Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/V4ex_BRzqS2gRpqA2zKDwtkd3vU.roa
File: V4ex_BRzqS2gRpqA2zKDwtkd3vU.roa (raw, json)
Hash identifier: T32HBNBEvKh7C1kPnZUkPQQp7/tBhKt900MooE+qwiM=
Subject key identifier: 57:87:B1:FC:14:73:A9:2D:A0:46:9A:80:DB:32:83:C2:D9:1D:DE:F5
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBE2E44BEC706C37AAB0429508BEF4
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/V4ex_BRzqS2gRpqA2zKDwtkd3vU.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208752
IP address blocks: 2a0c:9a40:81c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e2:e4:4b:ec:70:6c:37:aa:b0:42:95:08:be:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5787b1fc1473a92da0469a80db3283c2d91ddef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:38:26:8b:ce:94:28:91:a1:c2:57:1a:c2:
90:5a:42:25:1f:95:e9:e8:67:4e:5d:c6:66:e2:31:
5f:bd:bc:29:52:87:a2:a2:c2:8a:25:8d:b3:4d:d6:
0d:c5:27:ff:f8:24:21:b6:25:7e:80:2c:24:ce:b3:
f1:9e:ed:bf:9b:3f:9b:20:5a:fa:ea:47:ff:ff:69:
e7:78:48:7b:a9:6a:5e:ad:c6:3a:3b:13:9b:3f:2e:
b9:25:8f:ae:1b:f9:37:77:cb:4d:69:34:f4:89:f0:
eb:1f:ee:c1:78:95:5a:6e:d0:68:3b:0f:e4:85:ca:
cb:f8:dc:2d:a0:54:7a:4b:37:fd:53:4d:cd:87:02:
78:07:5a:5e:81:0a:90:a6:97:7c:40:07:51:95:b7:
cc:dd:ab:4a:5f:86:4f:43:ff:30:fa:a3:20:dc:e6:
6d:b8:57:9a:c8:89:8c:5f:e5:d3:e4:6a:0d:f2:c4:
5f:e6:83:e6:28:ef:f1:b2:5d:4d:07:ab:a7:51:7c:
98:d4:22:49:34:1f:b3:47:ed:83:a3:19:87:28:14:
2a:8d:9e:a6:a0:00:cb:b8:b5:f2:57:a2:94:f9:66:
9a:0c:18:48:5c:eb:3e:35:1e:68:7e:2b:5f:7b:97:
65:66:58:43:c2:08:c0:d2:e4:c9:7a:15:ec:24:5e:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:87:B1:FC:14:73:A9:2D:A0:46:9A:80:DB:32:83:C2:D9:1D:DE:F5
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/V4ex_BRzqS2gRpqA2zKDwtkd3vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:81c0::/48
Signature Algorithm: sha256WithRSAEncryption
1f:f5:24:d8:f4:d2:7c:68:ff:4b:e9:a2:97:84:bd:9c:cb:10:
2e:67:81:1c:17:bb:5c:94:ad:16:e0:db:ee:00:cf:eb:4d:fd:
7c:04:e6:ec:48:a9:49:2c:e8:6b:79:52:eb:83:cf:7c:e8:94:
0f:eb:fd:aa:b0:75:89:2a:2d:39:a5:61:96:de:53:65:ab:e6:
38:d5:f8:24:db:f1:1c:c1:22:1b:35:15:c9:b2:2c:5b:1b:d7:
4e:c4:13:9c:86:b5:f6:8b:b8:91:c3:db:18:ea:9d:55:00:45:
87:d8:f3:d2:29:a1:40:bf:5e:55:c0:3f:30:0d:f4:54:27:3b:
07:b0:9b:6d:c4:8d:5b:a2:88:70:49:1f:b7:36:87:a8:bb:84:
c7:4b:c8:a8:b6:e9:f2:21:d0:fb:7e:14:41:d3:bf:97:8e:bf:
5f:8a:64:ba:dc:05:04:e9:c8:71:b4:66:92:e4:f2:54:90:81:
56:b4:4d:00:cf:4e:0d:2c:ec:4f:8c:67:6d:27:e3:54:dd:6b:
1b:6e:2a:3a:d4:fb:23:a9:de:16:f7:cb:79:3c:33:dc:28:75:
92:17:15:b4:2e:84:68:f6:0d:fc:48:ed:55:e3:da:b4:67:c9:
11:e7:65:96:51:65:2a:8d:02:c4:e4:e0:a7:8f:a7:ff:fc:e0:
c6:93:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:28 2025 by rpki-client