Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7690b7-df00-4bd8-9ca7-a718514c58ca/1/NNZ9jw0N8Y-yqIbFLURtKENGRC8.roa
File: NNZ9jw0N8Y-yqIbFLURtKENGRC8.roa (raw, json)
Hash identifier: Qu8bH1gsizFxmKMEGgIrWIsKd2fokDPSmTuB7bRc2TY=
Subject key identifier: 34:D6:7D:8F:0D:0D:F1:8F:B2:A8:86:C5:2D:44:6D:28:43:46:44:2F
Certificate issuer: /CN=1637a493bc2025bf080c0b5e242e61e417670e86
Certificate serial: 018CC4245BC03A1B2D925E9DF4F1F9FEA63C
Authority key identifier: 16:37:A4:93:BC:20:25:BF:08:0C:0B:5E:24:2E:61:E4:17:67:0E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fjekk7wgJb8IDAteJC5h5BdnDoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7690b7-df00-4bd8-9ca7-a718514c58ca/1/NNZ9jw0N8Y-yqIbFLURtKENGRC8.roa
Signing time: Mon 01 Jan 2024 08:29:26 +0000
ROA not before: Mon 01 Jan 2024 08:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:8d80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:5b:c0:3a:1b:2d:92:5e:9d:f4:f1:f9:fe:a6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1637a493bc2025bf080c0b5e242e61e417670e86
Validity
Not Before: Jan 1 08:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34d67d8f0d0df18fb2a886c52d446d284346442f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bc:71:bc:de:84:5f:a0:ff:41:d8:e1:be:d4:
6c:1e:b6:b0:b3:34:b5:21:45:2d:36:74:d0:75:e8:
28:b8:cf:8c:85:c5:39:08:01:36:66:de:cc:c4:c9:
2a:ae:a6:d0:60:05:88:60:ff:45:43:fc:67:d9:c1:
86:70:7f:2c:4e:f4:f4:47:96:14:94:4c:1a:98:6e:
29:c5:26:58:79:34:73:72:e6:72:be:a4:a2:aa:99:
dc:da:27:29:f2:8d:c4:8d:01:e5:aa:9d:0c:77:51:
5b:2e:53:c1:a2:b3:2a:bb:68:a3:a5:7c:e8:ed:0a:
2e:28:59:c4:e6:4e:9f:29:b7:e5:e4:23:0d:2d:bc:
4a:39:1f:ba:73:8c:73:fc:32:46:94:96:1a:03:42:
2f:ae:82:10:eb:d6:6b:58:5f:a3:95:63:2e:c2:4c:
14:7b:a6:1d:94:fe:14:08:35:6c:9e:09:cf:d2:57:
3b:86:c6:7f:c9:9e:97:5a:85:ad:c7:0e:d6:bf:16:
bc:70:a8:3b:08:ec:b5:b8:cb:f9:b1:5f:bb:e4:4b:
78:9e:34:07:c4:40:b6:36:fd:6d:ea:25:f1:1b:dc:
df:08:37:b3:b1:e5:43:50:c3:05:14:d4:89:0d:34:
5c:d0:c5:a2:08:f9:a2:5e:55:c8:e5:92:2d:ce:18:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D6:7D:8F:0D:0D:F1:8F:B2:A8:86:C5:2D:44:6D:28:43:46:44:2F
X509v3 Authority Key Identifier:
keyid:16:37:A4:93:BC:20:25:BF:08:0C:0B:5E:24:2E:61:E4:17:67:0E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjekk7wgJb8IDAteJC5h5BdnDoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7690b7-df00-4bd8-9ca7-a718514c58ca/1/NNZ9jw0N8Y-yqIbFLURtKENGRC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7690b7-df00-4bd8-9ca7-a718514c58ca/1/Fjekk7wgJb8IDAteJC5h5BdnDoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8d80::/29
Signature Algorithm: sha256WithRSAEncryption
4f:aa:ff:da:60:6d:5f:f8:01:b5:2e:dd:3d:9a:d0:d9:9d:66:
6f:54:5b:4c:88:2e:07:dc:4c:fd:f0:2c:85:ca:56:66:b9:a1:
1c:02:5e:62:3c:87:aa:bb:a6:be:7d:13:c0:4c:20:ee:91:58:
61:d3:9e:f1:80:dd:af:f5:47:68:56:2b:94:42:a9:48:2c:38:
d4:ac:c9:f1:37:11:06:0b:f6:33:a3:eb:fe:1b:57:76:b8:5f:
20:80:36:e1:4c:fd:6d:f5:bd:1a:fb:59:75:6e:ea:8d:24:cd:
9c:66:02:f3:bb:f6:80:9d:74:67:80:58:3a:e0:32:e6:56:79:
67:14:79:c5:6f:1a:ba:59:3b:1d:d0:89:e0:3f:19:69:c6:60:
c8:5c:2e:39:8d:fc:2f:f9:73:92:74:28:b6:d1:42:63:68:aa:
5f:b0:6a:ea:a2:55:af:01:1f:be:8b:5a:7b:c4:36:8b:8f:57:
7d:9d:eb:40:a6:fa:e9:f8:54:4e:30:57:b9:58:fd:7d:df:75:
33:4d:b9:19:52:38:fc:33:70:ff:13:5d:3c:a8:ec:4e:61:28:
44:a2:3c:ea:b6:17:f4:ef:cc:6e:89:dc:6b:ac:8d:4d:16:19:
c6:ee:e3:0b:3e:d9:70:07:ba:c2:10:2e:6d:22:34:fe:1d:b8:
37:2c:56:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:09 2025 by rpki-client