Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/coqhXyifF0Y5cFO4LNwfyISWZ9I.roa
File: coqhXyifF0Y5cFO4LNwfyISWZ9I.roa (raw, json)
Hash identifier: DhCSjd20WkV5UQUHhJQdxhLTIJ6a8VR58UoDGmpOTjI=
Subject key identifier: 72:8A:A1:5F:28:9F:17:46:39:70:53:B8:2C:DC:1F:C8:84:96:67:D2
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018928034687BB70A68003943257D65EBF57
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/coqhXyifF0Y5cFO4LNwfyISWZ9I.roa
Signing time: Wed 05 Jul 2023 21:44:10 +0000
ROA not before: Wed 05 Jul 2023 21:44:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197900
IP address blocks: 2a0c:9a40:80d0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:28:03:46:87:bb:70:a6:80:03:94:32:57:d6:5e:bf:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jul 5 21:44:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=728aa15f289f1746397053b82cdc1fc8849667d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:52:ae:f1:9c:d1:c0:6c:8c:e3:32:c9:7d:b1:
fe:f6:30:76:d8:59:af:a7:65:92:fc:17:1e:49:a8:
64:ea:97:47:a1:de:ad:a5:8a:06:db:73:99:f0:bc:
7c:a7:65:b9:0b:67:7b:02:0e:30:1e:c2:5d:56:ce:
2c:8d:a8:b3:04:88:2c:b0:7b:66:cb:7f:7e:0e:c4:
e6:1f:b1:24:fd:bc:00:fc:2d:57:12:74:be:4f:8c:
76:fb:e4:a0:5f:03:9a:9d:67:fe:a6:d3:72:65:43:
00:04:99:84:78:0a:26:ff:71:23:bc:48:6c:34:6d:
41:cf:59:f7:75:e8:cd:f2:bb:e3:26:51:5b:6e:1f:
4e:54:49:da:43:ae:2a:fb:04:c3:c2:e0:7d:af:b5:
0e:32:98:72:92:d8:f6:37:14:a1:9b:09:03:49:c4:
d7:1d:42:28:ad:18:02:53:ff:ec:70:d0:6e:da:10:
16:3b:c2:31:31:7c:3a:c7:12:f1:53:2e:e8:d6:c0:
c3:ff:ca:e4:ad:33:69:f4:e4:06:56:71:b4:83:00:
39:2f:ed:61:66:d6:9c:bf:b3:90:a9:8f:b4:01:83:
b1:44:a3:65:fc:82:4a:1b:9f:7f:d8:06:65:70:d8:
ce:d1:23:3f:2d:49:f4:aa:fb:0f:7d:3c:e0:89:ac:
e5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8A:A1:5F:28:9F:17:46:39:70:53:B8:2C:DC:1F:C8:84:96:67:D2
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/coqhXyifF0Y5cFO4LNwfyISWZ9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:80d0::/48
Signature Algorithm: sha256WithRSAEncryption
ad:b8:ed:67:f7:14:e5:f7:b4:df:96:1e:43:a8:4d:5e:12:0b:
9a:fd:b2:d7:ff:64:92:80:c0:14:9d:69:5b:37:c6:92:7f:38:
76:18:75:0e:c4:4d:e5:c0:4b:87:88:c3:33:d8:d5:72:c6:5f:
ed:c9:88:c9:6e:b8:36:3a:80:f8:c4:dc:ee:6f:c8:92:81:95:
36:06:2b:c6:6c:96:ba:7c:bd:50:1c:86:19:73:63:ce:7b:a2:
db:54:a7:13:5d:fb:dc:53:a6:f4:8d:50:dc:97:e5:c3:06:cb:
5d:e7:c3:1d:77:ad:27:10:b9:d7:32:ed:0b:99:c2:9a:3f:19:
c4:d9:0b:36:50:0f:6d:6e:9d:fe:d2:46:8b:40:91:1a:ea:dc:
16:e9:fe:05:b7:28:a5:b7:70:54:e6:ef:6d:71:f1:41:bc:5e:
20:e0:6a:98:2c:7a:cf:41:5a:d6:5b:fa:97:3c:11:b0:66:d5:
ad:d1:d1:aa:31:19:f9:b1:ae:7c:01:3e:64:4b:0a:af:ff:a9:
62:32:52:38:3e:c2:ce:50:05:30:3b:c2:ae:80:62:2d:32:84:
87:49:7b:37:2c:c7:73:ac:56:c3:2d:81:85:48:48:b0:76:aa:
06:e3:d8:3c:63:b8:96:f6:e0:cf:56:58:56:de:24:3f:76:52:
0f:2a:44:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:06 2025 by rpki-client