Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Ky0EFrPK9hj38c14zjh5JvkcPEg.roa
File: Ky0EFrPK9hj38c14zjh5JvkcPEg.roa (raw, json)
Hash identifier: GsTzA4RjNEncMmyLf9sKgV0NGcrZXxqCIuCAuSk8/M0=
Subject key identifier: 2B:2D:04:16:B3:CA:F6:18:F7:F1:CD:78:CE:38:79:26:F9:1C:3C:48
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBEAFCF162DCEA2257F96289D8F83B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Ky0EFrPK9hj38c14zjh5JvkcPEg.roa
Signing time: Wed 01 Jan 2025 17:48:42 +0000
ROA not before: Wed 01 Jan 2025 17:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213163
IP address blocks: 2a0c:9a40:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ea:fc:f1:62:dc:ea:22:57:f9:62:89:d8:f8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b2d0416b3caf618f7f1cd78ce387926f91c3c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3f:f2:6c:3d:3e:5e:63:2e:20:98:13:7c:84:
c6:b3:4f:2c:5a:39:40:62:80:67:22:34:af:a6:c1:
bb:2e:1f:b9:69:8a:b0:65:ae:4a:b5:31:d3:a5:5c:
4f:cb:a2:8a:be:4a:da:b6:97:50:96:f5:d6:60:90:
57:12:34:ab:61:21:90:58:dd:8e:f0:b3:8e:a7:b2:
d7:04:45:fb:be:df:8b:f4:58:ac:66:b6:53:85:0f:
9f:5b:3b:2c:0a:47:0b:89:30:5e:38:cc:89:f4:a5:
ea:79:a2:4d:1f:3e:91:1a:51:c4:a3:da:06:12:08:
fd:07:9a:0b:48:18:4f:89:f2:88:a4:1f:6e:23:36:
74:b9:83:69:40:d2:85:af:05:cf:4d:ac:7a:e2:b5:
32:c0:87:a8:09:56:67:24:a1:79:cb:81:60:63:79:
0d:9c:2b:19:e1:6d:a1:22:c6:01:ec:2c:5e:68:47:
ac:16:bd:e0:ca:94:24:06:f9:4b:48:b7:66:3f:d0:
0f:8b:b4:0e:9b:fe:98:98:23:8b:02:9f:f7:93:be:
1f:f6:8c:4f:72:65:12:92:49:ff:db:7f:12:29:19:
0b:92:4c:c7:70:00:4e:91:ea:c1:77:15:1c:13:6d:
ca:e3:68:50:ad:2a:bd:fb:c9:d4:e3:37:00:3d:27:
74:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2D:04:16:B3:CA:F6:18:F7:F1:CD:78:CE:38:79:26:F9:1C:3C:48
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Ky0EFrPK9hj38c14zjh5JvkcPEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
63:91:35:84:75:d1:50:dc:39:7f:90:5f:7d:9a:6f:11:dd:83:
c9:24:4d:6e:06:65:10:28:06:ad:47:0e:b3:a2:70:4b:ef:2c:
9b:07:8e:73:b6:e6:5d:c8:77:26:dd:a2:6f:df:1c:5c:1f:d8:
bf:b0:43:1c:48:82:62:32:37:8f:2e:a9:11:5f:d3:96:63:b4:
ac:01:49:47:9c:2f:a6:7c:b0:9e:57:b6:a0:07:bb:e2:95:40:
ee:e5:fc:eb:d9:a5:48:65:fb:ff:65:95:1e:a2:fe:24:4b:f0:
73:11:55:eb:17:ce:59:34:be:18:22:75:eb:31:f9:6e:22:b2:
53:a1:53:91:78:a9:dc:f9:86:4b:aa:ef:13:39:97:e1:31:9e:
92:57:ed:59:4c:db:0f:86:84:a4:5d:22:71:f2:6a:9b:c8:b6:
ab:de:46:87:16:7d:5d:64:59:d8:cf:ce:9a:7b:73:a7:45:57:
41:af:95:0a:03:20:b6:83:d6:27:45:26:a8:38:68:1f:8d:5f:
b9:49:eb:a8:1f:1e:da:e4:5d:c1:cf:5c:82:57:d9:bc:d1:a2:
23:de:76:15:e9:32:2a:0b:9f:92:f2:24:62:e3:88:6a:65:43:
7c:2f:ee:f2:a0:25:b9:2a:f1:78:19:17:44:04:ee:a7:5f:36:
0d:b2:ed:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:02:07 2025 by rpki-client