Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/NVJ94OZbevHGEGJPauO8yOgu7g0.roa
File: NVJ94OZbevHGEGJPauO8yOgu7g0.roa (raw, json)
Hash identifier: zV1VLUJ6QJt3I76otxCqQp6X0KRlaXT/XwLt7w+Duqc=
Subject key identifier: 35:52:7D:E0:E6:5B:7A:F1:C6:10:62:4F:6A:E3:BC:C8:E8:2E:EE:0D
Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial: 019420D617C026F910A0CCB4290B3423428A
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/NVJ94OZbevHGEGJPauO8yOgu7g0.roa
Signing time: Wed 01 Jan 2025 07:48:09 +0000
ROA not before: Wed 01 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12843
IP address blocks: 2001:67c:1928::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:17:c0:26:f9:10:a0:cc:b4:29:0b:34:23:42:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Validity
Not Before: Jan 1 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35527de0e65b7af1c610624f6ae3bcc8e82eee0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:39:bb:12:60:55:aa:3a:3f:8b:16:b3:a3:
9a:b9:f7:b6:80:6e:d0:10:a8:83:56:06:ff:52:2e:
1e:bf:57:19:25:57:cf:94:28:06:82:21:3d:12:10:
da:c2:bb:8c:bf:98:35:f4:ea:04:0d:14:20:0a:55:
df:f5:c9:0e:dc:96:ee:4b:0c:56:58:34:f2:4a:0a:
d0:af:74:2d:0d:6a:c4:20:f5:8e:16:48:31:47:67:
56:f3:bc:d3:51:c2:f2:60:64:31:b0:eb:39:c7:8c:
e7:d7:6f:10:02:97:89:3c:92:d7:26:a5:6f:5f:86:
09:d7:1e:28:6b:48:40:8a:87:fc:b6:75:a8:ac:10:
87:a7:fc:b5:7c:03:4a:02:64:f3:6d:7f:b3:15:7f:
ed:a0:f8:1f:1c:8c:ca:aa:e2:43:03:2f:88:68:f4:
25:c7:ad:6a:f4:d7:de:44:95:17:ef:3b:4e:4a:8c:
5b:6a:83:e9:e2:f4:46:ae:52:14:43:88:5a:10:1d:
a2:f6:d8:3a:bb:0a:f5:a7:d5:3f:e0:90:a6:06:8e:
d8:be:00:b9:65:57:a0:50:81:84:71:49:b5:f7:b9:
53:a1:be:84:6a:05:96:f9:4e:c2:34:c0:f5:4f:a5:
fe:9d:80:71:73:3c:9f:7d:68:aa:b4:87:f6:3e:09:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:52:7D:E0:E6:5B:7A:F1:C6:10:62:4F:6A:E3:BC:C8:E8:2E:EE:0D
X509v3 Authority Key Identifier:
keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/NVJ94OZbevHGEGJPauO8yOgu7g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1928::/48
Signature Algorithm: sha256WithRSAEncryption
6e:58:51:c7:af:b5:1f:cb:94:70:e8:fc:91:a4:ab:6d:fe:77:
6f:59:e5:2e:67:4b:e1:fb:d0:9a:69:7e:4a:5f:ac:3c:2d:38:
e6:c8:b5:ff:83:5a:76:f2:d8:2b:dd:67:0d:3a:69:44:30:e5:
59:c8:59:5c:c8:64:5e:e8:25:ca:dd:99:29:9d:32:d2:00:27:
93:ed:be:19:fd:5a:f4:fe:9c:88:7c:00:ce:ed:cd:6f:1c:d2:
0c:04:1e:3b:b3:be:46:08:e0:07:70:e5:68:1b:5d:2a:39:3e:
97:02:6b:ef:26:e0:1e:23:8a:39:fd:8e:00:38:e9:76:21:cc:
66:e9:56:99:6e:75:36:9c:1e:94:fd:63:05:6a:35:8e:5e:0d:
a2:f6:f4:2d:d2:ef:17:af:3e:cb:c1:09:ac:19:07:bc:1c:34:
30:ab:ed:3f:82:24:a0:5b:fe:59:55:e5:92:98:46:a6:97:34:
c8:9c:80:46:18:59:48:e2:7b:8e:60:9f:45:69:00:8b:4c:bc:
db:d9:05:67:13:da:b4:86:4c:b9:ca:9d:d0:4d:17:8e:13:e9:
80:7a:79:99:5a:04:2c:8d:f3:09:f7:b1:ec:98:5a:2a:82:9d:
5b:db:bf:b2:a1:6f:1a:23:61:7d:f4:14:1c:2d:10:ba:08:07:
0f:c3:e7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:20:36 2025 by rpki-client