Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/I6S0m-VasQo-CKpJ6kHXoy-IH7U.roa
File: I6S0m-VasQo-CKpJ6kHXoy-IH7U.roa (raw, json)
Hash identifier: 6ZlJ8HOh4Tic/iVwo5ldx2pnvxZ9y8deJwhFFBtJILk=
Subject key identifier: 23:A4:B4:9B:E5:5A:B1:0A:3E:08:AA:49:EA:41:D7:A3:2F:88:1F:B5
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBD6410A15C315CBE16C4F289020FC
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/I6S0m-VasQo-CKpJ6kHXoy-IH7U.roa
Signing time: Wed 01 Jan 2025 17:48:37 +0000
ROA not before: Wed 01 Jan 2025 17:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199925
IP address blocks: 2a0c:9a40:9800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d6:41:0a:15:c3:15:cb:e1:6c:4f:28:90:20:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23a4b49be55ab10a3e08aa49ea41d7a32f881fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a4:24:0d:f5:e6:bf:07:52:49:aa:9f:ba:63:
05:36:99:ed:a2:63:64:a1:23:e7:64:cf:1e:84:e0:
7f:1c:35:88:e5:67:75:8c:b0:59:c2:40:ff:00:6c:
4f:ae:b6:f6:49:2f:e2:f0:50:0e:5e:8a:2e:f2:3e:
5d:98:8b:ec:7e:60:2d:0d:cc:41:1f:88:00:ce:36:
db:f8:bd:13:88:f1:e6:7f:3d:47:2c:10:70:5d:e8:
64:5b:b5:31:1f:14:a8:ad:c0:66:82:76:98:8b:d4:
6f:d5:8d:f7:29:75:d6:2e:80:43:fc:1c:40:55:bb:
ba:38:82:df:53:f4:29:f0:9d:b9:7b:42:27:f5:6a:
2e:d4:5e:cc:5a:70:af:57:2b:55:25:9d:20:3d:85:
71:cd:11:9a:5d:59:c1:10:3e:0a:ed:3b:4a:bc:6e:
e9:79:1f:96:12:82:f9:ee:46:dc:55:42:0a:4b:e7:
c5:f9:bc:ac:5f:40:f2:ce:e6:fa:fe:56:b5:f1:04:
84:51:7a:0c:f1:ed:75:99:03:86:87:e2:20:c9:a2:
5b:6b:48:42:49:cf:07:09:bf:64:1c:e8:3f:16:f7:
9c:c4:e8:ef:1e:65:68:de:46:fd:4e:1e:c0:cb:d6:
85:e0:e4:71:7d:2b:c0:4d:a6:79:ab:96:b4:0f:56:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A4:B4:9B:E5:5A:B1:0A:3E:08:AA:49:EA:41:D7:A3:2F:88:1F:B5
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/I6S0m-VasQo-CKpJ6kHXoy-IH7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:9800::/40
Signature Algorithm: sha256WithRSAEncryption
70:a4:4a:30:21:e8:b1:87:b9:65:84:8f:04:d1:6d:bd:09:cb:
66:c9:ab:93:20:b5:2d:ad:cb:01:67:8b:56:da:cf:2b:b4:67:
94:33:ec:15:3a:bb:ba:4e:41:f9:d5:5c:ee:b2:08:8c:d3:21:
04:10:52:9b:ed:6f:d8:8a:ca:78:77:3d:d9:ca:cd:3d:8a:22:
41:db:37:1a:ea:e0:c5:e1:98:ea:51:32:80:c5:7c:c3:b7:a6:
dd:59:91:7e:d9:7b:21:3e:45:35:f9:92:93:d3:3d:33:82:5e:
b8:ef:10:2b:38:65:7f:ae:86:87:d7:c0:c4:2d:b8:a0:37:ca:
ae:ac:5d:cb:b4:10:e6:b8:d6:25:58:69:67:5e:31:14:3c:9b:
8b:e8:b4:ad:83:0c:ae:cf:c0:da:1d:0c:c3:8a:ff:5b:c0:68:
fc:ab:b8:47:37:91:da:55:05:28:b7:56:33:66:17:9b:16:5f:
b6:c8:f7:71:05:d0:78:d2:1e:d9:23:49:92:89:8d:3d:80:3c:
8a:b5:f8:62:54:4f:d2:85:aa:12:02:2d:b0:86:0f:d7:79:25:
7c:5c:c8:eb:04:78:9c:66:e8:bd:17:7a:5e:b9:f4:17:50:66:
ae:f4:a0:04:a8:a1:f7:a3:81:3b:18:01:f1:b1:ca:65:39:aa:
64:3e:85:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:28 2025 by rpki-client