Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jVbhZa_08PmMihlK_GCY6Iv7W9U.roa
File: jVbhZa_08PmMihlK_GCY6Iv7W9U.roa (raw, json)
Hash identifier: qFl67lfnyXh4vkVWU2efFnRuVy4oqrl2y7Ze7/ziO9w=
Subject key identifier: 8D:56:E1:65:AF:F4:F0:F9:8C:8A:19:4A:FC:60:98:E8:8B:FB:5B:D5
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01957AB4BCADC2566669640916C468263C26
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jVbhZa_08PmMihlK_GCY6Iv7W9U.roa
Signing time: Sun 09 Mar 2025 11:40:19 +0000
ROA not before: Sun 09 Mar 2025 11:40:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a0c:9a40:9600::/40 maxlen: 48
2a0c:9a44:cf::/48 maxlen: 48
2a0e:7d41:8888::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7a:b4:bc:ad:c2:56:66:69:64:09:16:c4:68:26:3c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Mar 9 11:40:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d56e165aff4f0f98c8a194afc6098e88bfb5bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:78:81:7d:51:3b:e1:f0:87:f5:46:72:d2:
92:93:80:f5:d2:96:db:ae:4b:58:20:9a:26:b2:c0:
78:d2:4c:55:b5:67:ad:b8:5e:4b:c0:fa:fb:23:bb:
57:48:58:2b:63:ee:2f:b7:95:2f:af:c8:4d:84:32:
6a:e9:3d:2b:c4:4b:23:f5:e4:53:a4:ab:e6:a7:53:
f7:a0:50:d5:7a:0c:78:51:6c:7d:c6:af:2e:01:a9:
5e:b7:57:61:df:3c:e2:bb:c2:3b:be:7c:a6:76:5b:
e6:a9:3d:13:5f:b6:65:57:ee:a1:71:e5:a5:18:8e:
09:40:0d:9b:e2:13:10:f1:10:22:d7:71:af:dc:02:
e7:f9:2b:39:bd:28:66:e3:27:45:56:84:97:53:15:
15:1d:e0:2e:20:ff:44:82:b3:54:f3:2c:1a:33:c3:
22:2e:06:6e:34:52:93:a3:04:f6:24:b5:57:4e:24:
d7:42:5d:9f:cf:4f:e7:48:c2:80:30:df:fd:ab:18:
af:9b:7d:54:38:cd:1d:8b:6f:1f:ec:9e:47:89:4c:
33:86:aa:5b:f4:0e:bd:92:78:02:1b:07:42:dd:df:
a5:ea:b1:c8:87:5c:ce:6c:60:65:69:83:fe:e7:f7:
f8:2e:7c:c7:36:bb:33:53:2f:f0:a3:75:03:df:4f:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:56:E1:65:AF:F4:F0:F9:8C:8A:19:4A:FC:60:98:E8:8B:FB:5B:D5
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/jVbhZa_08PmMihlK_GCY6Iv7W9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:9600::/40
2a0c:9a44:cf::/48
2a0e:7d41:8888::/48
Signature Algorithm: sha256WithRSAEncryption
04:30:ab:3e:4e:60:0b:7b:fd:b6:07:01:33:01:f6:b7:39:84:
b4:14:9b:70:0b:11:3c:a2:aa:49:89:10:75:1c:8c:61:21:37:
9a:dd:da:17:40:7f:88:fb:fa:81:0e:d5:ac:5b:0d:87:db:7d:
05:23:44:50:10:bd:e5:8e:da:6c:82:02:58:4f:e0:d9:f2:33:
2b:f8:bf:db:8e:30:cc:10:c5:36:f7:d8:3f:36:dc:24:22:ef:
40:b6:f5:fa:37:27:2a:84:48:96:67:58:7e:13:f9:be:a7:67:
3f:22:9b:53:65:11:2d:fa:6a:2f:ef:6c:be:a1:14:d1:ff:0b:
40:44:e8:12:89:ac:80:05:97:e8:3e:22:a0:f5:ca:2e:f6:bc:
c1:fb:40:ed:19:0a:db:77:90:6c:7f:e9:0e:1a:d2:1e:e9:25:
d7:42:e3:c3:4d:3b:53:95:50:64:f8:a3:bd:f5:18:d9:df:cb:
fc:78:6a:5e:42:43:95:1f:c2:8d:45:09:e4:cd:18:f8:94:4a:
21:97:08:ae:2d:92:fa:28:dc:55:e2:48:34:d5:e8:a5:e8:77:
1c:66:50:47:e6:e2:47:ea:c8:73:2f:01:75:af:f4:fb:8e:e1:
29:df:df:e3:d0:c4:59:11:f6:da:d4:1c:80:2e:89:3c:cd:f4:
36:c3:a3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:32 2025 by rpki-client