Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/SU9AQ9blAXTI6dmft2PYXIZ4D6s.roa
File: SU9AQ9blAXTI6dmft2PYXIZ4D6s.roa (raw, json)
Hash identifier: f9GEO2mKmV3YeM6oy8Q/SaJoAwb8zCw8nw1p8bg3GlE=
Subject key identifier: 49:4F:40:43:D6:E5:01:74:C8:E9:D9:9F:B7:63:D8:5C:86:78:0F:AB
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01941FFA33E22169D42A69D3DE883BA2CE1F
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/SU9AQ9blAXTI6dmft2PYXIZ4D6s.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62217
IP address blocks: 2a04:a140::/32 maxlen: 32
2a05:2d00::/32 maxlen: 32
2a06:3e80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:33:e2:21:69:d4:2a:69:d3:de:88:3b:a2:ce:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=494f4043d6e50174c8e9d99fb763d85c86780fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7c:3d:0f:9b:65:8f:fa:53:ec:da:78:98:68:
9f:32:da:06:7a:05:4a:57:c1:a3:ec:f5:25:96:81:
91:9f:ad:67:f1:09:89:f1:85:be:bf:79:44:32:a4:
e9:46:2f:db:84:66:c3:62:94:7a:f0:6a:cc:e5:9d:
d9:ef:ad:30:29:a3:95:ae:48:f0:d6:ca:c4:d0:7a:
bd:e4:2e:60:67:1d:dc:d9:a3:f2:31:4b:7f:86:2c:
f9:fd:58:e5:b2:5d:89:8f:b6:0a:ef:87:a5:d3:bf:
17:f3:68:b0:4b:5b:df:e9:bf:96:c8:24:58:e9:9a:
cd:a2:3f:2e:b8:30:bb:17:50:a1:1a:f7:02:2f:24:
08:5d:68:dc:ed:ce:93:60:44:98:ec:32:f0:a1:63:
25:03:76:a1:38:7f:9b:9a:d5:ce:76:c4:d3:c2:d1:
80:19:e7:51:94:a5:d5:fe:0b:28:8d:ff:af:52:fe:
ab:08:11:db:0a:80:02:7f:c9:f8:ee:90:ae:e3:82:
c8:f3:d3:20:c7:54:fa:86:f2:af:fa:87:b7:a7:4c:
98:fd:5b:9e:47:11:bc:b0:dd:ff:80:c6:eb:92:89:
fb:8d:b1:62:94:0a:18:14:46:67:17:47:e7:cd:3b:
e3:a2:62:3c:d5:2e:7c:e4:2f:2e:6c:62:3f:f1:f0:
52:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4F:40:43:D6:E5:01:74:C8:E9:D9:9F:B7:63:D8:5C:86:78:0F:AB
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/SU9AQ9blAXTI6dmft2PYXIZ4D6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:a140::/32
2a05:2d00::/32
2a06:3e80::/32
Signature Algorithm: sha256WithRSAEncryption
60:d1:9d:74:81:f9:62:50:b7:8b:73:10:73:00:48:5a:ea:c2:
bc:08:4b:d1:76:cc:95:df:9b:b7:4a:86:19:2d:d2:41:20:f6:
80:90:2f:e6:65:a7:1f:f4:cc:41:6c:4b:db:d6:11:aa:66:14:
8d:fe:db:f2:f4:dc:ce:fb:04:ae:d8:1a:30:f6:bb:3f:8f:82:
3f:65:50:de:3c:08:50:9d:91:c0:b7:f9:f6:6f:9f:a9:53:52:
13:f3:19:39:ec:95:12:c1:16:90:c3:0f:31:e7:aa:f1:a0:22:
64:91:b7:75:6d:7e:62:94:31:08:30:6e:e7:cd:3d:20:cc:b5:
a6:d7:f6:61:a6:c1:95:d5:d7:2d:07:5c:36:8c:b9:5d:08:78:
54:0d:9f:93:06:fa:b9:4e:78:9b:22:79:3e:c7:57:80:b3:98:
3c:24:b6:24:a3:55:84:55:69:9d:c3:7e:46:8b:ea:30:64:89:
19:d9:53:d8:71:5e:2b:5c:37:cd:9a:dd:dd:9e:97:fc:4e:85:
f2:1c:e5:d5:15:1f:6d:76:ed:c2:00:03:02:c4:cf:b7:3a:f1:
ed:cd:15:d6:fd:a3:71:7d:89:aa:89:9f:a1:45:cb:43:b4:53:
51:2c:8a:56:53:b2:d1:bb:fb:80:ad:00:78:49:6a:fe:e2:a0:
1f:4d:9e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:55:35 2025 by rpki-client