Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/nI4pg8TJwdBGvcOSMEwiKdACRgY.roa
File: nI4pg8TJwdBGvcOSMEwiKdACRgY.roa (raw, json)
Hash identifier: e4fjV36QQP3EEWEcje1wCzIbRILO6c8V4Bt3WpH8Zcc=
Subject key identifier: 9C:8E:29:83:C4:C9:C1:D0:46:BD:C3:92:30:4C:22:29:D0:02:46:06
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019421B20D11F6C797680A3F1EFB6119A2A2
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/nI4pg8TJwdBGvcOSMEwiKdACRgY.roa
Signing time: Wed 01 Jan 2025 11:48:24 +0000
ROA not before: Wed 01 Jan 2025 11:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212165
IP address blocks: 2a02:eb00:2::/48 maxlen: 48
2a11:f840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0d:11:f6:c7:97:68:0a:3f:1e:fb:61:19:a2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jan 1 11:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c8e2983c4c9c1d046bdc392304c2229d0024606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:3c:79:d0:7f:ca:a6:44:10:d7:f9:57:2f:
25:32:a3:d4:f6:37:2e:40:96:ec:8a:f0:fb:0b:b5:
ca:5a:1a:06:94:4d:15:e1:69:b3:19:e2:c2:c8:b4:
87:36:2d:8d:b9:50:04:ab:01:79:c4:80:64:14:95:
c3:bd:a5:06:b3:77:97:c9:b8:54:71:32:61:f6:1f:
84:4c:b3:b9:88:a9:9e:2f:81:2a:99:0f:e9:00:a3:
66:13:6f:2a:ed:62:2e:b4:f7:ac:13:84:2c:c7:5a:
e0:75:ef:26:bc:e8:4f:f4:4e:52:5e:90:4b:43:8c:
79:1e:1f:cc:57:fc:e0:fa:66:eb:8b:f3:45:07:3d:
ac:7e:c6:aa:0b:fc:25:24:f0:90:2f:37:4a:22:67:
21:eb:59:0a:cf:40:1a:0d:4b:82:c0:5b:12:8d:35:
58:ae:e7:f5:70:6e:53:49:5b:be:2c:82:7e:00:25:
9a:b4:54:2b:b9:5b:26:85:15:71:50:7c:48:be:86:
44:e8:16:58:98:0d:ae:90:1b:3f:f7:e6:43:f0:f3:
3b:1b:8a:84:ea:aa:f1:c7:5d:0e:98:23:45:73:3f:
75:94:43:81:12:4b:e6:b9:d8:9f:d5:2c:7d:d4:a3:
6b:5b:c2:49:10:f5:17:9b:51:c9:35:a9:bd:00:31:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8E:29:83:C4:C9:C1:D0:46:BD:C3:92:30:4C:22:29:D0:02:46:06
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/nI4pg8TJwdBGvcOSMEwiKdACRgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:eb00:2::/48
2a11:f840::/29
Signature Algorithm: sha256WithRSAEncryption
12:a5:6a:b8:e3:be:05:70:2b:12:c0:9f:df:b8:cc:cc:46:d6:
cb:e6:31:66:ca:d4:e6:cb:92:e7:9f:47:db:73:72:a7:2b:62:
06:29:ea:45:89:d0:9f:7e:81:3e:e8:e6:15:b1:85:04:c8:8e:
f1:a7:6d:c8:2e:f8:6d:f7:41:dd:5b:f6:f5:e5:8e:ab:c6:74:
04:4f:ff:8c:bc:76:67:cd:1d:e2:a5:be:e1:b9:64:eb:e7:6a:
8e:cd:38:a8:d8:02:cd:1e:8a:8e:6c:18:9a:8a:59:2d:a8:e7:
9d:0f:4a:8d:9d:ff:75:34:e9:f4:4e:66:1f:10:f0:70:90:a0:
dc:99:2d:f8:91:04:48:ec:c3:8f:de:00:61:5d:92:a3:ce:aa:
7e:ea:24:c2:fc:7e:c0:07:49:71:dd:ac:40:e1:d5:56:ad:2c:
e3:74:26:f6:51:c8:49:c4:af:88:5f:7c:45:63:e8:d5:88:8c:
a2:b7:19:0c:0b:ff:b8:e7:2b:17:91:79:5f:92:d8:f5:41:20:
92:7a:00:b0:2b:fa:30:bb:33:78:89:69:f7:1f:b9:c3:48:73:
3d:d3:76:55:b5:94:aa:2b:cd:e9:5b:e7:5d:7c:11:32:80:cb:
5b:8b:68:fc:28:74:a0:1e:eb:c8:c8:31:48:b5:89:34:65:d5:
17:14:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:19 2025 by rpki-client