Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/y9omENFEsO0zpOFYhDtb9R6Xk5A.roa
File: y9omENFEsO0zpOFYhDtb9R6Xk5A.roa (raw, json)
Hash identifier: Q4YqwvMkQOvhuLk5Hkuj7JwWdsTbMdg/Nt+Vo67fAog=
Subject key identifier: CB:DA:26:10:D1:44:B0:ED:33:A4:E1:58:84:3B:5B:F5:1E:97:93:90
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBD8ECBBD55B31BD3B48AB0E94BFD2
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/y9omENFEsO0zpOFYhDtb9R6Xk5A.roa
Signing time: Wed 01 Jan 2025 17:48:37 +0000
ROA not before: Wed 01 Jan 2025 17:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201106
IP address blocks: 2a0c:9a40:808d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d8:ec:bb:d5:5b:31:bd:3b:48:ab:0e:94:bf:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbda2610d144b0ed33a4e158843b5bf51e979390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:b9:a1:51:92:12:71:77:d7:5a:a9:ca:a3:
a5:c3:08:72:21:58:12:78:11:1d:8a:f0:db:d4:41:
02:3d:b5:89:64:12:99:a6:a4:58:89:94:2a:45:d8:
1a:fb:b6:ea:58:6a:2a:f8:72:53:95:7f:31:c6:47:
0e:0c:69:cb:79:2d:62:85:18:3f:7b:03:ad:e9:7d:
13:c2:f0:16:6e:2e:fa:69:dd:01:8a:a0:b1:f8:fc:
4f:b5:cf:f3:d6:95:7c:a6:92:70:fc:75:85:52:7b:
e1:60:f1:6a:79:d3:aa:9c:9d:b3:50:a5:66:48:c5:
3e:6b:a0:0f:b0:27:a7:11:98:b0:a9:02:2c:26:86:
2f:7a:79:cd:b3:cd:93:1c:d0:ad:26:5d:ac:0e:d5:
9f:6f:33:03:28:39:e1:96:77:be:08:c1:6f:ca:b2:
31:84:09:70:b8:ec:0d:db:69:d5:b0:0e:f7:2d:ea:
5f:e6:31:b2:3e:95:7b:bd:a2:f5:3b:b7:d4:56:98:
2e:37:7a:6a:f9:90:7b:b9:84:b7:0e:77:df:e6:88:
ee:9f:c2:1a:31:ee:3c:91:b5:cd:57:0e:4a:60:a9:
8c:f2:a1:e5:20:91:0a:24:26:dd:5e:18:0a:cd:83:
32:b1:2a:dd:7b:fc:d8:3c:17:28:86:57:bb:fa:1a:
e5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DA:26:10:D1:44:B0:ED:33:A4:E1:58:84:3B:5B:F5:1E:97:93:90
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/y9omENFEsO0zpOFYhDtb9R6Xk5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:808d::/48
Signature Algorithm: sha256WithRSAEncryption
4b:3a:36:c3:39:d8:51:85:fd:f4:1c:84:68:a6:7b:b1:97:a8:
8e:19:9c:00:62:62:49:cb:5b:15:51:ac:eb:fb:8c:3a:9a:50:
6e:1a:bd:b4:df:cc:a1:a2:1f:d8:0c:22:3d:3b:92:2b:02:24:
ba:ca:22:c1:6d:3d:76:72:e8:8d:8b:44:fd:dd:d7:88:25:34:
7a:31:df:91:5a:d1:5e:10:0b:21:3c:cc:0e:c1:32:d6:a0:18:
4b:2d:2d:32:0e:4f:11:f7:cf:a4:78:b2:2b:b0:cf:74:0d:7e:
c4:88:8f:bf:c8:cc:37:09:36:47:fb:8d:6c:0c:07:1e:71:b5:
a4:aa:e6:f4:19:89:86:61:50:2b:67:0e:7c:d0:be:a8:a4:f3:
ef:2a:55:98:e9:77:6e:e9:c4:52:7d:69:53:44:00:21:01:1d:
bd:a2:7c:1d:0f:4b:a9:bf:77:10:9c:d8:1c:69:00:7f:0b:fe:
80:3f:11:e0:48:14:6c:99:71:55:5a:45:c2:60:c6:65:42:60:
3d:d8:1a:47:99:44:43:e5:3b:db:96:11:6a:78:a9:7c:9a:61:
71:12:ba:c7:0b:aa:4f:2b:f3:4c:6c:53:50:d8:f1:b1:89:da:
2d:56:9c:0a:bb:98:e1:22:2a:ac:88:50:12:4a:7c:40:d9:3e:
a2:0d:16:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:38 2025 by rpki-client