Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/k2BYDQ3usiMg0FLo4dOsVO-di-8.roa
File: k2BYDQ3usiMg0FLo4dOsVO-di-8.roa (raw, json)
Hash identifier: OaCdXSxFmCHCd2ayb8IAKvtnXfJewXV88iaZJdMPX7A=
Subject key identifier: 93:60:58:0D:0D:EE:B2:23:20:D0:52:E8:E1:D3:AC:54:EF:9D:8B:EF
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBD9D8868256AAD998E9A768BD1A8E
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/k2BYDQ3usiMg0FLo4dOsVO-di-8.roa
Signing time: Wed 01 Jan 2025 17:48:38 +0000
ROA not before: Wed 01 Jan 2025 17:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201325
IP address blocks: 2a0c:9a40:82b0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d9:d8:86:82:56:aa:d9:98:e9:a7:68:bd:1a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9360580d0deeb22320d052e8e1d3ac54ef9d8bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:d8:fb:72:90:35:48:72:93:a3:87:c9:eb:
71:38:24:4b:b8:3e:aa:8d:e7:44:ed:59:d3:2e:64:
4b:6e:43:3e:17:08:13:da:eb:23:7b:7c:da:00:78:
16:37:eb:e7:e1:3f:8b:fc:19:07:bc:50:eb:3e:6d:
ad:74:03:43:59:9f:1f:73:54:8d:ab:42:ad:4a:1c:
8f:2d:30:68:7b:41:29:a3:86:53:72:05:6d:83:67:
70:2c:1b:32:ec:cb:39:f1:59:0f:b1:e4:0e:66:f3:
70:61:f5:4c:9a:26:8a:23:71:d5:17:29:d6:ce:f6:
fc:b2:fe:eb:dd:8f:c8:34:da:52:dc:95:36:d4:e8:
c9:57:81:79:f4:90:05:4b:8a:10:ba:b8:68:d1:df:
4f:ce:91:d5:b9:b7:ef:85:42:51:dd:58:bb:23:ef:
0b:27:34:a6:d1:98:d6:9a:81:75:fe:23:8a:4c:0c:
4b:7b:a4:3d:3f:e6:e7:2f:b3:9a:cd:0f:5c:fa:9c:
ee:ee:e9:64:d6:cf:de:0a:cc:d9:e3:2e:dd:6a:50:
c5:63:df:39:a7:bf:41:9c:ee:ff:2b:06:11:68:e2:
5c:54:5f:01:d8:78:aa:30:2d:a2:2f:97:8c:6f:a3:
93:74:4c:97:4b:12:be:e0:0a:3f:ce:62:53:54:b6:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:60:58:0D:0D:EE:B2:23:20:D0:52:E8:E1:D3:AC:54:EF:9D:8B:EF
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/k2BYDQ3usiMg0FLo4dOsVO-di-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:82b0::/48
Signature Algorithm: sha256WithRSAEncryption
af:8f:46:a7:15:64:1e:3a:dd:d0:b8:39:25:b8:0d:93:be:a5:
cd:fd:6b:1a:f4:96:b1:a6:f8:12:f3:54:a3:9e:09:06:44:9b:
7d:59:f9:bf:b3:c8:a4:64:c1:e3:b2:4f:95:96:70:81:0d:a8:
aa:57:25:60:da:2e:d8:c1:e7:c0:e0:13:f7:b5:f8:37:7e:63:
27:f1:4f:c7:fd:53:e7:34:2c:29:a7:72:c1:4d:5a:47:db:3a:
be:aa:51:ca:86:e5:0b:47:29:b2:0c:15:78:0c:21:24:1a:e8:
5e:96:10:92:ed:e3:31:cc:1f:48:15:26:18:15:17:88:e0:5d:
dd:8e:1d:e4:1a:04:b3:e6:86:d6:27:5a:2e:73:90:e3:3d:e3:
11:1f:66:e7:02:cf:a7:bd:d9:6e:26:64:20:dd:c4:d7:57:13:
3f:d8:91:75:d9:ed:41:84:37:85:fd:67:ff:cb:83:9c:dd:8a:
14:21:8a:f9:c6:f3:ae:c6:f4:f5:3a:ae:33:c9:b5:f4:fa:db:
38:2e:92:46:6b:3e:80:03:f5:79:83:4e:78:72:54:00:f8:9b:
cf:d7:2d:eb:44:c2:71:67:15:b9:39:02:5f:a8:d8:fa:98:4c:
8d:bc:34:b2:18:fa:82:e9:a6:4b:08:8c:6b:28:51:85:61:0b:
fd:61:95:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:57 2025 by rpki-client