Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/dLV04ypkx1zwG1Fwo4ehSGnykxY.roa
File: dLV04ypkx1zwG1Fwo4ehSGnykxY.roa (raw, json)
Hash identifier: 5GC7blGBS5HhNhT2U5s/XEmIH8J8qkFpgXmUDu+Z2bQ=
Subject key identifier: 74:B5:74:E3:2A:64:C7:5C:F0:1B:51:70:A3:87:A1:48:69:F2:93:16
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBF82371CEF2C265F62219CB6CDB59
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/dLV04ypkx1zwG1Fwo4ehSGnykxY.roa
Signing time: Wed 01 Jan 2025 17:48:45 +0000
ROA not before: Wed 01 Jan 2025 17:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215505
IP address blocks: 2a0c:9a40:80b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f8:23:71:ce:f2:c2:65:f6:22:19:cb:6c:db:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74b574e32a64c75cf01b5170a387a14869f29316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c1:df:33:fc:2f:74:f4:0a:40:3d:64:8a:5b:
08:4c:9c:91:70:83:e4:a7:9a:92:45:40:24:88:ce:
2a:80:55:9f:d7:bd:c5:90:ae:a0:40:27:19:6e:ef:
c0:be:3a:ce:17:8c:40:66:db:f3:a2:54:64:b1:4f:
6d:0a:2a:5d:85:02:8f:5f:bd:1c:6b:54:39:df:6d:
e5:9c:fb:ff:39:56:76:76:bf:c0:5d:99:18:dd:29:
0c:5f:d4:4f:f7:c9:59:75:73:2f:2b:bf:66:a4:77:
ab:33:42:6a:63:23:08:49:0f:e6:16:ba:42:79:a0:
f9:08:da:19:f3:51:ff:9b:e0:a7:5e:01:15:6f:39:
52:d6:00:fe:10:b1:d0:94:97:84:03:c3:2e:fe:41:
2a:1c:bb:90:57:57:89:83:1c:2d:8b:25:ef:37:da:
1d:f9:b5:30:95:32:2c:72:0e:81:23:b1:41:d8:1a:
6f:f2:f6:ae:e6:7c:8d:bc:14:e4:0e:99:89:b2:21:
9b:c4:f0:51:cb:3c:23:b0:8d:c6:53:69:dd:da:8b:
a1:4d:e8:ec:e8:bd:a8:ef:4f:ab:06:2f:11:67:38:
2e:b6:33:d4:3a:fc:08:ed:1a:4c:da:58:5a:e2:93:
0c:6d:1c:5d:9b:13:72:64:f2:20:c6:af:51:46:c8:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B5:74:E3:2A:64:C7:5C:F0:1B:51:70:A3:87:A1:48:69:F2:93:16
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/dLV04ypkx1zwG1Fwo4ehSGnykxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:80b0::/44
Signature Algorithm: sha256WithRSAEncryption
8f:25:75:45:f8:8f:1d:d1:b9:a0:3f:e1:03:ae:e6:1d:4f:0a:
0d:13:ce:29:29:d3:24:00:b9:62:ca:9e:6f:e0:d4:32:a3:96:
1f:22:d5:44:74:86:bd:8e:97:b4:bf:3e:25:ec:4d:01:ca:c0:
2a:7c:4d:d6:00:fa:1a:14:92:0b:68:b9:36:5e:ab:df:2c:0b:
77:45:c1:fc:53:d0:eb:2e:c4:69:81:03:0b:7e:18:ff:65:0e:
ce:49:42:3a:67:3d:80:39:06:a1:a0:b6:14:91:5f:cd:4a:d6:
a4:66:88:cb:2f:0e:35:32:c5:f5:4a:59:69:db:25:aa:15:5c:
98:a7:d5:fe:0a:2a:95:6b:16:4c:5c:9c:34:50:be:25:20:ef:
6c:52:0b:ed:d9:b2:ad:6c:fb:39:0c:14:03:d7:c8:d3:94:9e:
3c:63:f6:4e:78:24:2d:c4:d8:e7:7c:72:6e:0c:36:53:6c:8d:
b8:d6:bc:ea:5a:e1:6a:bd:c3:92:8c:e8:f3:80:21:66:29:e2:
1b:8d:82:1b:8c:f2:d7:78:43:e8:2c:a7:5f:32:c9:0e:fc:cd:
c5:65:9c:a3:05:de:6f:7a:c0:b8:65:51:79:d4:23:ed:9a:b8:
04:de:34:2b:a2:9f:fa:58:ff:2e:34:81:68:03:f7:01:0c:02:
93:93:df:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:46 2025 by rpki-client