Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/v_rOAoiPQL4TialaZvXD4w1WJ2U.roa
File: v_rOAoiPQL4TialaZvXD4w1WJ2U.roa (raw, json)
Hash identifier: sxR2WxevygnzyUdVPGYIxnE4kkhX0lCOZLvx0j6xvMc=
Subject key identifier: BF:FA:CE:02:88:8F:40:BE:13:89:A9:5A:66:F5:C3:E3:0D:56:27:65
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBBE423F07C0B5F6E42D67A88635AB
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/v_rOAoiPQL4TialaZvXD4w1WJ2U.roa
Signing time: Wed 01 Jan 2025 17:48:31 +0000
ROA not before: Wed 01 Jan 2025 17:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1764
IP address blocks: 2a0c:9a40:8071::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:be:42:3f:07:c0:b5:f6:e4:2d:67:a8:86:35:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfface02888f40be1389a95a66f5c3e30d562765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:44:1d:b8:34:86:08:75:43:c5:f6:90:92:
8f:18:70:fa:fb:ee:b1:64:72:14:64:7d:95:d6:34:
5a:34:81:84:3b:e6:74:ed:56:9c:ea:35:cf:25:c7:
65:9a:ab:95:b4:d7:46:58:67:b7:dc:4c:82:0a:4e:
c7:36:a1:1a:62:1f:24:5d:12:b7:9b:9c:b3:9a:3f:
02:21:d3:47:b5:01:85:0a:4f:d6:54:c5:9c:c1:1a:
a7:aa:45:94:7f:96:1b:3e:91:c8:e2:af:75:1c:a8:
42:e7:da:29:fe:b3:50:3c:bc:21:0b:84:d8:59:7c:
fd:e7:0c:c1:05:22:37:93:83:05:d8:b8:81:41:ff:
2c:2b:eb:f9:f0:ff:4b:b7:a3:a8:67:77:b1:a9:47:
e0:3a:3a:e0:b0:2e:e1:6a:71:40:a3:ea:af:14:3d:
23:f5:9f:2e:59:ac:91:20:16:00:5d:3d:7d:a7:4b:
74:0d:c7:78:f3:9e:00:02:ea:6e:3e:cc:08:c5:4d:
70:0b:c8:b8:85:b0:e7:d4:77:87:72:3a:f3:c0:73:
06:40:16:40:e1:4a:1c:79:2a:35:2f:1d:af:5a:64:
11:ab:d7:b6:b7:56:4a:d0:d8:09:32:6c:5c:1d:f7:
3b:44:4e:ff:8f:d5:a7:9e:af:e4:16:3b:14:5f:8d:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FA:CE:02:88:8F:40:BE:13:89:A9:5A:66:F5:C3:E3:0D:56:27:65
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/v_rOAoiPQL4TialaZvXD4w1WJ2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8071::/48
Signature Algorithm: sha256WithRSAEncryption
64:96:bf:0b:fa:31:a1:65:d9:38:b6:f1:b0:0a:85:64:47:32:
42:9e:62:c6:54:4f:0a:e7:9d:8f:01:d3:e3:c1:3d:36:0a:73:
93:6b:6d:a7:60:83:ed:73:fa:d9:d1:4b:63:d6:29:c9:d4:86:
3e:ed:c1:34:f4:b8:b3:73:97:5d:dd:04:0d:06:4d:ad:f3:b9:
10:c3:0a:07:07:9c:dc:64:09:f6:72:d2:ae:a2:63:0a:47:b8:
91:e1:0c:33:9e:0d:4d:1d:12:7f:e7:12:9a:35:c5:f7:03:76:
b0:49:8d:27:55:66:5c:4a:f2:2a:aa:fe:29:9a:2b:0b:40:8c:
e8:cc:1c:b2:56:93:6d:7a:e3:6e:c4:5b:af:99:a2:77:c6:67:
10:9f:63:f4:97:1a:08:31:ca:1e:fd:84:f2:a8:eb:7c:69:96:
00:f4:68:29:d9:0a:8a:65:5d:4c:46:ec:5d:a3:c2:17:c8:cc:
a4:0d:0b:93:e5:39:44:2a:ab:32:e5:51:f8:e4:81:07:f9:87:
0a:c4:da:b7:9b:31:a5:73:32:b3:3d:03:9d:a5:4c:0d:20:35:
05:89:10:c9:16:d0:43:d4:96:b3:9b:e5:29:b7:87:3a:9c:21:
bd:ea:04:85:02:c8:41:66:df:3d:21:fb:4f:9d:0b:63:e4:e8:
7a:7f:0b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:06 2025 by rpki-client