Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MyDeY4VW1s889GbBkBtWMTp4tbU.roa
File: MyDeY4VW1s889GbBkBtWMTp4tbU.roa (raw, json)
Hash identifier: Q2V3DtxrE9QCzMeihMQpQuZB2kpR2tXjfbUTD5zQRD0=
Subject key identifier: 33:20:DE:63:85:56:D6:CF:3C:F4:66:C1:90:1B:56:31:3A:78:B5:B5
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01938F11365A443F1DCA28F4D42BE32F3B64
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MyDeY4VW1s889GbBkBtWMTp4tbU.roa
Signing time: Wed 04 Dec 2024 00:28:10 +0000
ROA not before: Wed 04 Dec 2024 00:28:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213774
IP address blocks: 2a0c:9a40:8a40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8f:11:36:5a:44:3f:1d:ca:28:f4:d4:2b:e3:2f:3b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Dec 4 00:28:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3320de638556d6cf3cf466c1901b56313a78b5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:2a:99:0e:fa:61:4f:90:81:c1:ee:2c:a5:
58:42:88:8a:49:79:93:83:ed:f0:e8:81:12:4e:2b:
76:78:26:d6:63:1d:b9:ca:a7:9a:52:e1:3d:69:cf:
9f:1a:21:8c:b1:b7:6f:9a:af:f0:3d:ac:f6:e5:82:
dd:92:71:10:7d:e3:4d:e8:77:f4:af:5c:d3:1d:f1:
5e:ef:41:65:7e:cd:f6:35:ff:31:d6:49:b5:3d:5f:
16:79:5b:42:28:67:ca:bf:3c:65:c4:42:59:cc:d8:
a3:68:8e:9e:a9:27:97:f8:d9:3b:71:01:38:b7:56:
4e:71:bc:c1:5b:16:4d:77:b1:ae:6b:d5:9b:cd:4b:
b3:a4:c3:aa:37:28:23:87:a8:f4:f8:f3:81:a5:8f:
a1:c5:59:bc:18:7b:81:d5:57:12:df:4c:9f:da:86:
2d:6a:d9:65:1f:ba:88:6b:d0:b4:8b:41:47:4b:6f:
db:d5:53:eb:b7:fe:8e:97:e7:6b:b0:9f:03:96:8d:
7d:a6:b9:25:44:98:d5:d7:b4:97:79:cc:c4:4a:8c:
22:fc:15:4d:fa:f8:90:aa:b0:6c:19:21:2a:d5:80:
3a:b3:d8:88:87:11:ad:ff:fc:d0:99:53:c0:96:8c:
c9:25:d5:78:fe:3f:ea:98:21:d4:fa:ce:af:8f:f9:
97:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:20:DE:63:85:56:D6:CF:3C:F4:66:C1:90:1B:56:31:3A:78:B5:B5
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/MyDeY4VW1s889GbBkBtWMTp4tbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8a40::/48
Signature Algorithm: sha256WithRSAEncryption
34:7b:26:53:fa:f7:d0:e5:37:a2:03:0f:43:c6:b7:49:63:c5:
6f:9b:4c:9a:12:ec:23:48:1e:fd:8e:3d:6e:1d:8c:10:1a:38:
6d:fe:b0:52:8b:98:d3:34:e2:de:be:0f:7f:f6:e2:84:a9:c1:
1a:93:15:44:c1:e1:66:42:d2:b4:4c:46:ba:0e:aa:38:c8:18:
8d:3e:ac:ee:ec:cb:a7:6c:66:51:db:0e:1a:81:95:47:bd:90:
f5:9a:96:09:6a:e8:eb:ce:07:8f:f8:28:93:aa:2a:7c:15:97:
75:0e:a0:b2:29:a5:16:f5:96:db:fe:4f:66:35:3d:43:f0:aa:
cb:b7:b7:26:2c:58:1d:02:57:b3:b2:6e:9c:55:2f:00:35:3f:
39:81:0c:56:fa:dd:98:75:78:9f:7b:0b:47:85:7b:4f:b3:32:
0e:e9:8a:5d:e1:50:fe:39:ae:a1:99:ec:e7:39:74:f9:a4:b3:
7f:5d:e6:02:1d:d5:1d:6b:1f:ad:a3:99:2a:f8:3a:dc:06:17:
24:59:ff:15:bb:94:79:1f:6a:34:dc:7e:86:96:02:21:fa:52:
1c:6e:50:4b:41:60:7c:64:ad:42:c8:24:29:54:86:4a:57:37:
c2:65:37:a4:b0:6f:e0:fa:6d:50:a2:65:53:59:b2:f0:65:72:
b4:25:27:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:19 2025 by rpki-client