Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l_XbAahpnwLxuQ_XmXSKGSuxzH4.roa
File: l_XbAahpnwLxuQ_XmXSKGSuxzH4.roa (raw, json)
Hash identifier: nqigmfWdvoRbOoJ2/l8F+W1SeeQB6hBhPrkW3wIcs/U=
Subject key identifier: 97:F5:DB:01:A8:69:9F:02:F1:B9:0F:D7:99:74:8A:19:2B:B1:CC:7E
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01937AE1FA3724A0397416E44BC019B2C5D9
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l_XbAahpnwLxuQ_XmXSKGSuxzH4.roa
Signing time: Sat 30 Nov 2024 02:24:10 +0000
ROA not before: Sat 30 Nov 2024 02:24:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199707
IP address blocks: 2a0c:9a40:8aa0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7a:e1:fa:37:24:a0:39:74:16:e4:4b:c0:19:b2:c5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Nov 30 02:24:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97f5db01a8699f02f1b90fd799748a192bb1cc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:64:ff:1c:88:25:b4:e3:e6:98:9e:7d:3d:
a4:23:ec:be:b2:83:81:d0:a2:dd:db:2e:5d:a9:ae:
62:65:83:81:2f:63:d1:aa:10:7a:c7:9b:70:67:f0:
de:2d:cc:55:93:f9:68:ba:37:4d:bf:ce:00:0c:85:
12:a2:d6:e7:93:12:16:ea:d9:25:aa:7b:c2:83:5e:
44:21:ae:de:2c:a2:e2:9e:b2:ca:c8:62:ca:3f:88:
13:8d:d6:b9:10:45:d8:b2:b7:3c:dc:7c:71:2c:45:
50:43:5c:b5:db:98:ab:1f:2e:5f:c6:be:81:0b:83:
d1:fd:89:4d:f3:97:fb:96:48:e0:a6:a9:39:25:45:
e9:00:ae:49:d9:af:cd:d5:6b:c6:94:74:7b:4f:55:
87:83:95:0c:36:b6:86:9e:55:9e:fb:8a:f7:9d:94:
63:9f:0a:c5:87:fa:38:09:56:ba:a8:2f:66:ac:58:
9c:ce:33:66:34:6e:7d:a9:ef:8d:0a:a6:39:d4:50:
79:0f:3e:f6:5d:1e:06:70:5d:fa:bd:4c:18:fa:58:
aa:4e:bb:c7:2f:61:7d:58:a6:e3:b9:18:8d:e6:13:
88:80:52:9c:fe:67:d4:91:64:f5:69:18:bc:68:cb:
e3:30:f8:75:fd:a3:84:dd:7e:02:d3:d5:a5:1d:95:
a9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F5:DB:01:A8:69:9F:02:F1:B9:0F:D7:99:74:8A:19:2B:B1:CC:7E
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/l_XbAahpnwLxuQ_XmXSKGSuxzH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8aa0::/44
Signature Algorithm: sha256WithRSAEncryption
9b:24:5d:05:b6:5a:20:35:b5:24:70:72:36:8c:fa:e6:ea:51:
98:e0:96:de:bb:17:c4:bd:ea:b6:eb:3c:64:0b:9b:e4:51:ba:
7f:f4:0f:1f:fe:0e:2b:85:d1:59:ce:7e:36:86:4e:d3:1a:fa:
ff:b7:e9:dd:6f:3c:39:85:6c:1c:38:cf:59:a7:ea:a4:d1:31:
b1:2b:ee:00:b3:9c:60:72:37:82:d0:78:be:f1:d8:19:ed:f8:
3b:d4:5e:c7:8e:6e:b6:a3:e4:a5:6f:3f:db:5f:b0:be:e8:a6:
d9:4b:b1:1b:ad:ac:76:b0:1a:e9:13:6d:4a:b1:33:c2:3c:78:
fb:b4:c8:34:cd:0d:1c:0a:e9:fb:e9:d4:20:a4:9e:dc:40:54:
36:45:82:90:88:64:07:e1:0c:38:c6:43:1e:cc:2e:98:de:a3:
c2:c2:d5:d4:61:f2:68:b4:5c:d1:29:cf:8e:05:64:a4:3a:b8:
78:2d:84:d6:16:36:84:d2:a1:5e:bd:7d:81:d9:f8:36:57:a7:
7c:c0:50:27:4c:60:3b:5a:bb:40:3d:d2:d0:29:08:ff:c3:8c:
37:40:58:da:f7:6a:39:fd:68:e7:6c:9d:62:35:c6:f6:99:41:
bb:89:2d:23:59:b7:04:39:29:da:52:d5:2c:56:ac:aa:c8:b9:
0a:9f:0b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:07:07 2025 by rpki-client