Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xvc6vvAEY3Kqheb7AWSs83MY744.roa
File: xvc6vvAEY3Kqheb7AWSs83MY744.roa (raw, json)
Hash identifier: RdtnZPe6k4y4/7qZvBXpnxCogfMUC+lcwYKT627IS9M=
Subject key identifier: C6:F7:3A:BE:F0:04:63:72:AA:85:E6:FB:01:64:AC:F3:73:18:EF:8E
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBEF4ABFFFAF78A5ADBF8D5D44EC1D
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xvc6vvAEY3Kqheb7AWSs83MY744.roa
Signing time: Wed 01 Jan 2025 17:48:43 +0000
ROA not before: Wed 01 Jan 2025 17:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213919
IP address blocks: 2a0c:9a40:8a50::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ef:4a:bf:ff:af:78:a5:ad:bf:8d:5d:44:ec:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6f73abef0046372aa85e6fb0164acf37318ef8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:48:9e:1f:59:e0:54:34:5c:18:87:59:b1:
f7:53:55:b7:4f:53:1f:61:82:4e:97:88:61:a7:e8:
bc:0a:6e:b7:99:de:be:b3:2c:06:c1:0e:f5:46:5a:
c1:74:60:a9:c5:f7:cc:52:93:18:0e:2d:07:53:88:
11:34:cc:2f:db:3e:b1:0d:35:c9:8f:29:3e:05:97:
b1:92:d2:67:67:34:e6:b7:ba:92:80:f3:29:91:35:
b0:72:6b:f3:d3:69:0a:f9:3e:c9:bd:8d:4b:61:fc:
2f:e4:33:ef:47:a7:2b:36:38:1a:d2:fa:d7:43:bf:
33:0b:4c:72:6d:1a:e5:44:72:e8:62:d0:a8:a0:cb:
34:1c:be:11:a4:a6:49:eb:96:de:53:21:00:82:1e:
bc:c6:2c:f5:4e:0b:9c:c5:af:3a:1f:ee:28:b8:8d:
44:ef:2f:60:9b:0e:96:80:25:ab:c2:d0:7f:65:8b:
30:50:7f:b3:d3:fc:50:fb:5c:23:80:44:94:0c:f1:
4a:ca:a3:82:97:f2:a7:1f:a1:37:f9:02:08:48:05:
35:d3:38:13:b1:0c:f0:00:1c:0e:68:59:2e:50:90:
6c:21:04:52:ef:a9:b4:c1:c8:a7:ae:8f:3d:c8:b7:
4d:c3:d4:5d:7b:a5:9e:8d:66:34:93:5b:06:da:c2:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F7:3A:BE:F0:04:63:72:AA:85:E6:FB:01:64:AC:F3:73:18:EF:8E
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/xvc6vvAEY3Kqheb7AWSs83MY744.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8a50::/48
Signature Algorithm: sha256WithRSAEncryption
21:bb:ef:8c:5b:52:8a:2c:1e:99:3e:00:87:be:02:2a:5f:62:
ae:55:06:a0:11:8a:c6:93:f0:e1:43:1e:6f:24:93:e2:b5:99:
3f:ab:6e:0a:6b:d5:7b:e5:4d:6e:7a:b2:08:4a:d2:5f:ea:7f:
1d:94:14:68:d9:2f:38:77:41:40:b5:2a:9e:ff:43:c4:9c:3d:
75:32:b9:21:2f:41:ff:59:68:dc:94:3f:62:bc:c5:65:60:32:
ee:71:10:17:bb:01:8c:00:5d:4b:b8:3b:38:ed:40:a9:5f:c3:
eb:34:15:da:61:27:88:db:1f:29:7b:60:eb:30:fd:a9:3a:b1:
6d:d0:b2:18:d0:cb:7d:52:7f:cf:99:e2:ef:7f:14:a5:26:47:
6c:39:0d:10:d2:23:12:3d:86:22:94:69:17:10:fc:2d:4f:1b:
f5:ff:64:50:a9:7b:30:df:a4:19:20:8c:18:85:7e:33:2f:13:
44:a9:b3:56:78:08:6d:95:f2:16:8c:56:e3:d8:94:fc:d6:92:
41:3c:08:6e:40:33:86:f4:11:e7:af:18:ca:c0:26:9c:ca:7f:
1e:26:91:60:80:e1:a7:d2:44:9f:03:b3:81:dc:40:10:62:97:
b2:31:7c:e5:08:55:d9:b9:0c:48:92:27:9b:9f:24:b6:cb:a9:
b6:92:f6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:31 2025 by rpki-client