Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/aIVwDg7Pv-XeeA9Z2Z4lJGxJMxU.roa
File: aIVwDg7Pv-XeeA9Z2Z4lJGxJMxU.roa (raw, json)
Hash identifier: 1sdRzxEnYHtgFrRvxip185rnR9eD740nuXVVjK9Mawg=
Subject key identifier: 68:85:70:0E:0E:CF:BF:E5:DE:78:0F:59:D9:9E:25:24:6C:49:33:15
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBD31045915EE12822AAB8ECF58290
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/aIVwDg7Pv-XeeA9Z2Z4lJGxJMxU.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199340
IP address blocks: 2a0c:9a40:8c70::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d3:10:45:91:5e:e1:28:22:aa:b8:ec:f5:82:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6885700e0ecfbfe5de780f59d99e25246c493315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f2:4a:ec:41:76:08:f7:04:83:bd:86:2a:f6:
73:a3:41:2a:d5:eb:85:62:50:d5:86:72:08:24:09:
8c:c5:a6:da:20:cc:ab:e9:fb:91:4e:5d:c8:c1:f4:
74:cd:0b:d6:57:8b:66:4d:b8:73:f9:f3:dc:c7:f1:
0d:9c:c5:93:f6:e6:ab:c1:7a:3a:a0:21:54:e5:ca:
0a:89:74:bc:5c:74:d0:ea:8b:b2:9a:98:a8:80:b2:
13:49:32:c5:2d:9e:6b:e5:56:6d:98:a7:a3:5f:5b:
aa:2e:8a:79:f1:2d:63:fb:cd:da:7e:5c:22:0f:36:
b1:12:5f:d6:c8:e9:de:36:98:f2:44:44:b6:47:c6:
e2:41:3a:75:f4:75:1c:db:a1:f3:ae:6f:ea:89:14:
ac:e6:64:2b:6c:55:c4:99:c8:8c:9d:c6:cf:88:43:
8a:88:93:6b:38:f8:75:fe:57:f9:be:48:82:59:f0:
5d:3f:77:3f:99:99:ab:72:30:c2:02:35:a7:38:cc:
40:1d:3e:eb:ce:6c:a0:a2:81:c9:c9:c2:bc:5b:2e:
9a:b0:d7:75:ac:95:df:e6:de:5a:b2:b6:25:25:4f:
b6:13:8e:85:b8:15:15:b2:8f:35:46:d8:cf:ae:a1:
1e:2b:c4:4c:40:c9:50:51:bc:9c:4d:5a:12:21:8e:
12:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:85:70:0E:0E:CF:BF:E5:DE:78:0F:59:D9:9E:25:24:6C:49:33:15
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/aIVwDg7Pv-XeeA9Z2Z4lJGxJMxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8c70::/48
Signature Algorithm: sha256WithRSAEncryption
16:c9:ad:24:13:1a:03:0f:74:57:90:37:54:1e:f1:4b:99:74:
02:13:41:db:34:73:89:a2:7b:73:00:03:0d:ab:29:29:44:99:
f5:a5:6c:5a:f8:92:6c:ae:4e:17:c9:8b:82:98:8c:9b:b1:08:
c0:b3:48:2b:bc:db:8a:2e:0f:c3:a9:ba:7e:d1:08:b2:70:a2:
44:a7:59:fd:a2:bf:f0:b6:18:f3:ce:1d:9b:12:31:aa:58:25:
85:26:ac:69:93:29:4e:0c:f7:42:d6:26:96:57:36:8a:9e:a4:
4f:1c:b0:ca:64:5c:9a:6a:d8:f2:ce:04:1e:ee:b9:af:4e:79:
53:2d:e3:c8:e7:7a:78:e6:19:6a:24:4f:cf:91:3b:04:f3:63:
cf:69:73:67:f2:fa:1f:6e:7f:61:e6:98:5d:21:47:8c:20:a8:
d0:5e:86:47:5b:9d:5c:e3:b9:57:20:a7:4a:0f:8e:65:a5:a8:
14:6f:d4:57:60:57:51:da:c8:6a:f7:37:bf:e1:f4:e1:6c:ac:
89:a9:b3:53:16:48:b4:f6:68:71:23:2e:a5:24:1d:14:e2:2c:
cd:39:02:1b:00:ca:63:6f:97:e2:21:67:5c:f8:d3:a7:6f:17:
08:b1:e4:8a:6e:b9:ed:bb:e1:f7:6f:da:32:91:27:af:24:0f:
78:45:a6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:45:04 2025 by rpki-client