Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/9jfoHjHhXlQUp0QHnvy8Xfhd38g.roa
File: 9jfoHjHhXlQUp0QHnvy8Xfhd38g.roa (raw, json)
Hash identifier: /upMq7FxxL/VBqHPpqBK/s+Z/2QbORhxGy0ijXbQbKE=
Subject key identifier: F6:37:E8:1E:31:E1:5E:54:14:A7:44:07:9E:FC:BC:5D:F8:5D:DF:C8
Certificate issuer: /CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
Certificate serial: 0194228DCB6F152E995B8F23D0D587F831F9
Authority key identifier: 9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/9jfoHjHhXlQUp0QHnvy8Xfhd38g.roa
Signing time: Wed 01 Jan 2025 15:48:25 +0000
ROA not before: Wed 01 Jan 2025 15:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50877
IP address blocks: 159.255.128.0/21 maxlen: 21
185.182.208.0/22 maxlen: 22
2a0a:f980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:cb:6f:15:2e:99:5b:8f:23:d0:d5:87:f8:31:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
Validity
Not Before: Jan 1 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f637e81e31e15e5414a744079efcbc5df85ddfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e0:50:03:2c:e5:56:d5:69:b0:bc:72:14:52:
a2:ed:d6:34:26:8d:43:ec:dc:ab:eb:e4:29:7f:20:
a6:60:1a:24:24:eb:e7:05:30:7a:82:87:d1:47:ed:
d7:9b:c1:87:7b:d4:91:39:02:3b:7d:e9:04:e6:ea:
00:7b:07:33:58:6c:e3:10:e2:f4:0a:de:ff:0e:32:
ea:38:f7:d5:9c:6d:b2:5f:16:eb:70:5f:97:a5:2b:
85:7a:80:6f:48:ec:82:c7:6f:31:31:34:8c:18:f5:
5b:01:5d:4e:92:19:de:38:02:91:9b:52:68:57:31:
b4:6f:0d:00:1a:5a:f9:85:b9:80:c9:4b:b6:8b:34:
d9:b7:69:a0:89:a7:1a:32:25:38:65:d6:df:17:0d:
ca:43:ef:d1:50:a5:0c:7b:6a:f1:d1:fb:63:44:d8:
6b:c6:af:78:20:d7:eb:41:f3:8d:7d:3f:93:92:b0:
70:33:80:9f:f8:e7:0e:77:54:80:af:27:51:67:d9:
5f:92:2e:fc:cb:57:0e:96:05:17:bd:c2:af:0c:7b:
0d:eb:cb:91:b5:fb:39:df:da:bf:b7:1c:f2:29:3d:
c1:61:e0:b6:22:b2:7f:eb:48:53:bd:e8:52:69:42:
e4:aa:00:9b:eb:c7:ba:a4:a8:ca:21:b4:82:f4:43:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:37:E8:1E:31:E1:5E:54:14:A7:44:07:9E:FC:BC:5D:F8:5D:DF:C8
X509v3 Authority Key Identifier:
keyid:9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/9jfoHjHhXlQUp0QHnvy8Xfhd38g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.128.0/21
185.182.208.0/22
IPv6:
2a0a:f980::/29
Signature Algorithm: sha256WithRSAEncryption
0a:16:49:7a:1a:d3:32:c2:66:4b:76:8c:d1:e9:20:e1:df:be:
83:26:84:62:27:83:7f:a1:d7:be:dc:fa:39:0d:00:ee:c5:d6:
f2:a1:0f:70:29:b7:65:8b:25:ff:4c:b1:a0:66:aa:c9:47:d0:
8c:0c:52:1a:a7:62:18:9f:d9:9e:86:5b:4c:8f:b1:99:56:55:
d3:d7:5a:cb:1c:5e:64:e3:f5:8a:f0:a0:c7:5f:fa:16:e6:5c:
5c:4b:f2:ba:c9:3f:d2:a3:3b:a4:36:85:6c:1e:df:7a:0f:00:
dd:2c:f7:13:80:42:af:9d:63:02:2d:6f:a8:13:f7:79:60:cd:
2e:ed:bf:4c:ee:f6:f9:79:77:3b:66:68:b3:6f:37:ad:68:28:
9d:97:8a:d7:c2:d8:38:3e:93:41:cc:77:f8:3d:26:26:16:09:
07:ec:61:c3:d9:8c:57:3a:9d:ba:dc:c4:d2:54:9c:50:2f:d4:
a1:87:fd:e6:fa:cb:5d:ba:70:9a:94:5e:84:d8:ff:cb:38:ee:
3d:02:47:e0:b6:95:40:6a:b8:f5:07:a5:27:29:43:43:a3:27:
f3:09:a8:1b:5b:c6:00:69:c6:f0:d8:83:43:1d:e8:5f:a7:f6:
5e:30:7f:66:55:98:29:0f:f3:0f:e4:5e:b6:db:a3:ec:a2:19:
18:8e:24:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:22 2025 by rpki-client