Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/NBa1UmmcofJztBL8pTAUTjZFH0k.roa
File: NBa1UmmcofJztBL8pTAUTjZFH0k.roa (raw, json)
Hash identifier: 86hIGHbzSCBjbpNQmq5AwTHYQV5MFxXejgndiQ6r1LA=
Subject key identifier: 34:16:B5:52:69:9C:A1:F2:73:B4:12:FC:A5:30:14:4E:36:45:1F:49
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 019425223B9262E5F6DB98A8E89D0EF14528
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/NBa1UmmcofJztBL8pTAUTjZFH0k.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212330
IP address blocks: 2a04:2dc0:1d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3b:92:62:e5:f6:db:98:a8:e8:9d:0e:f1:45:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3416b552699ca1f273b412fca530144e36451f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c0:41:1f:2a:a3:0f:25:05:d5:b9:95:4c:4f:
89:95:e2:3f:11:03:55:31:44:a3:ae:79:19:86:2f:
96:63:db:ee:c0:fd:a2:bd:08:fc:de:a0:0e:1e:be:
61:d3:b5:15:1f:27:66:bb:c9:cb:9f:19:4e:4c:0e:
96:a3:70:91:d3:36:57:50:15:8a:93:4b:bb:28:73:
e9:fc:17:2f:19:d9:0e:24:42:99:35:31:fd:ab:95:
bf:dd:95:3c:af:f0:3f:0a:c8:ba:6a:81:57:d9:d8:
01:9a:47:d4:7c:c2:f3:af:ee:ef:9e:8f:ce:59:55:
4e:19:d3:3d:de:2e:29:93:75:3f:e9:9d:fe:8e:46:
30:f2:93:6b:e1:07:0c:a7:7b:b4:5d:9c:08:08:db:
ea:8f:34:6c:b2:7b:35:c0:74:65:05:f4:d3:2c:67:
7c:44:f5:8f:9b:46:e7:72:20:8a:44:c0:97:53:72:
a4:ce:2d:c3:69:01:5d:d6:2e:ec:90:50:09:f1:7b:
74:db:2b:ae:87:89:af:6a:f0:fd:78:5f:74:85:6d:
0c:89:a1:e9:ac:f3:93:3b:af:e4:21:27:a9:fa:56:
3d:e8:e4:d2:b5:df:20:c5:0b:4e:d9:41:e1:fe:61:
6d:dc:8f:06:4a:24:77:bd:5b:91:f4:af:43:a1:b9:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:16:B5:52:69:9C:A1:F2:73:B4:12:FC:A5:30:14:4E:36:45:1F:49
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/NBa1UmmcofJztBL8pTAUTjZFH0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:2dc0:1d::/48
Signature Algorithm: sha256WithRSAEncryption
52:99:2b:fe:a9:41:12:6e:38:ef:2a:5b:9c:cb:7e:4e:f9:43:
a2:b0:fc:02:bc:54:87:94:6c:c8:af:83:ad:5b:87:d6:29:ee:
1f:86:69:61:a9:8d:e7:28:45:e8:47:c2:a0:c0:00:bb:63:ad:
58:5f:41:9a:87:d9:65:df:8c:67:20:00:21:fa:4f:f6:9d:9e:
6c:d2:93:b9:a8:ab:53:ff:dc:6d:70:1e:fb:54:87:d3:53:db:
21:6e:1f:37:c4:f0:b0:74:fa:a3:89:f1:e4:7b:d3:26:df:b6:
a9:39:6f:1c:ac:88:a1:c9:49:7d:d2:3c:e6:3b:20:d4:41:c4:
3e:95:04:ba:b5:e9:c6:b8:f9:e9:ec:5f:22:2d:21:4c:69:3f:
26:08:5d:c2:df:49:70:0e:8e:98:87:88:2b:c2:b2:8d:9e:68:
17:57:be:90:5e:9b:15:a3:41:40:b5:cc:ae:55:b2:52:1d:e0:
ec:ba:7f:61:f7:52:10:b1:74:23:fa:11:dd:08:a5:89:5e:9a:
c8:79:1b:4a:e8:c8:1d:b2:98:46:ec:f5:f4:78:c4:0a:05:a4:
c6:9d:7a:18:d4:97:68:16:35:86:c8:6e:00:a2:3a:ec:cc:76:
1c:8d:1d:e2:a4:ee:f4:84:7a:c3:b3:40:2d:9e:5b:ff:ec:3d:
fd:23:4a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:27:30 2025 by rpki-client