Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/icHY-kzs45r7Bip2YjbN7yYaYTk.roa
File: icHY-kzs45r7Bip2YjbN7yYaYTk.roa (raw, json)
Hash identifier: Bs6ULQ4vTMVoDSuP4Mkk4hCDB0zKSBEXakUD+68BgUQ=
Subject key identifier: 89:C1:D8:FA:4C:EC:E3:9A:FB:06:2A:76:62:36:CD:EF:26:1A:61:39
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBD2D0B63A3E499A1AF8A8B71DAEB6
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/icHY-kzs45r7Bip2YjbN7yYaYTk.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199307
IP address blocks: 2a0c:9a40:8cf0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d2:d0:b6:3a:3e:49:9a:1a:f8:a8:b7:1d:ae:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89c1d8fa4cece39afb062a766236cdef261a6139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:5c:fd:7d:b0:c8:ab:4d:da:10:06:b6:95:
63:e7:b4:2b:6a:0b:3a:f4:ce:f0:82:9a:4f:d2:7c:
3d:58:a9:39:d1:7c:ef:fb:47:c2:d4:e0:7b:92:29:
87:0f:b6:67:7a:45:7c:33:bd:36:b5:48:f0:48:97:
c0:7b:c0:0c:82:2c:86:92:8c:33:3e:5c:94:d2:ed:
7b:02:27:17:b2:4a:53:98:dc:69:c5:a8:17:05:08:
f4:c3:72:46:1d:9c:94:c3:13:e4:d1:db:fb:9f:2d:
e0:a1:1b:5f:28:f1:9b:fa:fd:95:ef:c1:36:ca:ef:
0e:59:92:e2:70:8a:85:38:0d:50:f4:73:9a:9a:bc:
be:3c:d6:58:99:79:68:90:71:86:5b:41:2b:13:af:
90:f3:73:e8:2a:73:0f:4a:16:0b:45:4f:41:22:6b:
b6:ea:c0:65:3c:cb:f3:45:95:80:e7:01:a4:9b:d9:
98:ef:32:60:3b:5f:ea:40:e3:50:09:a2:73:a9:ab:
02:50:b0:58:67:81:01:ec:5a:7c:a2:65:7e:3a:c2:
fe:2b:02:2b:71:bb:b1:6d:11:a7:6a:e1:d3:d0:e9:
7d:26:51:60:67:ac:c9:e3:ff:92:c3:db:fe:36:19:
1a:7c:ec:15:65:0f:df:1c:30:06:5d:68:2c:0a:1c:
b3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C1:D8:FA:4C:EC:E3:9A:FB:06:2A:76:62:36:CD:EF:26:1A:61:39
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/icHY-kzs45r7Bip2YjbN7yYaYTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8cf0::/48
Signature Algorithm: sha256WithRSAEncryption
96:a7:b1:db:23:2d:50:df:9f:8b:18:14:8b:4f:7a:f2:d6:41:
b1:56:d6:e1:28:c0:3b:65:01:7a:f1:ec:90:7d:e0:bf:77:bb:
9f:bc:7f:c0:06:b7:33:11:ff:84:c8:66:f5:2c:ca:5d:33:df:
d6:51:9e:36:2c:3d:16:ce:bf:7c:f1:3b:bb:80:16:d4:1e:7e:
b9:e4:07:a7:0a:4e:06:57:b4:07:8f:7a:50:92:f4:05:1c:5f:
90:75:bd:ff:4e:bf:aa:75:9b:f2:03:f6:eb:80:b2:71:80:9f:
28:d5:bf:bd:ed:d3:e3:89:27:55:ec:e6:98:05:42:22:61:a5:
6d:24:af:8a:b9:01:96:c3:80:e5:d2:8f:6d:93:c6:fa:0f:98:
a5:cc:81:84:ba:1e:bd:e8:0a:89:f1:8e:66:18:72:e7:68:7c:
76:ea:a8:50:5e:6d:0b:bd:a7:2b:ab:15:a4:c6:4d:7b:af:e8:
11:4c:2f:68:e4:24:6a:6c:c4:38:76:32:26:05:ab:b2:98:9c:
0e:79:29:a0:74:2e:57:ad:6a:d7:55:3b:21:19:39:e0:bb:bc:
d8:ad:5a:ef:b4:e0:b8:16:03:8b:25:6c:80:31:a6:82:87:34:
ee:fb:72:c4:2a:38:55:3a:41:28:c1:3b:51:ab:cf:d0:6f:9c:
03:39:93:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:29 2025 by rpki-client