Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TEtNHNmN61d5T7pCYhUmJiT1Snw.roa
File: TEtNHNmN61d5T7pCYhUmJiT1Snw.roa (raw, json)
Hash identifier: 2fMKnIAXKmzvRfjKY2PMW7EgOoKLmrlto9NMgTHRuaA=
Subject key identifier: 4C:4B:4D:1C:D9:8D:EB:57:79:4F:BA:42:62:15:26:26:24:F5:4A:7C
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBEF9967AE6E12C748EE0ADEFAF13C
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TEtNHNmN61d5T7pCYhUmJiT1Snw.roa
Signing time: Wed 01 Jan 2025 17:48:43 +0000
ROA not before: Wed 01 Jan 2025 17:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213990
IP address blocks: 2a0c:9a40:8630::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ef:99:67:ae:6e:12:c7:48:ee:0a:de:fa:f1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c4b4d1cd98deb57794fba426215262624f54a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:06:54:f5:3b:47:16:9b:93:b3:54:9c:cd:
8f:d7:16:fe:3c:0c:b0:a8:40:6d:51:92:55:cd:8f:
b2:5f:63:d8:13:79:f4:ce:2e:f7:0f:0f:42:17:f4:
0b:94:25:14:b6:e4:1b:18:0e:92:66:32:21:85:40:
fd:b2:75:c9:64:66:a3:f3:e4:18:85:d3:ce:c5:3d:
f4:3a:59:49:76:b3:4c:b5:06:e0:98:86:17:9c:46:
f2:51:cb:17:e6:1b:11:26:1e:75:43:dc:dd:96:9a:
c9:16:6c:0d:ea:b6:9a:46:05:7c:47:7a:71:9a:b7:
c0:1e:f0:20:41:b5:0e:17:12:3a:4e:3f:8b:46:5d:
18:65:c4:f6:1e:59:c1:31:23:48:d5:b4:81:5c:5b:
ac:d6:25:68:d4:01:91:2d:1c:97:12:56:37:f5:cd:
c5:6e:b3:0c:f4:2c:a2:ae:a9:39:07:ba:55:ee:30:
e0:eb:f4:24:e4:25:c5:f1:be:d0:b0:1c:6f:5a:f8:
fd:36:31:51:ee:01:48:52:b3:40:d5:23:4d:fe:6b:
92:53:02:fb:43:f2:ee:00:01:52:6c:ba:79:56:98:
36:d8:47:ec:8c:47:00:49:43:b9:a1:85:51:f1:57:
a0:15:12:c8:1f:44:62:15:f5:ea:5b:87:be:e9:0f:
d6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4B:4D:1C:D9:8D:EB:57:79:4F:BA:42:62:15:26:26:24:F5:4A:7C
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/TEtNHNmN61d5T7pCYhUmJiT1Snw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8630::/48
Signature Algorithm: sha256WithRSAEncryption
a3:3a:28:be:14:a7:88:eb:0f:3f:2b:1e:9d:88:0f:25:79:f6:
33:d6:d6:bf:25:ef:2c:4e:f7:d4:af:10:73:b5:20:92:6a:0d:
96:16:80:cf:95:3e:aa:87:62:59:53:28:59:fa:77:c5:a9:eb:
83:4b:de:7f:93:f5:22:37:31:dd:87:ce:c1:13:df:7f:dd:47:
bd:7b:c5:43:75:8f:ad:1b:21:ac:9e:4e:29:bb:92:a3:13:af:
f6:a6:d1:72:f0:9c:95:0d:01:bc:4f:13:43:8b:e0:ad:0a:6a:
3e:46:f2:2f:02:47:4b:a6:3d:c2:34:aa:eb:28:f9:28:79:31:
ba:8a:ba:56:6e:a8:ff:59:1b:c0:4f:f0:b4:bb:3c:b3:37:98:
b5:1e:1f:67:7e:4e:96:5c:b8:9f:ce:e0:c5:6c:cb:40:56:c4:
09:1f:09:61:11:11:9d:e1:6f:12:fe:60:bc:1b:41:d2:41:fe:
67:fe:af:7d:98:60:53:0e:47:e9:e1:1f:ae:49:54:c1:c2:a7:
ea:0a:97:b6:a5:c1:4e:1d:e9:7d:81:6c:3d:67:95:34:08:4b:
62:f4:b8:a6:0a:30:fe:a8:a6:26:27:5b:a6:0d:38:5b:2a:50:
79:4e:4e:8c:a2:11:97:51:19:5a:59:e6:90:50:ee:fe:fb:aa:
ed:bf:f5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:26:16 2025 by rpki-client