Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/iw_7f2VDv62zcMmFoXHK6-jGWYY.roa
File: iw_7f2VDv62zcMmFoXHK6-jGWYY.roa (raw, json)
Hash identifier: 4WNG3ox+B8GbxfwaQVzd8IW6jxkEKqtEqrMV1VUzgAM=
Subject key identifier: 8B:0F:FB:7F:65:43:BF:AD:B3:70:C9:85:A1:71:CA:EB:E8:C6:59:86
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0194AF37F258608C8D18DF0CF33D9FA717E3
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/iw_7f2VDv62zcMmFoXHK6-jGWYY.roa
Signing time: Tue 28 Jan 2025 23:21:06 +0000
ROA not before: Tue 28 Jan 2025 23:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209652
IP address blocks: 2a0c:9a40:85a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:af:37:f2:58:60:8c:8d:18:df:0c:f3:3d:9f:a7:17:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 28 23:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b0ffb7f6543bfadb370c985a171caebe8c65986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9f:7c:62:bb:c1:fe:86:2b:b7:43:57:6b:0d:
25:3e:11:a0:ff:a7:c1:f6:67:9d:b9:94:26:8d:55:
4c:49:7a:b8:19:91:52:87:4c:14:94:eb:31:41:c4:
d9:81:1b:fb:23:e0:c7:62:a8:cf:b8:f3:af:d0:0e:
f2:06:95:6e:91:0b:ae:44:34:18:4c:2d:a4:9a:07:
dd:e9:81:c6:aa:c9:77:c5:4d:40:f4:b9:75:e2:6b:
6c:7f:31:20:3a:63:9f:64:02:47:c0:37:0a:17:71:
4a:95:c4:04:0b:2b:a4:82:af:7d:a0:45:80:92:a1:
41:06:7b:84:ca:7e:ef:a8:21:64:27:75:ff:6d:b7:
41:c5:86:6f:03:d4:37:59:87:43:5b:19:28:d4:0d:
6b:4f:95:6f:10:df:cf:3e:5f:e3:32:ab:c7:e0:95:
86:8d:10:65:b1:1d:06:95:dc:cb:fa:58:91:6c:10:
24:a8:19:99:0f:a1:2b:ee:c9:a7:df:c2:f3:a4:55:
98:de:21:12:85:a6:87:62:6e:01:14:1d:e0:2b:06:
47:1b:c7:ff:23:2b:7b:92:4e:bd:75:f8:d6:9e:89:
d6:51:2e:6d:20:e0:3d:1f:1a:3d:61:42:fc:b4:66:
c1:95:66:09:dd:5f:92:2b:c8:45:a2:78:fa:47:82:
1b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0F:FB:7F:65:43:BF:AD:B3:70:C9:85:A1:71:CA:EB:E8:C6:59:86
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/iw_7f2VDv62zcMmFoXHK6-jGWYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:85a0::/48
Signature Algorithm: sha256WithRSAEncryption
3f:6a:b0:1b:9a:65:60:db:f2:77:96:de:5e:31:cc:bd:ea:8e:
89:60:da:8a:24:e9:4d:cd:80:3c:17:e8:0f:48:30:b0:1e:35:
dd:6f:01:39:9b:a7:fb:e4:ad:a6:69:1a:89:03:87:b0:39:42:
de:d8:ba:a8:e7:d8:48:ed:a6:97:c6:77:28:0b:01:6c:e8:c8:
59:69:97:10:c2:0d:d3:f5:f7:52:ef:52:14:5e:46:54:c8:98:
57:e0:c6:41:3d:cb:50:b2:11:9e:f3:fb:28:32:cb:ac:c2:eb:
08:dd:45:64:c8:6b:99:34:67:7f:86:37:23:3d:fc:a8:17:95:
c8:be:a8:69:e6:db:b5:5d:55:d6:e4:3e:36:c5:5c:35:40:33:
00:00:0b:85:bb:5c:3f:7c:25:b3:78:18:26:aa:fd:27:70:d3:
4b:19:a5:db:cc:df:23:c1:f0:ff:02:4a:fc:00:82:59:4f:dd:
17:54:cb:42:fc:5d:0e:34:88:89:5d:4e:f7:28:34:80:df:b7:
d8:7f:05:c2:aa:04:3b:c9:af:57:39:0b:9f:22:5c:65:5a:e4:
d7:1e:36:29:f8:3f:db:ac:56:20:9c:80:70:dd:8e:9a:c7:74:
30:8b:3f:0f:65:66:0c:41:8f:64:68:3e:e6:6a:c8:a5:b9:06:
76:e8:cb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:18:10 2025 by rpki-client