Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bvRqMEI3uPyB93_Lve_15R_ira4.roa
File: bvRqMEI3uPyB93_Lve_15R_ira4.roa (raw, json)
Hash identifier: WfrnHK0T7Y67448jJsoMK4OCzVfIqar/elK+hUJvxKk=
Subject key identifier: 6E:F4:6A:30:42:37:B8:FC:81:F7:7F:CB:BD:EF:F5:E5:1F:E2:AD:AE
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBC8B7A20B3E76AE46BDD17AB9F1A3
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bvRqMEI3uPyB93_Lve_15R_ira4.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60404
IP address blocks: 2a0c:9a40:808e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c8:b7:a2:0b:3e:76:ae:46:bd:d1:7a:b9:f1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ef46a304237b8fc81f77fcbbdeff5e51fe2adae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:a0:83:08:e1:28:c2:d6:3b:de:ad:83:7a:
3b:a1:e8:7e:9b:c2:82:1d:53:8c:03:ab:99:8c:17:
b7:99:49:73:4f:23:05:17:1a:2b:84:e6:ad:2d:89:
09:0a:2f:76:fc:52:70:8e:66:ce:8d:6c:c0:13:33:
93:c4:33:2b:f0:d2:89:1c:d1:cf:83:57:dc:cc:ec:
b4:59:02:2c:b5:49:e6:f8:38:59:ae:2e:14:e4:b5:
93:3a:a8:1e:4e:6d:df:69:8c:c6:05:e7:78:e8:6f:
44:ec:3b:2d:0d:c1:b9:76:6d:5c:28:31:fd:eb:b2:
b5:73:12:fe:e4:c3:07:21:17:8a:76:fa:41:f0:1b:
68:8d:e1:c7:60:27:e5:a3:12:8e:d5:d1:5e:8e:5c:
19:b0:c0:83:af:c8:ca:46:0c:45:c1:d1:5f:5d:62:
39:92:e9:06:83:ce:39:f4:03:37:4b:d2:12:ce:1a:
c4:3d:2e:88:2f:7c:bf:61:ca:57:a8:c5:a3:95:eb:
92:0f:b4:e0:3c:b3:f8:cd:78:91:6e:53:00:5a:4e:
f9:b3:a4:65:fc:9f:85:8d:65:8d:3b:20:2f:13:8e:
ff:9a:af:25:2c:ed:7b:75:f2:5e:a9:ca:ed:6d:ea:
ac:5d:e7:71:c1:a2:e0:fd:3b:2a:fd:35:f8:c1:0a:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F4:6A:30:42:37:B8:FC:81:F7:7F:CB:BD:EF:F5:E5:1F:E2:AD:AE
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bvRqMEI3uPyB93_Lve_15R_ira4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:808e::/48
Signature Algorithm: sha256WithRSAEncryption
c8:03:7c:4c:6a:8a:ce:80:89:cf:56:2d:37:29:8f:c8:55:20:
51:9d:f9:4b:a1:0f:66:40:7b:9c:1f:04:90:4a:0a:05:f6:0f:
9d:99:5c:69:06:b2:b1:b7:68:d1:45:ef:a3:f3:bd:e6:80:d0:
47:60:ca:d6:1b:f1:8a:a2:44:f1:ae:70:92:66:a1:d5:34:4d:
3a:9a:49:ab:74:62:76:53:6c:aa:56:4b:26:6a:2a:50:5a:36:
f0:8c:c8:10:27:a8:5e:f2:14:ff:73:9b:ab:3f:b7:03:20:19:
f7:79:1e:a3:e3:32:6a:3e:d2:87:e9:cf:90:23:d5:b3:01:9b:
9c:2a:c0:23:80:6b:2d:c7:2f:00:c0:87:69:d9:16:c2:54:11:
7f:ba:5e:3c:62:e4:d4:f3:53:31:8c:2a:c0:76:0e:9e:12:1a:
63:89:4d:a9:57:10:74:85:9a:d4:04:fd:01:2d:6c:9c:a5:46:
35:00:86:31:2e:46:68:56:6a:fa:1d:59:24:5a:d0:11:31:f9:
8f:e7:a8:79:d6:69:bc:58:d3:d7:22:15:45:4d:03:64:4a:72:
fc:32:84:2b:37:20:ad:48:f4:6b:a0:b5:a9:a1:39:6b:9e:30:
3d:df:8e:9d:9f:19:7b:68:48:c2:0c:cd:6c:72:f1:70:85:d4:
2f:e5:43:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:12 2025 by rpki-client