Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/nNICaFb7G3xV0xaZvY4tLFZeqjU.roa
File: nNICaFb7G3xV0xaZvY4tLFZeqjU.roa (raw, json)
Hash identifier: 5uzWSjZq0ATl8Nrn/VGx6JZA+5X6g81sHleJ+o0B2vM=
Subject key identifier: 9C:D2:02:68:56:FB:1B:7C:55:D3:16:99:BD:8E:2D:2C:56:5E:AA:35
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 0194221FB86884F4AC08BFCFEC223FD7F0A5
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/nNICaFb7G3xV0xaZvY4tLFZeqjU.roa
Signing time: Wed 01 Jan 2025 13:48:11 +0000
ROA not before: Wed 01 Jan 2025 13:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202685
IP address blocks: 2a00:8ac0::/32 maxlen: 32
2a04:3c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b8:68:84:f4:ac:08:bf:cf:ec:22:3f:d7:f0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Jan 1 13:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cd2026856fb1b7c55d31699bd8e2d2c565eaa35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ff:0f:12:9e:03:40:73:24:28:6e:66:4a:cd:
79:6d:ee:bf:09:51:ed:e3:52:2a:e6:a4:cc:0c:07:
81:aa:1d:24:bf:80:e8:d5:f8:ac:98:bf:53:5c:12:
f5:32:34:18:24:ab:f3:8a:b9:6b:46:63:dc:e6:a0:
f1:b3:64:c8:5b:78:5b:dd:b7:c6:65:1e:5c:ae:31:
fd:76:f0:6b:0e:0e:5a:eb:c3:e3:49:49:ea:99:9e:
e0:9b:95:fe:65:16:07:78:79:c5:e8:17:9d:4b:da:
9e:57:99:12:29:79:2d:ab:be:7e:fc:24:e1:82:3d:
46:de:e6:0a:9c:cf:a0:9c:25:38:52:80:75:1b:60:
df:34:4c:9d:39:3e:d4:f2:70:08:6e:93:16:98:25:
35:a8:f2:64:49:d6:d6:21:84:a3:f6:16:f0:dc:99:
35:9c:28:4f:89:01:50:78:08:c5:73:b9:62:c0:99:
61:d1:33:60:00:a7:b1:e7:7b:7d:2e:35:c4:bb:de:
05:a1:c1:17:ac:6c:ed:a6:7d:c6:a1:c0:d9:e4:92:
82:9a:55:0c:b9:51:0d:08:88:b1:1b:40:19:31:bc:
a8:eb:b3:65:8a:64:ad:a0:74:38:1b:b4:46:55:f3:
c8:10:56:3f:be:28:de:a6:c7:af:ae:49:82:05:f5:
b8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D2:02:68:56:FB:1B:7C:55:D3:16:99:BD:8E:2D:2C:56:5E:AA:35
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/nNICaFb7G3xV0xaZvY4tLFZeqjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8ac0::/32
2a04:3c40::/29
Signature Algorithm: sha256WithRSAEncryption
01:8c:06:2d:aa:ed:32:10:80:95:8d:ae:9f:18:15:09:56:83:
5c:79:49:88:9c:52:b6:c6:ed:a1:84:2d:c6:9c:fa:31:ce:36:
6d:a0:78:b8:87:bb:e2:7a:2d:28:e8:86:a7:fc:4d:f7:11:c7:
09:9d:62:29:d1:61:cb:31:f8:53:be:59:80:34:bf:f4:fb:2f:
54:89:ba:f1:34:a0:88:a8:42:ed:5a:95:92:f6:5b:4d:06:58:
ed:70:63:17:b0:16:f2:64:38:ca:f7:df:c9:d5:65:b6:b2:7c:
13:84:e6:79:78:65:0a:f1:9d:c5:a2:86:40:0b:1c:5f:61:26:
9c:f7:d6:53:e4:9c:51:ed:4e:f2:91:39:29:4d:7c:ea:29:05:
71:9c:b7:50:54:7c:e4:88:87:f2:cd:fb:c2:be:8d:3a:b7:4e:
05:7a:16:54:d3:c4:7d:8c:7c:a6:b2:15:7d:0c:a8:64:74:66:
0d:a2:3c:5c:c5:83:65:8e:56:20:38:6d:75:b0:d7:11:22:cf:
e4:df:14:a2:8d:84:c3:88:21:f3:48:93:7b:50:d0:a4:79:3d:
e0:65:3e:33:9f:86:57:66:dd:4d:3e:04:c2:31:b3:0e:a6:cf:
32:da:64:35:8a:b6:fe:10:9a:f8:67:f5:6f:e3:37:3f:64:0e:
10:1d:69:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:52 2025 by rpki-client