Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/oXrhR-FfMw-nNiqsGIey_iPkINY.roa
File: oXrhR-FfMw-nNiqsGIey_iPkINY.roa (raw, json)
Hash identifier: IZrisHc3vcgxLeatvWV5rkmHy/KDeKRzQ4dEpoNBvj8=
Subject key identifier: A1:7A:E1:47:E1:5F:33:0F:A7:36:2A:AC:18:87:B2:FE:23:E4:20:D6
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBF76CB03D55942EE99EB6483991FD
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/oXrhR-FfMw-nNiqsGIey_iPkINY.roa
Signing time: Wed 01 Jan 2025 17:48:45 +0000
ROA not before: Wed 01 Jan 2025 17:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215363
IP address blocks: 2a0c:9a40:8450::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f7:6c:b0:3d:55:94:2e:e9:9e:b6:48:39:91:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a17ae147e15f330fa7362aac1887b2fe23e420d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:a4:07:73:8c:bb:d1:81:80:d0:4d:3e:5e:
82:3a:33:3e:98:28:c1:82:e9:67:3a:ba:b0:19:dd:
ee:ad:58:d9:75:47:f7:e4:90:a7:d9:54:07:8d:4d:
b9:0f:6c:f0:fe:12:d1:be:29:22:c4:92:b5:11:ce:
b2:24:55:58:5f:6f:39:24:71:97:8f:2a:46:de:a1:
91:1f:93:13:dd:6c:48:3a:0f:bf:b4:8a:83:7c:b5:
4a:22:24:41:dc:78:31:be:cd:a9:07:77:b8:4c:e6:
e8:52:61:f1:8c:f8:a4:2b:07:85:68:f4:d9:60:29:
6c:26:62:64:61:4f:16:d5:ce:85:db:e6:0f:e8:e7:
ac:86:44:9a:8f:1c:d9:23:7d:7b:16:c9:7c:23:0c:
3b:f2:e1:fb:98:6b:0d:63:4f:b1:1b:33:0f:94:2d:
c5:9b:ff:20:ed:98:12:d9:17:6b:0d:8b:8e:31:9c:
e6:6b:16:f9:75:12:e0:76:76:07:58:93:76:ff:b0:
9f:c5:1a:65:81:37:25:9e:1b:93:39:74:b0:86:33:
56:d7:24:9f:95:ab:c4:d4:08:73:f4:80:1a:5d:a9:
85:a9:39:01:e1:bb:9e:e2:64:22:f4:5c:e2:ec:4a:
f9:90:56:95:75:2b:6e:1c:d6:ac:9c:e9:c9:9a:b9:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7A:E1:47:E1:5F:33:0F:A7:36:2A:AC:18:87:B2:FE:23:E4:20:D6
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/oXrhR-FfMw-nNiqsGIey_iPkINY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8450::/48
Signature Algorithm: sha256WithRSAEncryption
91:27:e5:a1:05:59:cf:e0:5a:75:eb:3e:63:a4:65:e2:be:4c:
66:36:bc:9b:ad:8c:c5:71:6f:00:a5:0a:bb:92:79:9c:5d:20:
b0:a9:dd:04:c2:85:4e:fb:d3:f7:db:35:17:a0:20:da:7d:05:
1b:76:c4:9d:61:2e:ec:4d:6e:d2:7c:0f:ea:22:55:be:0c:e1:
94:aa:c1:39:e0:eb:52:ca:c6:13:0b:27:85:f8:1f:15:c7:5e:
ec:09:0a:35:92:5a:04:85:75:05:3d:e1:d6:5f:d1:31:25:d7:
53:4c:7d:ad:a8:3f:22:8d:8d:af:8c:45:e8:fe:70:e5:78:cb:
04:0f:db:54:2e:d8:eb:56:41:18:16:87:05:da:bd:d8:df:ab:
e4:ed:40:8f:d0:cf:dc:c5:60:0c:a1:22:f4:21:e2:17:92:9b:
0e:8a:45:6a:1c:03:da:fd:57:5d:51:dc:f8:47:eb:0b:0f:99:
2c:9b:0f:82:8d:60:ae:0b:3a:c3:4b:5d:56:d0:5b:02:e5:a3:
f1:6b:4a:b2:a9:ca:9d:55:c4:59:56:b4:d1:f1:18:50:b3:a7:
75:3a:8b:90:76:2a:cf:7c:ee:9b:d9:4e:5e:0d:a3:ab:73:7c:
5b:d2:3a:48:93:73:79:d7:e1:99:e5:45:a2:1d:a5:f8:96:b0:
43:a2:f2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:27:58 2025 by rpki-client