Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/n0JluA_q73XjEpq04uEzn-RmsXg.roa
File: n0JluA_q73XjEpq04uEzn-RmsXg.roa (raw, json)
Hash identifier: T7rTE9/E8va60SJXGuKikAJZCiAgEmhE8Vpka/OYUOA=
Subject key identifier: 9F:42:65:B8:0F:EA:EF:75:E3:12:9A:B4:E2:E1:33:9F:E4:66:B1:78
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A3901CB8715CCE3C47404A3F0414
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/n0JluA_q73XjEpq04uEzn-RmsXg.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152920
IP address blocks: 2a0f:cf40::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a3:90:1c:b8:71:5c:ce:3c:47:40:4a:3f:04:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f4265b80feaef75e3129ab4e2e1339fe466b178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:b9:3c:b2:09:9d:a3:30:31:c3:6c:10:4a:
ae:ce:77:8f:13:0f:60:49:95:e7:80:71:72:c5:88:
9c:41:a4:b7:4a:28:39:ff:2b:82:91:b8:8e:89:cf:
f5:49:37:9d:b4:5e:74:04:81:04:db:b1:57:14:c0:
c3:9b:40:c0:fd:52:26:c9:f8:1f:4e:d0:fe:2a:8e:
12:c0:bb:1c:e2:90:3c:4e:44:3c:9d:cc:91:39:b7:
21:79:93:6c:7d:35:75:5c:4a:3e:a9:98:c8:b3:18:
71:12:54:1e:d6:6e:30:3e:8c:76:5d:00:89:a0:76:
9e:8f:ae:a9:1a:e4:6a:a7:a3:ac:4b:5e:a6:28:f1:
51:73:17:32:08:a3:e0:cf:6e:15:5f:26:0f:45:5d:
3c:e8:6c:99:6b:ca:5f:54:ad:da:29:df:e4:3a:d3:
0c:25:c4:49:2b:b0:2f:bd:9f:2f:2a:80:16:f1:78:
d2:31:a4:c7:45:64:82:38:22:f7:70:25:46:72:c4:
bb:f0:b7:3c:fc:1d:dd:27:bd:9a:3a:90:8f:87:4b:
53:3e:d2:fc:3f:58:04:0e:eb:a9:cd:b2:3e:41:8f:
e7:80:6d:28:44:e2:97:ff:9d:d1:e2:28:63:10:6b:
f6:85:22:fb:12:32:69:a1:e3:67:57:47:df:fd:59:
8d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:42:65:B8:0F:EA:EF:75:E3:12:9A:B4:E2:E1:33:9F:E4:66:B1:78
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/n0JluA_q73XjEpq04uEzn-RmsXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:cf40::/40
Signature Algorithm: sha256WithRSAEncryption
56:de:ee:a4:b6:a5:b7:19:ae:e8:d1:56:7c:67:0e:26:e6:cf:
42:13:6f:62:28:42:7a:47:a6:79:57:3d:6d:d2:98:b2:dd:2f:
b6:f7:87:66:26:31:0e:9d:8d:50:19:cd:8e:8d:ef:e0:41:0c:
2a:f6:da:ef:8f:1a:75:fd:0c:75:50:ae:2c:bf:94:b3:3b:d4:
e9:48:ec:cd:42:ab:d1:af:8f:0d:44:fc:4f:25:79:7a:00:84:
ff:8a:b3:ee:c4:38:5f:bd:96:3d:7e:27:02:41:91:2c:a7:12:
6d:36:e9:7f:8d:4e:37:bf:00:7c:20:0b:18:ed:bf:fe:63:30:
79:b5:7d:7d:f0:cf:c3:ba:f5:37:55:9d:2d:48:07:8e:a2:27:
46:f6:78:eb:5f:f7:5d:0e:5a:9d:36:2b:6a:ea:6e:22:b2:29:
91:90:00:ef:0a:dd:aa:a8:10:28:3b:b7:3f:d1:e6:95:56:4a:
e7:65:b8:7f:0e:56:c5:94:26:6c:21:d4:1d:ba:5e:97:0d:ee:
19:1f:bf:5e:29:86:dc:b2:fb:e1:e8:37:c9:2d:a2:53:af:56:
63:4e:18:90:12:12:40:3a:8b:ed:20:06:b2:bb:50:0f:81:3c:
56:12:9f:33:84:cf:0e:78:b6:b4:44:2b:d1:48:5f:37:6a:20:
de:f2:8b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:56:53 2025 by rpki-client