Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/qE_ZknLHEg1NexvTmUw3dxl-wYA.roa
File: qE_ZknLHEg1NexvTmUw3dxl-wYA.roa (raw, json)
Hash identifier: ZGWZL1051W3rkLKkXuBbZ2E2uht4wllslL9IM4dZXp8=
Subject key identifier: A8:4F:D9:92:72:C7:12:0D:4D:7B:1B:D3:99:4C:37:77:19:7E:C1:80
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBBDC17C517870FBA906BAD33D0CEF
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/qE_ZknLHEg1NexvTmUw3dxl-wYA.roa
Signing time: Wed 01 Jan 2025 17:48:31 +0000
ROA not before: Wed 01 Jan 2025 17:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 2a0c:9a40:82b0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:bd:c1:7c:51:78:70:fb:a9:06:ba:d3:3d:0c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a84fd99272c7120d4d7b1bd3994c3777197ec180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:8d:7e:58:5c:09:76:f2:e0:1f:00:0c:7e:
24:6f:25:81:9c:1e:21:b6:6f:19:1d:4e:f0:45:a4:
f0:a7:de:a2:67:c9:65:0f:76:71:fc:f2:b4:6d:db:
75:5b:02:fd:75:3e:66:cf:1d:07:f5:80:06:6f:e8:
6c:47:c7:4c:40:6f:86:9a:af:a1:db:a1:50:ee:77:
84:b7:91:8e:ee:e8:5a:a0:b0:2f:47:7d:33:d1:6a:
96:03:d7:bc:b6:e6:3e:d8:27:3f:a2:9d:04:76:9b:
e7:fa:aa:2c:0e:03:03:1e:7f:9a:9c:88:c4:ec:3a:
f9:cd:dd:2b:65:bd:cc:31:46:e7:44:2d:c3:b8:e2:
95:31:5a:1d:58:03:ba:46:8d:a0:c3:30:d1:06:79:
db:e1:cb:d6:3b:a6:f2:c0:bd:74:54:45:ee:cc:42:
5a:17:39:3e:48:e3:85:4c:e5:3c:d4:3d:9f:31:5d:
d1:38:31:99:21:e9:60:46:00:df:81:95:22:5c:93:
bc:5d:29:c9:33:75:9c:93:b4:86:68:38:6c:00:88:
f2:68:93:26:9e:e3:e4:17:94:70:36:08:ca:f1:b3:
7a:42:5b:35:62:d8:7d:ac:43:a5:ac:8a:5f:91:12:
bf:0a:8c:67:5d:da:98:d4:83:69:a6:f6:91:ea:45:
a6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4F:D9:92:72:C7:12:0D:4D:7B:1B:D3:99:4C:37:77:19:7E:C1:80
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/qE_ZknLHEg1NexvTmUw3dxl-wYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:82b0::/48
Signature Algorithm: sha256WithRSAEncryption
5b:7c:8e:e1:a3:b5:1f:ce:2c:15:33:f1:47:6c:d9:c8:5e:b9:
f9:16:e4:4c:6e:bf:ea:b6:4c:cd:eb:2d:91:89:41:ee:35:7e:
bb:b9:53:d2:1a:26:2d:b0:cd:6e:1f:7e:7f:46:90:44:4a:cc:
f3:3d:ec:c1:85:51:cd:10:80:6e:fa:16:62:35:28:a9:5b:f4:
12:4f:71:f9:e2:8c:d3:df:af:42:fd:90:9e:0e:06:43:6d:e9:
0e:e5:7d:d9:5d:2d:28:69:85:1f:90:a2:80:60:22:7d:32:67:
38:ba:40:71:7e:70:6d:f0:34:c3:27:ee:cb:5c:af:a3:30:88:
90:43:e4:be:dc:73:8a:47:5d:4b:96:b7:c9:9d:68:01:65:2b:
54:50:b7:c6:97:7d:ea:6e:40:e2:d9:db:00:f5:e6:4b:b1:f5:
d7:77:4d:d1:c8:4f:f1:30:df:ef:5e:bc:bc:f9:49:35:f6:6f:
db:f8:1f:2e:4b:ab:11:f7:71:16:91:a7:2d:f1:98:7f:a1:ae:
65:f5:db:ea:07:0f:16:f0:1c:77:ca:b8:94:67:15:39:f9:ca:
53:b7:f5:c1:2e:a7:39:ec:3d:d2:b5:68:31:2b:30:b2:bc:e9:
2c:3b:b5:1e:78:76:9c:ab:98:d5:15:dd:57:29:99:22:5d:aa:
f7:92:54:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:06 2025 by rpki-client