Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/j39gB84koZKRdh1CSh0rt0oQ8Dk.roa
File: j39gB84koZKRdh1CSh0rt0oQ8Dk.roa (raw, json)
Hash identifier: AfS5x1xasZw3V2HTIu7YqcDy3m2usDENs+gGzJcHeMA=
Subject key identifier: 8F:7F:60:07:CE:24:A1:92:91:76:1D:42:4A:1D:2B:B7:4A:10:F0:39
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBC0E3CEE033EEDF4A9362824F1A2D
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/j39gB84koZKRdh1CSh0rt0oQ8Dk.roa
Signing time: Wed 01 Jan 2025 17:48:31 +0000
ROA not before: Wed 01 Jan 2025 17:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a0c:9a40:8060::/44 maxlen: 44
2a0c:9a40:9c10::/44 maxlen: 48
2a0c:9a40:9c20::/44 maxlen: 48
2a0c:9a40:9c90::/44 maxlen: 48
2a0c:9a40:9ca0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c0:e3:ce:e0:33:ee:df:4a:93:62:82:4f:1a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f7f6007ce24a19291761d424a1d2bb74a10f039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e3:0d:a5:f5:c1:a7:30:1e:6d:3a:ce:18:d8:
81:99:0f:57:7c:ca:82:c2:40:36:15:e4:4f:0d:3c:
2c:49:02:8b:11:a0:ca:b0:7b:1b:aa:26:0f:e9:11:
36:8f:8d:3c:60:b5:0f:d5:85:c6:68:97:c6:93:42:
76:60:3f:5f:96:94:b4:34:a0:70:93:c5:5e:d1:46:
2a:c6:01:2d:af:33:bd:a9:45:e6:3a:fb:2a:53:a7:
77:88:8d:7d:ee:39:d1:17:88:6a:d2:d6:42:18:d5:
4e:d9:42:16:cc:d7:c6:59:23:2a:28:ef:5d:7f:92:
52:ab:90:17:58:cd:5f:65:9b:2a:11:7b:3b:4a:ed:
ad:37:45:9d:e1:c2:2f:45:4d:b6:2c:07:0c:3c:04:
80:ab:92:b3:85:89:a7:bd:94:68:f2:e3:01:b7:b4:
5c:f5:d4:d2:79:43:cd:cb:da:64:fd:03:81:07:6c:
75:71:5e:31:77:5d:d0:cc:60:c1:2f:2c:8c:6b:cc:
f7:e6:1e:af:cc:d4:1a:48:f3:76:88:db:d1:48:3e:
8c:0c:ee:f1:f4:2c:f1:f7:77:b7:6a:8f:82:de:f0:
43:77:6e:f9:92:38:76:16:f1:d3:a3:1d:f3:0b:96:
e1:b0:f3:c4:6b:71:16:97:5f:93:dc:b2:d8:c9:81:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7F:60:07:CE:24:A1:92:91:76:1D:42:4A:1D:2B:B7:4A:10:F0:39
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/j39gB84koZKRdh1CSh0rt0oQ8Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8060::/44
2a0c:9a40:9c10::-2a0c:9a40:9c2f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:9c90::-2a0c:9a40:9caf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
bb:7a:01:f4:ca:cc:93:e0:ee:08:80:e2:ef:96:4c:6b:56:da:
cc:80:b1:e0:2f:3a:4e:eb:68:7a:7d:36:dd:12:0e:43:1f:64:
cc:d5:a7:63:cc:6c:b9:fb:ba:47:fe:c7:06:e6:ba:dc:05:47:
87:56:06:a9:de:70:9a:6a:c1:5f:ec:7c:ae:92:4a:54:1a:b6:
c5:85:51:90:92:d7:1f:1a:1c:47:21:ab:ac:bf:7b:c9:53:45:
f1:d5:71:82:2a:01:5b:95:83:54:7d:7a:64:35:15:f3:af:e2:
1f:4d:3a:66:59:eb:cf:8c:d5:52:4b:7d:ca:4b:81:66:c6:df:
b3:1b:f8:1a:fa:02:1c:64:98:0e:8d:af:b0:e3:e9:c4:36:46:
ac:ac:08:6d:09:2c:3f:40:e9:9a:80:62:0c:c0:e2:d1:27:cd:
b1:65:b3:dd:69:28:6e:94:4b:d0:18:b1:a8:ca:ba:d9:9a:1b:
03:99:79:92:9e:43:c8:3c:8c:d8:bf:14:05:5a:93:67:e2:73:
93:14:54:fe:f1:8a:cd:2e:57:f5:35:7e:e2:4d:da:4a:ea:63:
0d:bd:42:78:2d:d7:49:7a:ff:0d:63:e1:64:db:18:0d:f8:cf:
dd:36:b2:2e:20:50:bc:94:a0:9a:c5:38:d1:8e:64:af:42:94:
7a:5b:7d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:31 2025 by rpki-client