Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/n8Jg-09IRLEvWhyARqXPQnnngME.roa
File: n8Jg-09IRLEvWhyARqXPQnnngME.roa (raw, json)
Hash identifier: W+fpmwbG7E+EMiYkp3kyeO8aFe/EB+Siv8hsraLo3hE=
Subject key identifier: 9F:C2:60:FB:4F:48:44:B1:2F:5A:1C:80:46:A5:CF:42:79:E7:80:C1
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01878063E0DAB04CEFDE2D36D72022D50442
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/n8Jg-09IRLEvWhyARqXPQnnngME.roa
Signing time: Fri 14 Apr 2023 15:30:41 +0000
ROA not before: Fri 14 Apr 2023 15:30:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59524
IP address blocks: 2001:680:4008::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:63:e0:da:b0:4c:ef:de:2d:36:d7:20:22:d5:04:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Apr 14 15:30:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fc260fb4f4844b12f5a1c8046a5cf4279e780c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:67:f4:89:a9:3f:5a:09:41:92:e6:a9:f3:
e5:e6:4e:24:9a:d8:11:0c:8b:15:71:14:2e:f8:86:
8f:d5:59:25:79:0b:31:4d:74:e3:b1:76:56:f3:a0:
8f:d4:af:37:2d:1b:e3:a5:8d:98:33:e7:d9:e1:22:
2c:ec:6d:6f:5f:b7:45:9b:d6:ab:02:85:56:bf:f1:
ae:bc:8e:18:30:dc:c7:b9:3d:a3:f7:03:88:df:b3:
06:b4:13:06:59:2d:13:38:e5:20:b2:66:fc:a3:a4:
23:e2:06:c7:dc:81:5a:75:46:29:20:13:3a:43:30:
9b:6b:6b:b5:22:f8:1c:bd:b0:54:38:a0:51:c4:46:
d9:79:25:e3:cb:3a:e6:26:be:20:db:df:c1:55:ca:
86:81:bf:9a:67:6f:ec:94:5d:d2:38:39:4f:1b:81:
49:89:5f:d4:a2:a9:7e:0c:fd:8e:8f:9d:76:83:2a:
88:73:64:ad:b1:6a:51:13:4f:71:9e:06:67:60:bf:
c5:d0:e3:42:1b:07:5b:6f:74:87:59:5b:fc:07:f8:
4b:69:3d:84:ad:cc:f6:c8:d6:6c:4e:87:7d:52:8f:
2c:24:23:bf:96:e2:93:f9:33:06:a8:3f:4a:86:53:
2f:1d:69:5c:36:99:66:8c:47:57:b8:04:91:70:9f:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C2:60:FB:4F:48:44:B1:2F:5A:1C:80:46:A5:CF:42:79:E7:80:C1
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/n8Jg-09IRLEvWhyARqXPQnnngME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:680:4008::/48
Signature Algorithm: sha256WithRSAEncryption
38:47:e5:5c:b9:b3:68:b1:b1:da:57:24:e2:fc:97:7e:38:48:
cd:95:0c:8f:81:7f:dd:fb:d2:62:0d:7c:e7:99:8a:00:b1:7a:
7d:ae:af:79:5e:28:81:dd:cd:32:44:c3:91:e1:d4:51:4a:f7:
e7:87:94:6f:6c:44:b0:1b:1e:29:2c:43:98:be:1a:6b:c5:a3:
e9:f1:89:93:55:dc:d7:69:82:09:71:d5:9b:fd:7f:55:40:b3:
05:90:cc:0e:61:cc:32:ad:83:c9:6a:20:c3:0b:7d:8f:d0:74:
83:f2:51:09:05:e3:1d:89:54:23:44:e5:ae:94:6f:ca:53:1a:
5f:44:d3:1d:9b:94:f5:45:8f:23:11:f2:e3:dd:f4:80:eb:88:
5b:28:52:99:ea:91:78:f6:71:bb:c6:f1:31:b9:bf:71:31:68:
61:60:a3:b8:ba:f4:88:d2:4d:c6:32:0e:d6:d0:2e:18:0f:28:
12:3e:34:98:2a:cf:ae:60:5b:d2:35:a1:e1:93:f8:f4:c3:9f:
2d:2e:a8:cc:db:88:66:b7:6d:20:74:92:4e:0f:95:48:fa:2b:
1a:14:bc:38:2c:65:f5:21:f9:27:2a:e8:d6:7a:71:35:b2:47:
a0:68:ec:df:c4:44:eb:13:53:88:6d:4f:fc:98:8c:f2:d1:85:
0f:ca:de:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:31 2025 by rpki-client