Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Swjiv8MkWyfkVzRw_Nij6MSHh0o.roa
File: Swjiv8MkWyfkVzRw_Nij6MSHh0o.roa (raw, json)
Hash identifier: u8i0QapbZjenIujz/hTZKgiU43odvOOmAKFtJz5o8pI=
Subject key identifier: 4B:08:E2:BF:C3:24:5B:27:E4:57:34:70:FC:D8:A3:E8:C4:87:87:4A
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBCDAAA5F0D9C354B936CB4500CC6F
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Swjiv8MkWyfkVzRw_Nij6MSHh0o.roa
Signing time: Wed 01 Jan 2025 17:48:34 +0000
ROA not before: Wed 01 Jan 2025 17:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142561
IP address blocks: 2a0c:9a40:8c82::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:cd:aa:a5:f0:d9:c3:54:b9:36:cb:45:00:cc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b08e2bfc3245b27e4573470fcd8a3e8c487874a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:12:34:93:1d:ae:56:5e:9c:59:ae:46:cd:e4:
75:8e:d3:32:e5:40:9c:3b:dd:29:d9:94:11:e8:0a:
40:b5:68:73:dd:74:2d:39:6b:97:ea:5b:ea:20:09:
54:4f:1b:f4:c5:4f:fc:b1:4c:2c:fb:e7:2a:61:ee:
18:16:f4:06:a9:5a:91:3e:ec:ff:90:eb:cb:a9:5a:
79:20:b0:06:53:04:1c:f6:38:68:25:b1:eb:75:5d:
eb:b8:75:cf:50:d9:b8:59:d3:1b:a1:f6:30:05:b1:
e1:5d:c6:e8:e0:e4:f1:97:e3:d1:58:f4:1e:6e:53:
ac:81:69:54:60:46:17:b5:ea:c9:f6:3b:a3:f6:c3:
22:ea:a3:9f:dc:3f:58:a0:01:9e:ac:8c:8a:9b:d7:
c6:2d:b4:0d:53:e4:c5:96:b9:d1:67:7a:f0:6c:50:
54:84:b5:54:57:f9:dd:92:8d:27:d8:2a:28:9b:7e:
54:e2:b0:25:28:10:bc:68:7f:de:97:e7:ae:f2:80:
76:d3:14:e8:47:c0:18:14:86:07:96:19:7e:9b:0a:
cb:55:9f:59:ce:d9:5e:37:77:1f:9d:c7:24:3b:d6:
da:54:ea:dc:07:6e:c8:52:4a:52:df:3c:90:46:66:
2e:31:ad:c6:b5:02:12:c9:c9:20:9d:97:be:cb:49:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:08:E2:BF:C3:24:5B:27:E4:57:34:70:FC:D8:A3:E8:C4:87:87:4A
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Swjiv8MkWyfkVzRw_Nij6MSHh0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8c82::/48
Signature Algorithm: sha256WithRSAEncryption
3a:23:24:ed:24:c5:5f:e2:5c:7b:fc:22:93:92:db:10:8d:37:
4e:1e:60:06:71:90:a0:c1:87:a6:f8:ff:25:57:63:db:f5:39:
92:03:fe:8c:b4:e8:ca:0c:eb:bb:18:37:30:f6:47:c5:58:70:
40:8a:66:d1:74:b5:e6:6b:21:c1:50:f6:1c:f1:ba:0c:e8:2d:
bc:90:95:0a:c3:0b:2b:c6:dd:e6:89:61:d5:e7:5b:64:bc:85:
96:59:e7:f2:82:a6:91:90:4e:fc:7b:3c:c1:8e:30:b7:35:64:
cc:3d:7e:9a:92:4b:c3:97:9c:57:ec:44:c5:f9:74:77:73:95:
90:c8:4e:93:45:a6:f7:43:25:6a:d8:eb:c8:e6:2b:72:a9:c9:
35:d0:30:86:47:e2:80:b6:0c:d2:f2:16:b5:60:3f:cb:71:3f:
72:b7:a1:87:63:92:e0:d9:7f:16:2c:97:96:37:9e:08:4b:bc:
57:f7:b7:bc:bd:15:07:52:9d:a8:bb:a3:aa:9d:21:ca:a2:06:
74:8a:12:9b:af:6e:ab:90:9b:19:6b:7f:e1:51:d2:b4:7b:3e:
aa:1f:88:57:7e:b4:62:82:e6:8f:c2:b0:1c:73:51:29:2c:b2:
88:1e:f6:1c:62:7c:af:46:f4:54:d0:3e:14:82:34:77:ed:50:
68:2b:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:10:09 2025 by rpki-client