Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/t0TXq2k3X3V5grCKVDHK3n7hbbY.roa
File: t0TXq2k3X3V5grCKVDHK3n7hbbY.roa (raw, json)
Hash identifier: Pp8kpwBGgG62qgKwm4YDUOvD160622abb82MTcgpD5I=
Subject key identifier: B7:44:D7:AB:69:37:5F:75:79:82:B0:8A:54:31:CA:DE:7E:E1:6D:B6
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBF6587A868EE3CEE04A347061566B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/t0TXq2k3X3V5grCKVDHK3n7hbbY.roa
Signing time: Wed 01 Jan 2025 17:48:45 +0000
ROA not before: Wed 01 Jan 2025 17:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215258
IP address blocks: 2a0c:9a40:8540::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f6:58:7a:86:8e:e3:ce:e0:4a:34:70:61:56:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b744d7ab69375f757982b08a5431cade7ee16db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ec:ee:74:e5:2d:3f:d4:78:1f:f6:d8:f4:21:
34:23:95:a5:e2:85:95:79:ca:21:62:c0:29:5e:89:
14:0e:1b:16:74:e3:f2:67:15:54:71:52:95:bd:37:
3f:00:a6:c6:57:0c:32:78:14:3b:a0:fa:b8:17:b3:
10:31:58:c1:69:8f:26:ae:53:6d:9c:01:e2:be:d3:
4b:74:46:b0:a0:0d:2b:e6:cb:0a:41:2b:5d:e0:d0:
06:93:57:23:cb:04:3e:53:ce:14:33:c4:d4:59:b4:
95:d6:91:97:ed:8a:6a:4d:96:48:37:32:d6:80:38:
44:02:a8:9e:cf:c2:76:6e:ea:e3:2c:04:41:8c:34:
d0:46:1f:75:54:2e:9b:00:fa:7c:14:b9:6e:06:12:
24:14:4b:2b:a8:06:c9:be:d5:ac:42:46:de:cc:43:
4a:16:6a:51:2e:2b:61:3d:8b:87:a7:79:4f:b4:88:
ba:9a:83:4a:e0:0c:38:14:3a:2c:73:64:a5:7b:ad:
65:cf:95:1f:28:a3:03:c1:3c:90:ff:eb:00:fb:2b:
7b:12:a6:a6:8e:7c:52:55:41:d8:ac:14:f5:d0:9c:
e2:c6:09:c2:45:5b:f2:a6:bc:d1:6f:e8:25:99:81:
36:a1:26:e6:6b:f6:25:9b:1d:0e:c9:40:77:58:7f:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:44:D7:AB:69:37:5F:75:79:82:B0:8A:54:31:CA:DE:7E:E1:6D:B6
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/t0TXq2k3X3V5grCKVDHK3n7hbbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8540::/48
Signature Algorithm: sha256WithRSAEncryption
07:69:52:0f:da:aa:50:36:9e:ca:be:49:93:f1:e0:b4:68:01:
73:3d:1f:46:05:1d:e6:2f:53:94:53:f0:df:31:e3:e1:0f:ba:
a1:33:3c:f4:ff:4c:9d:73:ac:f2:d6:89:89:b4:23:c5:33:79:
41:16:cb:77:ec:30:c2:61:b5:4f:ad:55:8b:a1:ba:2e:fe:67:
b9:58:b2:11:f2:f8:99:c1:b6:a2:6a:bc:40:ea:44:c9:61:01:
67:2f:9b:31:64:ee:c9:bc:36:cd:ab:8c:da:a7:da:89:1c:d3:
c5:36:df:cc:ad:2f:ee:95:f6:30:ea:7d:ba:f5:8b:4d:87:bc:
7a:ae:8d:a1:00:91:98:b9:e1:62:92:2e:61:d4:4d:1d:08:07:
45:bb:c9:fb:a3:65:32:e9:ff:d8:a7:26:59:ea:ac:3f:18:15:
1f:4e:b4:bd:4d:2a:d6:db:ba:33:62:d9:f9:5e:95:03:46:43:
8f:ee:4c:61:9d:63:e3:9b:27:f0:b6:77:d1:c3:c7:0b:3c:c3:
34:e4:4f:e0:1f:ff:48:d0:7f:d5:56:64:60:08:ec:17:c1:85:
6e:d6:43:26:53:ee:b7:8f:bf:72:7b:3c:3a:c6:1b:b5:44:1b:
b6:fb:31:3b:f0:1f:1e:ea:0f:39:0d:f1:74:0c:54:9c:c6:5c:
59:00:47:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:07:51 2025 by rpki-client