Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/pNOLX90bl6HxeL7L-_-j1INsJhA.roa
File: pNOLX90bl6HxeL7L-_-j1INsJhA.roa (raw, json)
Hash identifier: 4EA69JKX8y+Z6t3bcVIUyjJu2nN3Xv4kaKMzFZFJ5O8=
Subject key identifier: A4:D3:8B:5F:DD:1B:97:A1:F1:78:BE:CB:FB:FF:A3:D4:83:6C:26:10
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBE41F0BF722646A8FA32E87393619
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/pNOLX90bl6HxeL7L-_-j1INsJhA.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209091
IP address blocks: 2a0c:9a40:81fc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e4:1f:0b:f7:22:64:6a:8f:a3:2e:87:39:36:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4d38b5fdd1b97a1f178becbfbffa3d4836c2610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d5:88:0f:80:f7:03:63:7c:41:7a:6b:07:93:
07:07:e6:a9:41:58:2c:3c:70:b0:d5:d9:21:e6:3c:
ce:10:ac:68:05:2e:27:6e:a5:64:56:5f:7a:01:b5:
f5:19:94:78:f7:68:a9:e1:4c:d2:9f:4b:8f:18:9b:
8a:fa:0a:a1:8f:42:e3:91:49:a4:3e:7f:80:52:b5:
7d:71:a0:a2:33:d7:db:e9:c4:8a:bf:aa:b1:57:0b:
6a:a7:87:0b:81:c8:e5:fe:18:90:2f:29:9a:a9:94:
fd:69:bc:39:50:09:b2:34:1d:15:7c:cc:3b:e3:be:
43:92:0c:6a:d6:86:f8:cc:3d:75:6d:2f:ec:3c:8e:
dc:a7:20:59:1d:a9:d5:4d:e8:19:35:b9:0b:c1:f5:
bc:4a:38:ba:a2:72:78:5c:a9:23:cb:b2:11:68:ae:
e6:be:35:70:97:aa:cf:e5:9a:db:19:b5:e5:97:3c:
83:b0:a0:99:a6:dc:78:71:21:9f:3b:a0:7a:45:8f:
3f:4f:ff:01:0e:bb:98:c2:1f:9c:e5:5d:9b:66:a0:
61:9c:7f:83:28:da:31:f2:9b:91:4a:ee:06:d8:41:
56:c8:83:50:1e:f8:b8:8f:80:a3:cd:00:ed:3a:a9:
60:18:b6:84:92:39:05:e5:e5:e2:21:e1:cc:e1:c6:
49:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D3:8B:5F:DD:1B:97:A1:F1:78:BE:CB:FB:FF:A3:D4:83:6C:26:10
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/pNOLX90bl6HxeL7L-_-j1INsJhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:81fc::/48
Signature Algorithm: sha256WithRSAEncryption
42:e0:11:80:3e:31:3e:13:dc:26:4f:c0:84:76:71:a6:38:91:
9d:8e:fb:c8:09:18:09:17:ce:12:a0:44:20:da:e2:f9:8e:cb:
1d:56:7e:59:71:dc:9a:24:b9:3b:64:78:d1:59:51:06:b5:f4:
1b:a5:c7:99:63:47:84:fe:8b:c9:a5:24:c8:e1:a1:cf:0a:88:
89:f9:40:9c:03:1d:02:6b:75:34:37:1b:f8:d7:2e:07:90:05:
09:bc:f3:a8:5d:1f:fb:34:93:7a:8c:91:fb:72:77:de:09:1e:
65:3e:ff:f0:01:30:ad:91:a8:e7:49:a8:f7:97:9b:c5:a8:ac:
07:de:03:b6:a9:c6:a0:e4:85:e6:32:72:53:31:9e:a0:2f:92:
a3:f6:6f:4d:f7:98:d5:2b:8e:f5:d5:42:ce:96:35:93:21:fe:
87:0d:47:12:b9:88:c6:0e:cb:58:9c:a3:e1:c3:35:d0:5c:a4:
54:4e:a5:52:c7:ac:d1:39:e9:2f:09:fb:dc:46:0c:9b:4d:c3:
90:e3:19:d3:7e:a7:96:36:80:db:15:5a:de:03:86:46:49:15:
ff:68:20:ba:1a:42:be:4b:c6:b4:e5:2a:03:1d:c8:ce:dd:ec:
a6:cb:34:3e:47:c5:27:fa:45:63:06:35:58:14:32:d6:09:29:
a7:76:fe:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:18:01 2025 by rpki-client