Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/W3CzCFny07BDW1hmZDwkV8l_M0Q.roa
File: W3CzCFny07BDW1hmZDwkV8l_M0Q.roa (raw, json)
Hash identifier: 56EhNz2h1JFvLcUUQnQp7d8Ij3mqVRf5mi7M6BBk3ls=
Subject key identifier: 5B:70:B3:08:59:F2:D3:B0:43:5B:58:66:64:3C:24:57:C9:7F:33:44
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBC0307CC8E5B7114D2CDDBC3C8AB7
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/W3CzCFny07BDW1hmZDwkV8l_M0Q.roa
Signing time: Wed 01 Jan 2025 17:48:31 +0000
ROA not before: Wed 01 Jan 2025 17:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a0c:9a40:8a90::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c0:30:7c:c8:e5:b7:11:4d:2c:dd:bc:3c:8a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b70b30859f2d3b0435b5866643c2457c97f3344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:6d:64:39:d5:36:a5:d6:61:4d:7e:42:0a:
3a:1e:74:3d:1c:c7:32:a0:4d:e5:ad:dd:a9:3b:7c:
98:76:67:88:62:d3:da:62:e7:d2:a8:84:d7:e3:08:
ce:64:64:27:b6:c4:41:b0:32:2a:ac:8c:2c:0a:c6:
3a:cb:4f:f6:d9:ba:fc:f7:f0:2a:a1:3d:ce:41:37:
39:90:81:18:60:ea:b8:10:96:62:db:09:9a:fa:62:
e5:d5:7b:21:f6:c4:53:48:2e:36:60:c7:6d:f3:81:
56:72:50:66:1c:bb:a5:7a:a3:f7:8f:13:0f:76:cf:
b1:b6:d9:d1:a3:ed:08:da:e8:9c:c4:b4:8c:a8:28:
d2:54:40:aa:72:8f:dc:fa:40:c9:85:df:49:70:c6:
97:18:35:be:16:de:6f:95:31:63:63:de:c3:eb:c6:
59:b7:90:8b:a5:5c:ab:04:64:a2:ae:cf:be:cd:cd:
ec:0c:96:27:f0:31:28:d8:59:4d:57:0e:30:69:ce:
c6:de:b2:73:12:57:99:a9:10:9f:a7:9d:55:68:69:
b5:7a:95:34:d3:01:0d:01:c1:99:44:1d:82:18:ae:
d2:6d:36:20:6d:c9:1e:84:0f:14:5a:ae:3f:ea:e9:
b9:50:be:46:9b:e8:1b:9b:de:e2:89:53:0b:f6:55:
a0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:70:B3:08:59:F2:D3:B0:43:5B:58:66:64:3C:24:57:C9:7F:33:44
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/W3CzCFny07BDW1hmZDwkV8l_M0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8a90::/48
Signature Algorithm: sha256WithRSAEncryption
3e:62:d4:34:07:73:9e:8f:9e:68:8b:16:f4:30:1c:18:59:d1:
8d:9d:05:f5:4a:18:be:10:49:de:5e:47:4e:6a:22:38:7f:a5:
5a:22:2a:72:97:a8:b7:fd:09:64:8b:ea:76:29:75:85:ad:ba:
d6:9e:a3:21:63:0f:ca:db:73:91:06:be:0b:91:d2:35:00:0e:
f4:1a:ef:51:15:99:b3:eb:73:fc:a2:cc:a0:ff:cf:fa:65:9f:
cb:4f:2b:93:e4:d0:52:0e:16:f2:74:8c:40:37:f5:7a:23:6e:
dc:e0:b1:d0:e7:f8:cb:fc:dd:7f:ad:43:ed:e6:91:9e:00:b2:
19:f3:ef:e3:58:6c:66:ff:6a:b4:ee:34:83:07:c7:fb:98:f6:
7c:27:6b:82:ec:f4:27:1a:60:90:9b:23:6f:17:80:0a:0c:00:
98:91:f7:c1:b1:32:3f:3d:7e:01:f5:10:41:65:35:82:55:7d:
66:96:24:2b:2c:ba:61:fd:7b:c2:f5:6e:f3:91:a3:f7:ce:d1:
ee:55:ee:46:dd:c1:ea:b9:fc:50:4c:95:16:29:7c:3b:d6:da:
e0:7a:13:e4:3b:4c:d6:6a:18:21:c5:3b:af:62:96:6b:08:44:
44:70:65:ea:cb:73:c1:c2:22:37:82:4d:3f:86:e5:e4:e8:34:
94:f4:80:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:28 2025 by rpki-client