Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/nfeQ-81_TuuCAhvHdsIxIos9uuA.roa
File: nfeQ-81_TuuCAhvHdsIxIos9uuA.roa (raw, json)
Hash identifier: qY2SQ2/3OubPgZ62LR21ouMGs3jSmJkDgvcSKfXlN9A=
Subject key identifier: 9D:F7:90:FB:CD:7F:4E:EB:82:02:1B:C7:76:C2:31:22:8B:3D:BA:E0
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01937209E1292C5F0D2E26DA8DD175CB9D6D
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/nfeQ-81_TuuCAhvHdsIxIos9uuA.roa
Signing time: Thu 28 Nov 2024 09:11:09 +0000
ROA not before: Thu 28 Nov 2024 09:11:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47152
IP address blocks: 2a05:b0c7:5000::/37 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:09:e1:29:2c:5f:0d:2e:26:da:8d:d1:75:cb:9d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Nov 28 09:11:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9df790fbcd7f4eeb82021bc776c231228b3dbae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2a:bc:be:23:a2:23:fc:b8:c1:05:27:6a:9b:
c7:b8:92:55:ea:7f:3b:8a:30:5d:39:a9:30:be:d3:
6c:19:42:61:de:40:ca:e7:28:91:4b:ff:43:e9:5a:
5c:f6:fb:9b:79:3b:19:0b:3c:c3:84:11:ab:00:88:
38:f4:67:3e:be:aa:fb:b8:2a:dc:3a:ed:b6:64:9b:
1c:87:72:1b:53:eb:c6:9e:14:d7:93:27:12:e1:ee:
39:6e:98:1d:b7:8f:fc:7f:47:cc:52:68:89:92:ff:
12:24:d1:fc:2b:77:6a:93:51:38:82:35:99:7d:a8:
a0:e9:87:61:50:c6:ba:84:45:b4:84:48:fc:33:06:
f2:d9:29:50:93:b5:c2:47:73:e6:3a:e8:c4:b0:08:
ee:2d:a5:f7:c6:99:bb:1f:1b:7e:bb:75:6f:bd:fb:
08:5b:bc:38:ed:ce:87:83:05:8a:59:30:dc:bb:d8:
0b:83:6d:36:ab:64:8d:1b:40:62:6d:af:af:5e:a8:
8d:ec:90:f6:af:95:95:ce:82:89:d2:5a:f7:56:62:
ac:3f:fa:81:fd:a9:a0:41:d9:78:24:44:6e:c7:0f:
a7:0b:b5:1b:e0:ad:66:1a:63:1f:c2:43:de:fb:34:
7f:a0:fa:a0:fb:aa:41:62:e7:e7:5c:19:3e:97:59:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F7:90:FB:CD:7F:4E:EB:82:02:1B:C7:76:C2:31:22:8B:3D:BA:E0
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/nfeQ-81_TuuCAhvHdsIxIos9uuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c7:5000::/37
Signature Algorithm: sha256WithRSAEncryption
11:f3:87:b2:02:1a:5c:d8:5c:67:fb:c4:a4:19:61:d8:34:94:
a3:18:f8:ae:91:1b:2d:68:ac:6c:f5:c5:24:27:06:5b:88:b0:
1e:5d:72:8b:4e:f6:c1:80:6e:f5:65:96:e9:c4:23:e1:e7:84:
54:55:72:a2:62:80:3e:4f:b6:c2:d7:76:c5:b1:97:f2:da:76:
34:57:d5:60:05:ac:cd:69:48:ae:61:15:0c:48:67:aa:b8:df:
4b:ef:0f:4c:55:16:9d:0e:b9:36:0e:aa:2a:36:56:3a:91:b4:
cf:12:ee:8e:b4:d1:b7:20:9c:28:7e:e6:4b:bf:2c:e3:17:54:
5e:ed:72:b7:e5:c0:f1:7b:d4:1a:cf:eb:cc:4b:0e:7b:4b:a1:
e0:da:31:c2:51:72:ec:d0:df:84:aa:b7:e5:63:f7:75:b1:c8:
6c:ae:d6:eb:3e:6d:8f:d1:bd:12:e0:88:db:75:ad:f3:9c:10:
01:29:6b:b7:6e:52:6c:98:43:49:02:18:02:01:ae:20:3b:06:
14:c6:54:cd:5c:e3:24:99:ed:54:c9:48:b0:da:06:e6:45:fa:
81:22:05:e3:3a:1e:13:22:bf:84:4e:39:81:56:0f:bd:3a:a6:
c5:29:0e:07:db:67:0b:88:02:48:60:4b:44:45:56:c6:ef:84:
85:b0:32:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:54:27 2025 by rpki-client