:
0b:d1:fe:76:a1:88:7c:dc:9c:cb:73:e7:16:b1:9b:9b:ca:1d:
1f:22:c1:e4:95:c3:48:26:c8:fd:17:70:98:d0:b0:46:fd:f1:
5b:96:db:c2:df:ee:e5:a9:ee:a7:ef:e7:0b:b5:de:f1:d9:86:
8d:60:7c:ac:9e:c3:67:00:59:b6:6d:43:54:14:2d:bb:2e:79:
7d:80:b6:41:67:78:fc:8f:79:43:19:9b:ac:14:9c:35:87:e8:
60:8d:12:38:6b:10:fc:4c:39:67:be:68:bd:dc:36:12:69:cf:
f7:37:1f:38:c5:5b:af:dd:3d:98:ec:e0:65:34:ea:35:a7:27:
99:7b:ba:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:05 2025 by rpki-client