Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/chyHPGZ7LB45ziuuK6bToJIt2pU.roa
File: chyHPGZ7LB45ziuuK6bToJIt2pU.roa (raw, json)
Hash identifier: krS9XFYQHMBA566Oje6mjsr+8D42ZU8lMHO5bJHx8HY=
Subject key identifier: 72:1C:87:3C:66:7B:2C:1E:39:CE:2B:AE:2B:A6:D3:A0:92:2D:DA:95
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01957370629B26ED6CD06C4DBA73868CB7F0
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/chyHPGZ7LB45ziuuK6bToJIt2pU.roa
Signing time: Sat 08 Mar 2025 01:48:19 +0000
ROA not before: Sat 08 Mar 2025 01:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211765
IP address blocks: 2a0c:9a40:85c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:73:70:62:9b:26:ed:6c:d0:6c:4d:ba:73:86:8c:b7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Mar 8 01:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=721c873c667b2c1e39ce2bae2ba6d3a0922dda95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:4b:4e:53:81:a2:2f:1b:de:5d:b2:b5:ac:
98:c7:2e:47:3d:dc:ff:90:fe:75:fd:92:e7:a6:57:
c0:83:32:5e:4a:3b:42:74:d9:66:a1:74:74:f5:09:
ac:54:96:5c:22:29:14:1c:c7:5a:36:77:08:d6:c7:
f3:52:ee:47:20:77:13:77:85:04:db:d6:b5:d2:ee:
0b:8e:a4:56:85:74:ee:19:f9:df:26:c9:7a:a6:74:
85:66:7c:4e:d4:a8:b7:d0:d9:46:64:81:a3:42:fe:
7a:5a:6d:84:fe:b6:ab:76:37:bf:a0:b2:0b:fd:66:
f4:6c:58:7c:0b:55:25:ed:81:a5:8f:46:47:c9:8a:
f9:de:b1:e3:cf:75:5b:44:cd:47:26:20:cb:b6:83:
a9:02:d7:f6:d5:6d:c1:31:30:45:01:51:46:20:6c:
a1:75:ff:94:85:7f:bf:3a:c7:d1:49:06:20:94:de:
a6:2c:b8:e1:b2:95:61:1b:f7:75:8b:31:38:c3:9a:
31:06:28:fc:0f:39:ff:33:65:9c:00:a0:e4:95:e3:
7d:e0:4e:24:e1:a7:73:87:f3:7f:c5:15:ea:80:7c:
72:32:0d:8e:ca:23:4d:9c:aa:cd:6a:fe:21:ed:99:
ae:9d:a9:e8:09:4a:5b:09:32:30:a0:c7:61:99:91:
db:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1C:87:3C:66:7B:2C:1E:39:CE:2B:AE:2B:A6:D3:A0:92:2D:DA:95
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/chyHPGZ7LB45ziuuK6bToJIt2pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:85c0::/48
Signature Algorithm: sha256WithRSAEncryption
af:61:25:4f:ca:b6:87:9f:41:af:8c:8c:59:13:c5:1f:d6:8c:
3a:24:39:eb:40:a6:72:40:97:dd:46:86:85:5a:ab:53:e1:7c:
c7:ab:be:09:bf:d5:02:b1:83:94:21:6c:8a:48:f8:84:be:5d:
82:e1:cc:06:3a:fa:ae:5d:ce:0e:b2:b5:70:30:32:fa:4c:2a:
45:b5:73:ea:69:3a:39:af:d8:55:1a:2a:5d:d1:8a:a5:2a:9e:
f1:22:f5:f9:29:29:3b:9f:47:3b:26:9c:80:1d:a8:5d:e0:1e:
94:ff:8b:9b:24:5c:85:83:47:87:74:52:0b:2e:47:b7:d9:ca:
aa:c4:2c:14:c7:c1:8d:6f:8c:c3:52:b3:56:2c:86:fd:65:c7:
b6:84:4b:b9:02:4a:32:60:1b:5d:8c:3b:be:39:0d:64:a3:0c:
17:b4:e6:ae:41:06:59:5a:e2:92:3d:42:4d:80:c4:3f:67:76:
94:4b:bf:76:5c:25:81:4e:1e:67:99:39:de:0b:16:4b:05:60:
a1:3e:ec:b8:bc:55:60:4d:17:bb:99:dd:8c:d4:7c:d5:07:0a:
5b:8f:a9:a1:cd:02:49:d3:04:d1:b7:13:c0:c4:3c:fc:94:98:
de:02:2a:72:8e:ad:02:cc:50:a0:da:d8:93:ea:e7:45:b3:ec:
a4:ee:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:25 2025 by rpki-client