Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/IaPCnjL8s1Hu77NO6QFV7PgPCTo.roa
File: IaPCnjL8s1Hu77NO6QFV7PgPCTo.roa (raw, json)
Hash identifier: MOvGLaHT2WwEMuKgo8MMja39vP2zUivUold3U7MSWQY=
Subject key identifier: 21:A3:C2:9E:32:FC:B3:51:EE:EF:B3:4E:E9:01:55:EC:F8:0F:09:3A
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBD0829CC79E9D9A2C377060C2B4A2
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/IaPCnjL8s1Hu77NO6QFV7PgPCTo.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197951
IP address blocks: 2a0c:9a40:8cb0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d0:82:9c:c7:9e:9d:9a:2c:37:70:60:c2:b4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21a3c29e32fcb351eeefb34ee90155ecf80f093a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:fa:fc:02:72:be:41:12:89:2c:e6:2d:52:
51:16:7d:b0:49:80:c9:b6:f6:ce:a9:8e:68:d2:85:
86:14:ad:7c:cc:a0:14:cf:8a:1f:1c:b4:6e:26:fc:
d6:bb:b6:fc:0d:55:9e:cc:5a:8c:96:63:06:5d:88:
32:b5:a8:77:23:2b:94:7c:20:94:c3:cb:56:3e:41:
a2:b2:ae:c6:35:5a:88:02:95:b6:e8:b0:5e:b0:53:
8a:ed:c9:d4:cc:40:85:23:be:c7:f3:d3:ee:a9:6b:
0e:cb:a9:d1:de:6c:2a:5c:2b:50:70:72:78:7a:20:
8b:13:24:b5:b8:a8:df:76:e6:e6:f4:f8:9b:f3:e1:
56:db:9f:b9:92:77:0c:e6:3e:cb:5b:4e:29:5d:aa:
86:e7:55:82:54:35:47:4f:7c:47:54:db:ee:17:ea:
27:7b:a3:f8:7f:c0:36:28:09:44:6f:3d:8a:57:bf:
32:08:9c:f8:69:04:bc:b5:5d:79:c1:52:3e:bf:b8:
34:a8:3a:db:67:05:ce:50:0b:6e:bd:37:02:32:e6:
c7:63:e4:27:55:9f:a6:99:86:7c:90:30:ad:67:01:
4e:b0:50:3c:86:a1:83:1e:19:9d:8d:06:be:63:f6:
a9:07:55:c7:bf:63:e8:3c:eb:75:d4:30:c2:61:a7:
92:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A3:C2:9E:32:FC:B3:51:EE:EF:B3:4E:E9:01:55:EC:F8:0F:09:3A
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/IaPCnjL8s1Hu77NO6QFV7PgPCTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8cb0::/44
Signature Algorithm: sha256WithRSAEncryption
b2:15:5b:fc:52:a8:6c:db:45:30:0c:1b:81:6a:17:57:d9:85:
cd:9c:42:59:d6:d2:34:4d:88:c0:13:89:82:ef:91:3d:2c:83:
aa:fc:64:ae:49:b2:cf:91:94:62:50:8c:7d:35:51:1a:90:2d:
78:b8:e7:7e:e8:82:f4:20:8d:54:8f:b2:69:f2:39:db:18:4f:
a8:be:90:9b:0b:de:d6:da:dc:19:f7:2e:4d:70:37:da:b5:7b:
eb:12:9c:2c:35:f5:a8:53:d0:bc:fb:18:8e:6e:19:4c:e4:a6:
56:40:9b:e2:d5:f0:5c:0c:73:ae:03:e9:5e:45:10:88:e3:a7:
5f:c7:16:73:01:c0:62:20:cd:9e:c6:07:77:b4:cb:48:31:04:
cd:f3:9a:4b:8b:01:55:93:bf:3b:15:9a:b8:00:4a:cb:25:17:
1a:a5:0a:9f:a6:e2:6b:b0:07:02:df:96:41:16:01:66:81:e7:
07:4c:4d:8d:dc:0b:18:c2:6f:8a:d8:7f:e1:fa:ea:99:59:3b:
c3:ec:9d:22:4b:6c:cb:bc:36:d4:99:15:57:7e:69:5c:6d:1b:
cb:1b:83:3e:44:9e:e7:90:44:75:9e:99:15:61:a7:14:9f:9c:
47:7b:74:1a:72:66:43:0e:e8:19:39:96:d5:f6:58:89:5e:d0:
6f:76:96:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:37:20 2025 by rpki-client