Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/v1xAD2iGmrp707gmeHy85w_dpe8.roa
File: v1xAD2iGmrp707gmeHy85w_dpe8.roa (raw, json)
Hash identifier: etjB1mvxgEiN93CrEBBv9f7sOWDLj+SToeHuS4v8Z9w=
Subject key identifier: BF:5C:40:0F:68:86:9A:BA:7B:D3:B8:26:78:7C:BC:E7:0F:DD:A5:EF
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBEF05ED232993E58B8AB2E2B03F2E
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/v1xAD2iGmrp707gmeHy85w_dpe8.roa
Signing time: Wed 01 Jan 2025 17:48:43 +0000
ROA not before: Wed 01 Jan 2025 17:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213774
IP address blocks: 2a0c:9a40:8a40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ef:05:ed:23:29:93:e5:8b:8a:b2:e2:b0:3f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf5c400f68869aba7bd3b826787cbce70fdda5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:72:52:9d:d6:17:74:d3:39:81:95:2c:b0:98:
80:5f:39:da:af:de:60:ce:92:a9:46:ff:e0:6e:c9:
39:e1:4c:67:c6:30:1e:3f:e2:7a:70:de:ae:d7:4d:
90:3c:bf:38:28:0b:cd:1b:09:ac:5b:b2:26:d0:c5:
83:8c:03:9d:75:1d:b9:7b:80:fa:7c:11:2a:d8:12:
35:76:90:64:31:a4:ac:e6:ae:75:f5:68:3b:e0:81:
68:56:f2:ea:28:fb:37:cf:2f:ce:26:57:d6:28:ae:
ff:42:32:65:5b:15:a2:88:10:b9:46:05:06:7a:01:
cf:9d:d0:d4:49:f9:18:3b:f6:e8:f2:fd:fc:ad:13:
40:75:0b:b6:1f:c5:30:f5:74:78:7e:39:67:3c:36:
3b:e9:6d:2e:76:a1:76:0a:4c:de:54:52:ff:9a:e8:
92:94:64:66:7a:86:f8:99:c7:df:25:09:0a:4b:ce:
cc:34:78:f6:46:5e:a4:1a:aa:ba:88:ae:cc:c7:40:
49:45:c7:36:14:97:5e:04:da:c5:86:48:4d:2e:2c:
24:c2:f7:a6:d4:0b:28:d6:79:c9:d7:dc:76:5c:51:
7f:04:48:74:bf:b4:1a:c1:67:68:32:b5:46:68:73:
4b:dc:48:44:2b:a2:ae:00:e6:b0:bb:2d:01:d5:e1:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5C:40:0F:68:86:9A:BA:7B:D3:B8:26:78:7C:BC:E7:0F:DD:A5:EF
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/v1xAD2iGmrp707gmeHy85w_dpe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8a40::/48
Signature Algorithm: sha256WithRSAEncryption
b9:09:92:aa:dd:90:01:13:65:3d:af:fc:50:99:7a:5c:f3:a8:
68:10:cf:34:c6:1d:7a:d4:0c:82:ec:cc:2a:e7:cf:8b:ca:84:
27:30:87:5e:43:0e:b3:a2:ae:57:77:e5:2a:83:c4:ca:82:9e:
30:cc:ee:ac:27:cf:bf:da:c7:7d:35:bc:c2:27:b7:27:fe:c0:
25:b2:14:45:25:cd:d2:2a:a6:0e:6b:ed:24:56:b4:aa:45:a9:
04:92:af:0d:f9:55:34:81:ef:61:59:b1:8c:67:86:30:0e:4f:
e8:7a:7a:13:49:6e:f7:df:b9:6c:f9:0a:45:5f:04:28:13:5c:
4c:1c:e2:10:41:6a:ce:cf:09:b2:d7:d2:0b:d0:06:69:e6:7a:
66:69:38:3d:9f:da:1b:0b:85:88:c6:e5:6b:d5:56:6f:39:be:
40:66:9e:bb:5c:dd:90:cc:7b:34:22:e3:e3:5f:17:73:e3:c2:
b0:a8:93:93:e1:41:10:fe:c4:c1:c7:cc:ec:83:7e:9b:8a:e1:
8c:42:f4:e8:0f:b3:69:fc:07:e7:a3:01:3f:e3:a6:63:f3:72:
5e:3a:34:a8:63:00:16:26:77:b4:60:4a:3c:6e:ec:52:64:61:
ce:44:e7:33:89:3a:a2:4f:19:26:09:f7:1e:1d:94:0f:62:3a:
57:18:77:e0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQi++8F7SMpk+WLirLisD8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUwMTAxMTc0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjVjNDAwZjY4ODY5YWJhN2JkM2I4MjY3ODdjYmNlNzBmZGRhNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3JSndYXdNM5gZUssJiAXznar95g
zpKpRv/gbsk54UxnxjAeP+J6cN6u102QPL84KAvNGwmsW7Im0MWDjAOddR25e4D6
fBEq2BI1dpBkMaSs5q519Wg74IFoVvLqKPs3zy/OJlfWKK7/QjJlWxWiiBC5RgUG
egHPndDUSfkYO/bo8v38rRNAdQu2H8Uw9XR4fjlnPDY76W0udqF2CkzeVFL/muiS
lGRmeob4mcffJQkKS87MNHj2Rl6kGqq6iK7Mx0BJRcc2FJdeBNrFhkhNLiwkwvem
1Aso1nnJ19x2XFF/BEh0v7QawWdoMrVGaHNL3EhEK6KuAOawuy0B1eGBNQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL9cQA9ohpq6e9O4Jnh8vOcP3aXvMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvdjF4QUQyaUdtcnA3MDdnbWVIeTg1d19kcGU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIpA
MA0GCSqGSIb3DQEBCwUAA4IBAQC5CZKq3ZABE2U9r/xQmXpc86hoEM80xh161AyC
7Mwq58+LyoQnMIdeQw6zoq5Xd+Uqg8TKgp4wzO6sJ8+/2sd9NbzCJ7cn/sAlshRF
Jc3SKqYOa+0kVrSqRakEkq8N+VU0ge9hWbGMZ4YwDk/oenoTSW7337ls+QpFXwQo
E1xMHOIQQWrOzwmy19IL0AZp5npmaTg9n9obC4WIxuVr1VZvOb5AZp67XN2QzHs0
IuPjXxdz48KwqJOT4UEQ/sTBx8zsg36biuGMQvToD7Np/AfnowE/46Zj83JeOjSo
YwAWJne0YEo8buxSZGHOROcziTqiTxkmCfceHZQPYjpXGHfg
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:13 2025 by rpki-client