Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/m6iBb3hNRLEv3R5bCAM4ZKtnU44.roa
File: m6iBb3hNRLEv3R5bCAM4ZKtnU44.roa (raw, json)
Hash identifier: XfA7yKE5+7vfAxY9XJXj7OoXPtiX7aMYwVI8MkN0S6s=
Subject key identifier: 9B:A8:81:6F:78:4D:44:B1:2F:DD:1E:5B:08:03:38:64:AB:67:53:8E
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBCC2A658579E67052BC3E49E8C7F6
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/m6iBb3hNRLEv3R5bCAM4ZKtnU44.roa
Signing time: Wed 01 Jan 2025 17:48:34 +0000
ROA not before: Wed 01 Jan 2025 17:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139311
IP address blocks: 2a0c:9a40:82e0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:cc:2a:65:85:79:e6:70:52:bc:3e:49:e8:c7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ba8816f784d44b12fdd1e5b08033864ab67538e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0b:b7:f0:6b:7b:b6:c5:33:04:a5:3f:31:62:
e5:d8:45:b1:fb:c5:7d:f0:ae:1b:76:a0:64:47:33:
ce:04:47:2f:9b:86:b7:59:da:84:1d:a7:b4:89:aa:
75:af:b6:ed:1b:60:7f:f6:ea:07:db:1c:c7:8b:23:
21:7f:b9:ab:da:18:30:6e:9b:db:1a:e0:43:5e:92:
21:19:8a:29:a1:8c:ea:58:7e:38:3f:12:31:63:2f:
95:94:ab:f7:27:2f:12:e9:61:03:13:5c:ba:e9:36:
7a:f6:dd:ee:0d:64:cf:16:0d:a0:8c:25:8a:c5:62:
ee:13:1d:1b:8c:30:77:73:b1:79:ae:0a:16:4e:fc:
a9:cd:a8:18:82:09:2e:4d:ad:6d:b6:68:4e:dc:4e:
b6:3a:dd:e2:e4:bf:52:8b:6e:3c:44:04:bf:2b:22:
c5:47:da:d4:58:70:8d:0b:b1:ad:4a:81:2a:a3:81:
23:9a:04:0e:db:0a:e6:f8:ea:6a:b0:6b:71:b6:7a:
7d:ea:9e:0a:8e:8b:b8:49:ab:a6:74:89:0a:34:1c:
da:30:86:d3:8c:3c:72:1a:26:cc:6c:4c:1b:56:38:
b0:17:45:46:e3:ca:b7:6d:fb:36:6f:26:3d:08:c0:
23:d6:20:90:91:fb:f7:3f:7f:98:7c:16:1a:2d:c7:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A8:81:6F:78:4D:44:B1:2F:DD:1E:5B:08:03:38:64:AB:67:53:8E
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/m6iBb3hNRLEv3R5bCAM4ZKtnU44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:82e0::/44
Signature Algorithm: sha256WithRSAEncryption
a0:00:e3:74:6b:57:61:46:76:6b:2e:12:ab:fb:df:c3:2c:2c:
1f:28:31:13:7c:2d:5c:11:31:47:c6:59:e5:90:75:30:a1:9f:
3d:0c:95:a0:c2:1a:27:2d:7f:58:80:00:02:8e:e6:2e:0f:ef:
99:6a:e1:04:ab:7a:d3:0e:72:b0:04:62:8d:9e:00:31:52:45:
f8:63:4c:c7:e9:1c:c9:8d:f2:eb:dc:00:4e:67:da:a8:37:92:
bd:85:3b:fa:29:9a:ee:06:a6:a0:18:24:36:04:28:80:66:d7:
2d:1d:a0:2a:31:34:89:e9:0c:35:a2:75:15:ce:79:63:56:86:
01:df:cc:b0:ed:09:fb:84:5f:85:56:c5:61:04:70:87:86:a5:
02:5c:c1:b6:d0:7f:7f:65:9b:2c:0a:bf:79:d3:07:21:3d:69:
e4:b1:b5:0b:87:bf:e1:e1:08:2d:b3:01:44:99:9e:bf:89:99:
0a:40:8e:7b:fa:e1:2b:52:f8:3e:6f:17:cb:f3:5c:d2:5f:f2:
57:dd:16:09:c7:7e:d1:2d:45:dc:4f:fb:17:4c:8c:44:82:7a:
c4:bd:a9:3d:9b:c4:99:e0:ca:9d:9b:07:3d:cf:97:ee:22:e0:
d3:2a:ca:da:68:68:d6:20:e3:b8:92:84:5a:de:97:1d:85:e0:
ea:9e:7a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:40:16 2025 by rpki-client