Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/nX1l9uEaP3hKft0f6nr66330FaY.roa
File: nX1l9uEaP3hKft0f6nr66330FaY.roa (raw, json)
Hash identifier: Ify3evSlWibc6XFuSTIlXp6BEPgQD/cUtILAv8sgqKU=
Subject key identifier: 9D:7D:65:F6:E1:1A:3F:78:4A:7E:DD:1F:EA:7A:FA:EB:7D:F4:15:A6
Certificate issuer: /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial: 01942067CB90FF0F643F3B759855A35C3A04
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/nX1l9uEaP3hKft0f6nr66330FaY.roa
Signing time: Wed 01 Jan 2025 05:47:40 +0000
ROA not before: Wed 01 Jan 2025 05:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 2a09:a447:ac1e::/48 maxlen: 64
2a09:a447:ac1f::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cb:90:ff:0f:64:3f:3b:75:98:55:a3:5c:3a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Validity
Not Before: Jan 1 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d7d65f6e11a3f784a7edd1fea7afaeb7df415a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:75:72:f4:08:a8:cd:ad:ea:fe:14:0f:24:
e1:78:3c:00:61:4c:6e:f1:10:9f:35:2b:3c:b3:8d:
8a:e0:76:72:3e:5c:d7:63:02:17:c8:c0:5d:e7:78:
04:57:94:66:c1:56:a0:35:e0:9a:17:d4:4c:96:99:
82:e4:8b:e8:42:fb:c9:b5:24:a4:1a:05:74:74:53:
f2:5b:26:87:6e:8a:46:f6:29:4b:e6:86:55:cb:a6:
8c:dd:81:b2:e2:01:06:e2:5e:9f:d1:34:9b:3a:d8:
8e:7f:73:67:fb:4f:5c:60:d6:23:41:b6:d9:7c:05:
72:c6:58:43:2e:e3:9e:e9:60:fb:ac:3c:ba:5e:4c:
41:f1:61:ab:91:bb:9e:4d:2b:c2:cc:22:80:2a:45:
a6:6e:c1:13:47:ae:95:dc:f4:30:f6:dd:eb:8d:d3:
04:c1:59:aa:ee:86:8d:8c:75:62:55:bd:f1:e9:cf:
47:0b:d6:19:6d:3a:5d:b0:65:08:89:bb:f1:90:f7:
7f:2f:42:46:ea:98:46:1f:9d:d2:10:0f:7d:c4:52:
57:5d:9e:86:31:fa:34:5c:c8:82:18:d6:15:69:74:
a9:46:69:c5:46:7c:99:81:67:83:b5:64:e8:6c:bd:
15:50:58:be:89:6b:a3:85:fd:e6:04:e0:48:51:00:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7D:65:F6:E1:1A:3F:78:4A:7E:DD:1F:EA:7A:FA:EB:7D:F4:15:A6
X509v3 Authority Key Identifier:
keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/nX1l9uEaP3hKft0f6nr66330FaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:a447:ac1e::/47
Signature Algorithm: sha256WithRSAEncryption
7a:04:9f:34:bd:2f:5d:ff:1e:87:c4:d3:4c:9d:50:1f:99:6c:
01:b7:21:42:86:81:24:91:b5:81:03:96:05:a5:43:09:83:1a:
97:fa:34:e3:9b:05:9d:01:31:12:ed:02:51:77:3c:b8:c2:2d:
c3:89:c6:dd:c3:21:c7:95:27:f8:6d:0e:c7:26:19:a5:93:d6:
15:a6:7e:de:e1:39:4d:01:49:28:05:43:d5:b5:78:bc:e3:b7:
79:c3:0e:fc:a9:5b:04:e2:3b:02:3b:e3:84:1d:4f:d9:df:02:
f6:ef:b5:4d:3a:58:55:4e:f9:b8:7f:db:74:66:c0:b3:f7:d0:
af:fa:97:ea:33:0c:d7:e6:36:d7:91:61:03:24:f2:10:1b:6b:
96:0a:d3:08:89:0d:7f:1a:3f:7c:60:0b:bc:ff:2e:ec:af:e9:
8e:26:8a:cb:c3:f8:69:52:8d:7e:2c:c0:c7:a4:d9:a4:84:2b:
4c:77:e6:8b:41:87:a8:7a:3c:f0:9d:28:ad:b7:d7:45:53:1d:
2b:5c:16:ed:a6:dc:68:4d:61:3c:d9:1f:fd:89:f4:91:d4:ab:
4a:4c:a6:1e:52:90:5a:a6:c9:a7:6a:85:3f:a3:75:c1:12:1f:
b1:6f:1d:96:39:ba:41:50:92:21:81:b1:fb:b4:94:58:ea:d0:
fa:5a:9e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:52:53 2025 by rpki-client