Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/fdBCAxBsH9o8Y0z0pCppyuRlFOQ.roa
File: fdBCAxBsH9o8Y0z0pCppyuRlFOQ.roa (raw, json)
Hash identifier: XDQ7AZisSpBs8ZOAV0TG6g/WyBrrdh9V6F3dj8DeJIg=
Subject key identifier: 7D:D0:42:03:10:6C:1F:DA:3C:63:4C:F4:A4:2A:69:CA:E4:65:14:E4
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBC608493BB6A5A5384D7A0D8C8829
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/fdBCAxBsH9o8Y0z0pCppyuRlFOQ.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49367
IP address blocks: 2a0c:9a40:8083::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c6:08:49:3b:b6:a5:a5:38:4d:7a:0d:8c:88:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dd04203106c1fda3c634cf4a42a69cae46514e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:35:1f:f9:ca:cd:10:be:70:4e:cb:a8:b3:
41:6b:82:39:22:1f:a0:34:79:d6:50:e9:4f:09:ed:
85:cd:c6:03:db:e6:06:23:10:c7:cf:11:95:f0:99:
5c:d1:22:ad:a0:b1:fb:bc:02:9d:77:9f:e8:10:ed:
71:77:3e:21:f1:30:9d:2d:71:c3:5c:db:6c:a3:3e:
d2:f0:82:ba:d5:89:89:d6:c2:c6:5c:97:3a:b1:6a:
ca:ae:4c:52:ba:b1:f6:91:24:8f:79:d3:fa:b0:56:
2c:9b:d1:3e:14:df:6b:df:76:cc:75:13:2d:d9:e4:
db:d7:b4:67:65:dd:91:26:86:7f:6d:5b:5c:7f:37:
a9:b1:b5:d7:20:7b:e8:bb:33:e4:ef:b2:77:46:ad:
2b:59:36:9f:e5:b4:dd:1d:55:24:7e:ff:82:0f:f0:
83:d0:dc:5d:de:3d:45:d2:25:ed:da:aa:8a:52:06:
92:a6:41:43:99:f7:0b:d5:2f:4e:9e:41:e5:8a:3d:
e3:16:20:82:c5:36:c2:b5:04:2c:8f:de:98:9d:bb:
9a:68:d2:c0:e4:63:88:4b:69:ea:17:6e:a6:dd:ab:
32:9b:f8:a9:78:99:ba:6a:a9:eb:f9:51:db:8d:4a:
dd:43:b8:2e:03:f3:c2:e4:24:91:93:33:ed:4a:d7:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D0:42:03:10:6C:1F:DA:3C:63:4C:F4:A4:2A:69:CA:E4:65:14:E4
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/fdBCAxBsH9o8Y0z0pCppyuRlFOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8083::/48
Signature Algorithm: sha256WithRSAEncryption
b2:e9:57:23:df:39:ac:eb:5f:28:19:37:5b:e0:72:a2:37:55:
cb:6e:f7:f4:27:d2:3c:10:ae:c0:44:ac:23:67:9e:ec:df:e9:
e0:3b:3b:8d:52:84:33:f3:f4:c9:71:22:ee:39:4a:d0:42:ba:
91:4e:34:8b:f4:57:f9:be:11:96:bd:81:99:3f:0f:a4:15:12:
bb:e9:ca:57:9b:3c:2b:7b:0f:57:34:35:14:45:a1:5a:23:fa:
b6:a0:48:ce:31:1c:3b:b0:93:83:91:21:02:c4:ad:aa:62:93:
0b:ff:5d:df:8f:56:74:9c:ae:98:3e:4b:89:f5:94:51:53:93:
f9:9b:c8:27:01:9d:b0:fd:c9:af:5b:ed:ab:93:a9:e8:9a:1a:
b6:2d:ee:da:8a:50:2b:12:e9:06:02:b5:08:8e:aa:11:78:87:
7b:5c:25:70:bc:4b:3a:7d:4d:68:db:2f:85:11:7d:b0:2b:25:
11:00:f1:f8:22:90:8f:5b:c7:a7:25:de:08:b8:f9:7e:7c:bb:
d3:51:8f:a0:99:ba:9a:0e:0c:4d:b8:67:2d:6b:6e:d8:62:c2:
60:8c:df:d6:87:c9:ec:6e:cd:1e:e6:b6:42:ef:cc:a5:04:9b:
fb:0d:a0:b7:3d:fe:bb:b1:47:33:6a:46:84:eb:e9:ca:e6:0e:
5b:0a:b5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:17 2025 by rpki-client