Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WhysZhpDnRUXmnlNJ0OrIkK372I.roa
File: WhysZhpDnRUXmnlNJ0OrIkK372I.roa (raw, json)
Hash identifier: Qer8DwlGe1m1MJklRsenEM5ouo07AMDE6BTbcn3S/hw=
Subject key identifier: 5A:1C:AC:66:1A:43:9D:15:17:9A:79:4D:27:43:AB:22:42:B7:EF:62
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBF6A4EC2460656AF57454938CF30F
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WhysZhpDnRUXmnlNJ0OrIkK372I.roa
Signing time: Wed 01 Jan 2025 17:48:45 +0000
ROA not before: Wed 01 Jan 2025 17:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215259
IP address blocks: 2a0c:9a40:8530::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f6:a4:ec:24:60:65:6a:f5:74:54:93:8c:f3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a1cac661a439d15179a794d2743ab2242b7ef62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:d6:45:e5:84:39:c6:62:0f:aa:2e:19:3c:
f2:54:85:1c:4d:55:84:4f:31:35:c5:a4:82:df:fd:
f7:f1:b6:6a:3b:d6:af:8d:8d:85:d2:df:a3:94:86:
66:09:96:90:77:93:5c:28:df:e8:7d:e5:0d:59:0e:
92:c1:cc:7c:01:c3:e5:a8:c4:0d:c2:cb:87:5a:0c:
34:16:2f:f7:8c:31:52:1a:e2:3b:aa:15:7a:37:4e:
dd:fd:09:22:ec:c8:7a:e2:33:06:f4:57:19:6e:97:
ac:5d:5a:85:cf:a1:1f:30:cb:dc:89:6f:b2:dc:df:
86:a9:8a:95:cf:db:15:49:bf:bd:6c:a7:2d:4d:25:
1e:0f:b8:69:1a:b1:b6:7b:5e:1e:3c:37:49:73:06:
97:02:d5:76:dd:b0:12:1c:40:5e:fc:a0:08:77:a7:
30:e1:1c:ef:61:f7:ec:0a:05:a8:22:00:40:27:69:
01:6c:4d:e0:c9:f7:7e:31:bb:13:13:1c:e5:e3:2c:
50:19:ae:51:8b:6b:a2:d3:1b:d3:0e:b4:e7:e4:e0:
8a:5a:d9:64:60:c2:03:03:6f:3f:03:2f:68:ab:31:
14:3b:5c:19:f8:cf:d0:fb:4b:ad:96:96:e8:a0:59:
77:34:67:29:ee:2f:8f:e9:f3:7f:8e:b3:19:6e:37:
b7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1C:AC:66:1A:43:9D:15:17:9A:79:4D:27:43:AB:22:42:B7:EF:62
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/WhysZhpDnRUXmnlNJ0OrIkK372I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8530::/48
Signature Algorithm: sha256WithRSAEncryption
b5:b5:57:1c:12:53:85:66:92:22:87:7e:6b:fd:a6:64:db:3a:
50:f7:b6:87:ae:45:14:5b:d3:21:42:77:6f:ac:67:6d:ec:ce:
f3:2e:a6:8d:eb:c5:de:d9:0d:23:bc:8d:b6:61:4b:62:4b:c8:
70:96:f0:4b:1b:30:83:a4:22:25:4f:ae:ca:74:03:1f:ab:56:
8b:fc:1c:29:0a:c9:ea:4c:5a:80:c7:59:7b:e3:f9:38:a9:6b:
ea:27:2c:9c:7e:09:12:47:0c:3a:f3:ac:c1:8b:e5:15:89:75:
d2:6b:d7:22:1f:a0:3e:a4:c7:17:66:cf:c5:15:b7:55:52:1c:
48:4b:5d:a9:26:f8:2d:46:09:8f:66:64:1e:55:cf:db:16:8d:
2b:db:de:bd:f3:77:59:ba:f4:cc:be:cf:21:d6:e1:c7:6f:02:
9c:49:59:33:fe:a7:ee:e0:2f:e8:ce:4c:26:2f:16:56:07:b1:
c8:6a:31:61:e1:f8:29:ce:1a:d3:65:bd:8c:12:b0:60:4e:15:
2d:d0:05:40:51:bc:a0:fd:30:d2:46:f1:97:f0:f7:43:1d:e9:
ea:89:cc:20:de:d1:c8:8c:7c:ef:b9:2c:30:a5:19:f3:50:d1:
20:93:22:cd:93:5b:bd:19:6e:9a:53:08:1c:27:36:4b:41:04:
42:4c:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:45:09 2025 by rpki-client