Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bjRsqZV4zzqiWfrQWIFppbLS668.roa
File: bjRsqZV4zzqiWfrQWIFppbLS668.roa (raw, json)
Hash identifier: CvOg4W+tLY73krTx5WdGFLyTw4J/XAvHC7gBXBOkSUA=
Subject key identifier: 6E:34:6C:A9:95:78:CF:3A:A2:59:FA:D0:58:81:69:A5:B2:D2:EB:AF
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBD7F6DD8DD8644DFE29FD25AAA7BC
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bjRsqZV4zzqiWfrQWIFppbLS668.roa
Signing time: Wed 01 Jan 2025 17:48:37 +0000
ROA not before: Wed 01 Jan 2025 17:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200857
IP address blocks: 2a0c:9a40:8103::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d7:f6:dd:8d:d8:64:4d:fe:29:fd:25:aa:a7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e346ca99578cf3aa259fad0588169a5b2d2ebaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:0d:7c:37:22:a0:da:fb:dd:e3:38:dc:fa:
1a:13:7d:0a:cc:4b:a0:17:2e:33:2f:ff:68:85:12:
8d:9d:d0:38:c3:d3:b0:d8:24:f9:f9:d5:d5:9c:8f:
e4:f3:4a:d5:b3:96:8f:13:dd:4a:4d:9e:00:71:40:
e6:f4:19:94:15:21:a4:6d:88:bc:ba:b4:c0:7c:f0:
5a:cc:ff:79:98:e0:62:f1:06:f8:99:86:31:b2:d4:
e7:98:b9:1e:89:84:4a:eb:7d:ba:e0:91:94:04:7b:
a6:05:2d:7e:9a:9e:6c:ed:0f:c0:67:e4:4e:f9:10:
57:16:98:79:0c:0d:c7:5c:2c:ca:de:24:21:c5:ac:
e6:30:db:16:4f:0c:c1:db:82:ae:62:f9:a1:52:31:
24:81:8a:cb:ef:b6:3b:61:ed:9e:b9:47:e3:4d:78:
fa:44:fd:59:87:c9:29:6d:ad:cf:5c:91:01:c3:22:
a1:93:96:3a:8d:26:21:1d:46:e1:d6:23:c1:42:ec:
1a:00:36:4e:07:22:14:7c:b9:c6:9c:18:61:63:2a:
4a:78:e4:5c:45:14:eb:0d:9f:68:fc:86:3c:af:ab:
96:47:07:9c:b1:98:1a:af:16:13:54:0e:c5:75:ea:
3c:14:f4:20:93:de:b4:e4:a2:bd:0e:46:3a:78:5e:
14:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:34:6C:A9:95:78:CF:3A:A2:59:FA:D0:58:81:69:A5:B2:D2:EB:AF
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bjRsqZV4zzqiWfrQWIFppbLS668.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8103::/48
Signature Algorithm: sha256WithRSAEncryption
5d:11:70:59:1d:f6:d4:a3:ec:30:8d:3f:cc:e2:fb:8f:ae:f4:
de:d2:e1:d4:f8:1b:e8:6f:7d:b1:fe:05:0d:d8:d2:6e:ee:bb:
25:2b:0e:0f:90:37:3b:64:cb:d5:a4:b7:ad:cf:10:2e:ff:7d:
c8:2f:78:0d:70:c0:df:30:14:e8:ef:7f:6d:10:ad:e2:da:99:
d3:be:ea:9a:0e:f6:e0:2e:da:00:2b:ac:9f:e5:81:81:77:e2:
9b:39:09:08:1b:74:f5:e2:5d:fe:92:cd:ab:16:e2:b9:b2:46:
50:3a:29:99:2e:7e:04:79:25:fa:ca:5a:b5:e3:2a:14:28:5b:
37:e9:b9:58:f2:96:c0:1a:b3:fd:a9:87:4f:1f:4e:36:02:85:
45:8a:d8:ff:6f:a0:ae:e9:7b:c3:6d:51:0e:a2:b5:a1:6e:0f:
74:cd:a9:6a:7d:dd:61:8f:15:03:60:ec:fd:77:32:fc:85:4c:
e5:de:c9:61:3a:b9:c1:52:63:f8:85:5c:86:23:a5:c0:e6:fa:
2a:83:09:73:ad:e0:be:54:ef:d7:b8:48:83:8d:36:0f:d7:8e:
14:d4:f1:7a:4f:92:ff:09:b0:bf:b7:68:cd:d4:df:47:77:6f:
87:bc:39:29:c7:91:3a:bf:3a:3b:fd:85:5d:ab:07:3d:7a:d0:
a9:a5:59:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:21 2025 by rpki-client