Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jHf-bfFK3z1ktAJ10rN5LOTVopI.roa
File: jHf-bfFK3z1ktAJ10rN5LOTVopI.roa (raw, json)
Hash identifier: tiSGwgXNjk+qDfChUkXrma2J7t41iH69udZW6vk3W34=
Subject key identifier: 8C:77:FE:6D:F1:4A:DF:3D:64:B4:02:75:D2:B3:79:2C:E4:D5:A2:92
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBCEC5867760B9C27396D7CB91232F
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jHf-bfFK3z1ktAJ10rN5LOTVopI.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197438
IP address blocks: 2a0c:9a40:8580::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ce:c5:86:77:60:b9:c2:73:96:d7:cb:91:23:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c77fe6df14adf3d64b40275d2b3792ce4d5a292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:85:00:94:91:c9:2d:66:f0:84:db:08:a1:b8:
62:3d:7a:50:1d:d5:97:93:a5:fa:05:91:9c:f3:06:
51:16:54:f0:3a:12:4b:d2:47:d4:a8:a4:7e:df:95:
d6:58:05:9f:7e:97:5e:3c:78:88:ec:ff:7d:37:fc:
c8:94:1b:bd:de:38:01:92:97:a1:71:25:e8:92:0a:
90:4b:23:04:4e:a3:5f:70:c3:32:d6:87:e6:32:47:
50:87:59:05:4a:58:71:c9:1a:3a:35:8f:84:ea:cf:
0b:11:a3:07:09:50:13:b6:66:bf:1e:c9:a9:8e:9e:
06:7b:3a:94:b7:e0:19:54:92:84:12:a0:51:b3:6a:
04:9b:9c:51:9f:37:ad:6f:09:87:4e:26:d3:3b:59:
0f:1b:bc:c4:cf:d7:02:fa:48:ed:51:3c:5f:88:1a:
73:04:7b:95:c8:3b:78:b8:1b:53:e3:ea:ff:66:71:
e5:97:bd:70:a4:ba:cf:1c:a2:76:2e:17:40:d7:e6:
ff:7c:8b:24:06:61:96:ef:cb:ca:98:66:01:39:be:
89:11:cc:13:52:39:29:5e:8d:26:ba:9e:3d:c3:55:
d3:d5:16:0a:a8:24:6d:93:f4:b3:7b:17:d7:dd:12:
83:0a:80:52:dc:21:fe:4d:8b:cb:f0:c7:37:1d:f8:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:77:FE:6D:F1:4A:DF:3D:64:B4:02:75:D2:B3:79:2C:E4:D5:A2:92
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jHf-bfFK3z1ktAJ10rN5LOTVopI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8580::/44
Signature Algorithm: sha256WithRSAEncryption
42:6b:f2:bd:27:be:03:31:30:00:de:08:d4:ed:08:8c:13:36:
7d:cf:d9:00:9a:c3:7c:54:0c:a3:d7:2c:fe:86:69:87:40:a1:
ff:bc:fd:cd:05:62:ae:29:1c:d3:1b:09:64:20:79:a0:17:9f:
de:2d:59:57:37:b7:4e:b1:bb:77:4a:b1:bc:3f:08:d5:76:73:
0f:05:82:d5:09:ae:d0:96:f3:5d:50:a1:91:35:4e:91:2b:55:
fa:4e:dd:29:4a:e1:11:d3:bd:ec:d7:5e:d9:f1:0b:09:67:75:
de:2b:f1:4f:a1:ed:e7:d5:dd:27:07:f2:4c:3c:82:36:00:3e:
d2:64:2c:b5:4d:41:29:a2:15:a8:e0:99:94:db:b2:62:6f:90:
77:e1:37:91:ca:0b:29:a4:24:57:6a:40:89:c9:22:da:05:02:
9e:4f:ff:b8:de:24:68:0f:d7:4b:ad:71:ee:a0:38:e9:c3:5b:
39:38:4a:35:db:4b:8a:cd:e0:32:d7:45:8e:11:8f:ab:d2:3b:
ac:58:31:b6:29:f4:79:bd:ef:18:35:cf:e5:50:ad:e6:61:b5:
1b:f7:8b:e9:ae:f9:35:81:f5:b6:de:ca:fe:88:60:f5:e8:7f:
0d:b5:77:a0:8f:d6:1b:f0:40:38:f1:d4:e1:a5:1a:19:27:9d:
47:60:92:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:23 2025 by rpki-client