Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Nf4HvEGyFdJaZ55NzcAbgQ8tyKw.roa
File: Nf4HvEGyFdJaZ55NzcAbgQ8tyKw.roa (raw, json)
Hash identifier: 5jYKkFvljl/sNCuuK9Ccg8C+9QQrnGFhMRE89ePvdFM=
Subject key identifier: 35:FE:07:BC:41:B2:15:D2:5A:67:9E:4D:CD:C0:1B:81:0F:2D:C8:AC
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B559C0DF42679AD309F0A7A0CF0F62
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Nf4HvEGyFdJaZ55NzcAbgQ8tyKw.roa
Signing time: Thu 02 Jan 2025 15:49:43 +0000
ROA not before: Thu 02 Jan 2025 15:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198448
IP address blocks: 2a10:4646:350::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:59:c0:df:42:67:9a:d3:09:f0:a7:a0:cf:0f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35fe07bc41b215d25a679e4dcdc01b810f2dc8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:dc:2f:77:a1:cf:93:6f:8b:c4:9f:db:24:
40:e0:7f:27:a1:8d:9d:c3:24:f6:49:17:ba:df:1c:
65:03:70:96:b9:10:b3:f9:9a:58:0f:0a:64:29:2c:
76:ec:2c:f7:4e:48:65:af:11:c1:32:ad:d6:d9:00:
cd:68:6b:2a:c7:43:d9:7c:79:d0:df:e5:dc:0f:0b:
df:39:57:58:d5:ec:f2:4b:54:58:fb:f8:90:d6:43:
6e:12:1c:16:c3:f8:e3:ed:8d:8c:32:8e:5d:7b:9f:
53:d6:20:47:0b:ac:e8:56:2e:cf:0f:30:47:d3:1b:
5d:ab:88:49:12:17:0a:da:4b:ae:ab:b1:71:4c:2c:
e7:b3:7a:a6:18:f7:6a:b7:a9:8e:57:81:24:22:77:
7c:11:12:49:d2:fc:04:67:32:98:a6:66:65:93:71:
23:dc:96:ec:de:6c:73:6c:71:45:5c:88:6a:bd:dc:
06:4f:c4:12:6b:69:83:2e:04:e8:da:26:2b:bd:35:
79:86:d7:52:4b:c8:78:de:31:03:2c:a5:61:a2:29:
5d:cd:e9:7c:8f:3f:95:35:07:3f:e9:8d:7b:08:e7:
2d:34:d0:90:46:a3:4e:1f:8b:59:cf:e6:7c:4e:8b:
4f:fd:59:25:23:12:44:2d:18:b1:c9:d6:fa:fb:30:
8a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FE:07:BC:41:B2:15:D2:5A:67:9E:4D:CD:C0:1B:81:0F:2D:C8:AC
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Nf4HvEGyFdJaZ55NzcAbgQ8tyKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:350::/44
Signature Algorithm: sha256WithRSAEncryption
2d:fa:ac:c0:28:41:fe:27:f1:d2:77:d4:16:4d:a0:6d:fc:14:
9b:57:9b:dd:ca:05:1c:30:f1:60:71:40:47:76:79:bb:a3:42:
d8:31:77:28:6a:52:81:2e:e2:33:65:8c:79:3e:7c:01:ab:1c:
74:e4:02:80:86:55:54:c9:10:eb:57:43:ef:45:71:bd:6d:9d:
8b:bb:22:f8:f1:49:a4:93:29:db:f6:d2:a3:df:b1:04:f6:04:
80:a8:98:ad:a3:ee:17:16:c6:4b:05:22:16:00:71:1a:c4:3d:
ce:e8:8b:65:f0:d3:98:e4:4a:c0:8f:68:c3:f2:46:4d:93:2f:
f2:af:67:ce:4c:36:ea:f4:53:f0:58:a4:d3:7f:2c:13:c9:94:
c7:f9:0e:1b:8f:a3:9b:20:13:99:54:8f:76:f4:5e:6c:c3:ed:
30:52:61:2b:b0:13:89:6f:8f:f0:57:67:71:08:0f:ba:ad:c9:
c2:24:84:38:9d:d4:9c:fd:6c:96:4b:82:66:75:ca:a4:e6:20:
ad:8d:23:00:20:61:a0:6b:e5:3d:d9:8b:d6:30:18:ab:2d:8f:
a4:fe:80:a8:80:80:85:0b:92:38:57:f5:af:4a:f1:f4:de:b1:
e8:8e:e3:16:4b:f7:95:c5:bf:3b:0a:71:d7:0f:b2:a7:d6:51:
59:7b:44:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:11:50 2025 by rpki-client