Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/nQ1xh5MuJRi0lffWJrMcu3j5n4Y.roa
File: nQ1xh5MuJRi0lffWJrMcu3j5n4Y.roa (raw, json)
Hash identifier: YhI4sVGiUGFVeGeTVN+ISiAfNyfTeqqql+L/u+8Jwzg=
Subject key identifier: 9D:0D:71:87:93:2E:25:18:B4:95:F7:D6:26:B3:1C:BB:78:F9:9F:86
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0194034DD1A7FBDD3E22A0591B16C2C177AD
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/nQ1xh5MuJRi0lffWJrMcu3j5n4Y.roa
Signing time: Thu 26 Dec 2024 14:10:19 +0000
ROA not before: Thu 26 Dec 2024 14:10:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200529
IP address blocks: 2a0c:9a46:700::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:03:4d:d1:a7:fb:dd:3e:22:a0:59:1b:16:c2:c1:77:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Dec 26 14:10:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d0d7187932e2518b495f7d626b31cbb78f99f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:86:de:74:56:41:e0:8b:0b:90:0e:a7:4b:
7a:c3:00:4f:3c:9f:47:6b:9c:9f:88:16:f3:9c:3a:
10:23:51:0e:38:79:a1:ac:47:69:07:32:32:33:de:
61:64:47:75:8b:3d:7f:79:02:64:2f:77:63:38:a3:
b6:d1:37:0e:7e:64:d8:a4:b4:b3:f3:d3:51:9b:9c:
8a:7b:3d:cb:b6:3a:7f:53:1c:09:6c:f8:0c:69:ea:
7b:28:2d:ab:7e:68:2f:25:ea:23:bf:b8:26:e8:38:
ff:da:2c:39:5a:60:d1:31:29:67:8f:4b:8a:46:2c:
31:cc:27:ce:2b:a9:9a:05:0e:46:9e:28:62:98:df:
b0:4d:b5:8c:c2:b2:1f:c4:58:a1:87:c8:85:fc:f3:
3f:2f:5d:67:f9:7a:84:20:69:85:4c:f2:42:34:4d:
6b:f6:e0:95:35:6e:e4:11:06:ae:24:76:d1:33:b3:
23:b1:be:5d:36:30:fc:07:58:fa:3f:2a:e1:c2:d1:
d9:90:ab:3b:73:e1:bb:cd:a0:2e:5f:f6:07:97:f1:
df:7c:86:fb:96:31:cd:de:d9:8f:39:d9:86:d5:57:
e6:da:cd:5f:00:84:80:8b:96:f0:e1:c4:c5:fa:f6:
07:3e:82:d9:ad:02:4f:96:24:d4:59:98:b6:9e:64:
6f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0D:71:87:93:2E:25:18:B4:95:F7:D6:26:B3:1C:BB:78:F9:9F:86
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/nQ1xh5MuJRi0lffWJrMcu3j5n4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a46:700::/40
Signature Algorithm: sha256WithRSAEncryption
54:7c:fc:23:24:5c:15:2c:7c:2a:46:e5:fc:09:6f:8c:f1:17:
85:79:2f:52:c8:ac:c4:42:00:86:d4:8a:2f:fb:30:c4:3c:40:
0d:51:35:70:39:3e:11:df:12:e4:09:4f:d1:75:68:ad:f2:6f:
b5:e7:4f:30:b0:ee:5d:a1:0b:cc:43:d0:9f:18:98:e8:33:d6:
f2:a4:bd:b4:b4:4c:0d:7a:b2:72:d0:64:de:7d:67:02:a9:84:
c0:9e:49:bd:53:6c:4a:3d:88:ab:b7:d0:2e:43:67:7c:0d:43:
ed:ab:e2:de:e8:7b:d5:e2:e7:c0:d6:8e:aa:c2:06:ca:2f:be:
90:45:4a:66:a3:c0:32:43:33:d9:1f:74:e1:11:34:ff:87:6e:
36:4a:86:7d:d4:4d:53:22:25:16:1f:2d:70:7e:60:47:f4:d0:
32:6b:27:94:8a:0b:43:85:c8:d3:2a:cb:17:5e:4b:92:6a:42:
94:76:ec:0c:ac:07:7a:ba:1f:26:fb:97:17:bb:40:e2:41:18:
a8:ca:41:8d:13:5c:2c:9a:48:84:3b:53:a9:a2:99:56:aa:0b:
aa:f7:89:d6:21:97:36:fc:f6:67:3a:74:f8:7f:15:a5:24:5e:
47:29:29:26:2f:5a:cd:3d:02:46:78:8c:09:a8:a5:e9:11:ca:
66:d5:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:07:08 2025 by rpki-client