Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/Np1AqOGsTVm4b7PU4q2Ym4AhTQ4.roa
File: Np1AqOGsTVm4b7PU4q2Ym4AhTQ4.roa (raw, json)
Hash identifier: gOor81zffrAZ51A4wHFBhBWmMuS0TeHsEmFrT2SiKO8=
Subject key identifier: 36:9D:40:A8:E1:AC:4D:59:B8:6F:B3:D4:E2:AD:98:9B:80:21:4D:0E
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 019421B1FE474018B2D7F7D12903FDF1C5C7
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/Np1AqOGsTVm4b7PU4q2Ym4AhTQ4.roa
Signing time: Wed 01 Jan 2025 11:48:20 +0000
ROA not before: Wed 01 Jan 2025 11:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33660
IP address blocks: 2a03:2887:ff46::/48 maxlen: 48
2a03:2887:ff47::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:fe:47:40:18:b2:d7:f7:d1:29:03:fd:f1:c5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Jan 1 11:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=369d40a8e1ac4d59b86fb3d4e2ad989b80214d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:d6:79:7b:99:2e:fb:54:5b:19:b9:f1:dd:
05:f5:54:0e:9d:2c:ae:dc:03:da:a2:ff:72:f4:e5:
8d:05:63:87:3d:3b:bb:1a:94:60:c9:40:3a:91:06:
05:70:41:69:32:f1:5b:b3:08:bb:75:78:c6:5e:68:
8a:5e:42:85:29:0b:d0:95:d9:dd:2c:be:54:89:a5:
6d:06:e7:95:3e:de:e8:02:e9:d8:51:f8:8e:f0:0c:
9e:c5:ea:d2:32:b5:cb:a1:22:c0:50:09:00:4a:53:
e7:53:aa:8c:2f:e4:24:df:70:ec:35:ee:5d:c7:55:
e3:32:a4:8f:40:63:a0:5a:6e:cf:74:ec:5d:26:f7:
c9:4b:c7:ce:f4:87:75:65:7f:7d:96:d7:b4:5d:96:
60:03:6b:a3:b1:37:2a:5d:9a:f9:07:38:e4:30:ae:
3d:a1:c1:29:cd:15:eb:eb:26:25:93:f9:4e:fb:cf:
b2:6b:a5:cb:41:63:86:c0:cd:cc:bb:be:88:44:ff:
81:4c:72:4e:c0:5e:4c:dc:56:a4:0f:a8:68:58:8b:
40:35:91:b1:fc:5e:ab:7e:1c:a8:c5:c3:1f:07:40:
16:88:8b:5c:33:7b:16:fc:db:07:d0:8b:d3:12:8c:
36:b1:08:65:65:f4:7b:bf:76:ac:b2:48:11:d7:30:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9D:40:A8:E1:AC:4D:59:B8:6F:B3:D4:E2:AD:98:9B:80:21:4D:0E
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/Np1AqOGsTVm4b7PU4q2Ym4AhTQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff46::/47
Signature Algorithm: sha256WithRSAEncryption
c9:b3:69:3f:c1:93:02:78:71:1b:0c:11:13:3e:1e:ca:6c:c1:
08:b2:b6:08:c3:4b:cc:55:bf:30:c6:dc:69:31:d3:38:29:a2:
55:e2:47:08:42:46:68:f6:fa:cf:ee:a4:0c:a9:20:bb:fb:d9:
8f:a2:63:a3:3c:46:bb:fe:b5:22:6d:27:dd:85:b6:8a:58:54:
43:e9:6f:ca:9b:57:e5:b8:b7:38:2f:1c:28:92:35:43:c9:7a:
8b:05:0f:a9:ab:82:86:8e:ab:75:3d:e2:d3:53:09:3a:e9:3f:
e0:14:1c:d2:ff:fd:72:b9:78:62:a6:88:72:2a:a5:e3:39:10:
b8:38:aa:21:29:38:e0:39:59:35:f9:68:49:92:58:9a:19:42:
3e:33:2d:ac:a4:d7:4b:3d:ae:eb:99:8b:d5:9a:83:e6:0c:c6:
bb:ee:77:6b:45:27:1a:d7:b0:e0:64:8e:dc:26:e3:74:f0:c7:
7d:af:dc:95:ca:eb:a8:ac:fd:ac:ce:4b:5d:71:4b:f6:8f:56:
d9:3f:89:05:49:fd:fa:52:c3:5e:97:f8:b6:aa:b2:5d:74:77:
df:84:02:43:f8:ec:8e:59:6a:c1:4b:fd:6b:3f:f9:2d:3e:0c:
93:b9:46:b4:fa:69:2d:fb:fc:f2:0f:9b:96:9e:df:86:8e:b0:
dd:0a:3a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:09:28 2025 by rpki-client