Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/g55MyIHdPqvdu5rTxPWO885kSUQ.roa
File: g55MyIHdPqvdu5rTxPWO885kSUQ.roa (raw, json)
Hash identifier: lxpVVUExwWqKIxFT5G0+AMvoUCgjNOP+4jrh+8pKB2c=
Subject key identifier: 83:9E:4C:C8:81:DD:3E:AB:DD:BB:9A:D3:C4:F5:8E:F3:CE:64:49:44
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBED2E4145C63342AF306C92FA48E7
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/g55MyIHdPqvdu5rTxPWO885kSUQ.roa
Signing time: Wed 01 Jan 2025 17:48:43 +0000
ROA not before: Wed 01 Jan 2025 17:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213392
IP address blocks: 2a0c:9a40:8040::/43 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ed:2e:41:45:c6:33:42:af:30:6c:92:fa:48:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=839e4cc881dd3eabddbb9ad3c4f58ef3ce644944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:21:8a:3b:66:2a:28:7f:dc:7d:d6:da:c9:
73:ac:e2:53:7e:3d:ce:c5:ec:7a:bc:53:e6:4e:94:
f3:46:48:d2:ea:b9:cd:11:e0:ec:a4:72:2e:b4:05:
54:82:b3:aa:6e:5e:eb:26:bf:fd:8d:6f:fe:3f:e1:
93:78:ff:e5:04:74:2b:67:3b:a8:9a:5e:8f:97:24:
f0:e1:78:7b:56:6c:6e:29:77:0d:68:ff:f4:56:02:
3f:81:ce:00:5a:42:0e:0e:1f:ad:40:6d:d2:b9:32:
c6:97:51:7d:f2:44:9d:e4:90:ea:e1:7c:8a:60:c5:
84:55:22:a0:ac:7f:9f:c8:70:92:7d:fb:69:57:52:
76:81:50:97:01:8c:9a:7f:a1:ad:4a:e5:82:12:df:
1a:83:36:45:3d:98:94:ae:16:c5:d3:06:f4:fc:b2:
6c:3f:47:4a:5e:7c:a3:bb:5e:8c:b5:5e:41:81:8e:
6e:c5:57:1e:3e:68:c9:3c:88:a9:39:99:06:5e:46:
28:d7:3a:d4:db:45:e0:31:03:65:4f:67:d6:aa:01:
c4:1d:87:14:7c:30:ca:ff:4c:35:de:d3:b1:e3:fd:
96:80:68:1b:fb:a0:0c:dc:4f:68:19:31:b6:96:bd:
a7:52:c6:2e:41:9c:43:1f:b3:1f:1c:d1:f9:c1:a5:
b6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9E:4C:C8:81:DD:3E:AB:DD:BB:9A:D3:C4:F5:8E:F3:CE:64:49:44
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/g55MyIHdPqvdu5rTxPWO885kSUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8040::/43
Signature Algorithm: sha256WithRSAEncryption
33:cd:5f:3a:9c:1a:18:3e:8c:25:55:dd:fd:1f:80:93:50:d3:
2f:2d:c2:0d:9a:db:bd:41:a3:c5:a6:d8:fa:de:eb:fa:2a:bf:
2a:52:26:7a:d4:a9:90:dd:4b:a9:29:bf:41:4e:21:7c:fa:8b:
4d:3d:8f:92:c2:94:14:3e:60:15:a5:b5:5d:16:7c:9d:d8:f4:
e9:ee:ac:d9:6e:9b:b8:8b:f7:e7:2d:59:1a:08:74:4d:2c:5e:
6d:e9:e9:7d:dd:6a:ee:72:fc:6f:7e:cb:7a:43:a1:89:b8:60:
e8:ab:bc:91:06:ed:98:94:34:b5:32:90:e1:c0:86:a5:5a:49:
61:8d:68:97:b0:9f:55:6b:0f:8f:bf:65:22:b9:a9:8c:70:0d:
4f:b6:30:d9:64:d9:e7:82:87:5a:2e:f2:95:04:d1:1d:35:17:
6b:9d:a4:ad:08:85:f0:e9:a2:15:1c:7f:d4:84:f3:c2:8a:16:
ab:98:73:ee:e1:3c:9a:7c:93:83:90:de:22:0c:d0:8d:bf:f4:
ac:f5:8e:8f:8e:a9:4a:da:da:5e:0e:d9:30:67:0a:b6:92:a9:
2c:17:d2:ba:c1:e5:09:22:8d:f1:5f:aa:fa:c6:8e:ae:1f:ca:
37:fd:f1:bb:0a:5c:2b:0b:e8:69:d8:f0:77:93:56:9a:52:94:
54:3f:a2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:37 2025 by rpki-client