Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/N9Zb2hxl4VqsmU3i0xGDA1x2cBY.roa
File: N9Zb2hxl4VqsmU3i0xGDA1x2cBY.roa (raw, json)
Hash identifier: bj11HyE9bQVpgK8+L49310uUI7++HSDAwFbYXm4t87U=
Subject key identifier: 37:D6:5B:DA:1C:65:E1:5A:AC:99:4D:E2:D3:11:83:03:5C:76:70:16
Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial: 01942747C2EC8B6B143CAB41DC9757785613
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/N9Zb2hxl4VqsmU3i0xGDA1x2cBY.roa
Signing time: Thu 02 Jan 2025 13:50:01 +0000
ROA not before: Thu 02 Jan 2025 13:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a02:3040:43:ff00::/56 maxlen: 56
2a02:3040:4d::/48 maxlen: 48
2a02:3040:4e::/48 maxlen: 48
2a02:3040:4f::/50 maxlen: 50
2a02:3040:4f:8000::/50 maxlen: 50
2a02:3040:4f:c000::/50 maxlen: 50
2a02:3040:50::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c2:ec:8b:6b:14:3c:ab:41:dc:97:57:78:56:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
Validity
Not Before: Jan 2 13:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37d65bda1c65e15aac994de2d31183035c767016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:eb:46:78:8f:10:d2:e3:a1:52:1b:bc:a3:19:
36:17:3a:dc:55:dd:7c:a1:b2:b0:bb:c9:ca:3f:dc:
1a:e8:8d:ba:19:82:52:0a:1f:bb:77:3f:d3:c1:d4:
21:3c:34:f1:08:00:79:19:76:b3:f6:d0:18:98:d0:
1d:c4:6e:be:18:fd:47:4d:42:f4:d4:d1:ea:b2:8a:
85:31:3e:d9:8b:b0:31:37:10:1d:da:9e:dc:e4:57:
fa:04:8b:8d:8e:73:2b:4f:97:c5:d8:41:13:02:ef:
f5:b4:04:c6:21:42:16:f3:4f:8f:86:9c:1d:6c:34:
0a:aa:4b:06:c1:2f:19:0c:81:86:7f:aa:df:14:06:
f1:d1:0f:c6:f8:e6:26:d0:3b:13:84:4f:bb:35:d6:
fd:31:7c:1b:01:d8:21:87:2e:78:cc:f1:13:8a:ae:
d5:3b:f4:c5:75:50:84:57:eb:45:4b:15:4a:94:11:
91:1a:57:dd:ba:d8:60:bb:b5:a9:58:77:77:36:9b:
d9:2c:85:d2:b5:89:2c:2e:61:e3:d3:d7:3c:5c:f9:
90:c5:2b:27:aa:e6:0c:a8:48:ef:e4:3c:89:e4:71:
e4:f2:e4:51:33:c5:f1:bc:01:7c:36:60:de:8e:ee:
82:62:f9:fa:cd:b4:ae:d4:c6:56:19:82:d9:84:ac:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D6:5B:DA:1C:65:E1:5A:AC:99:4D:E2:D3:11:83:03:5C:76:70:16
X509v3 Authority Key Identifier:
keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/N9Zb2hxl4VqsmU3i0xGDA1x2cBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:3040:43:ff00::/56
2a02:3040:4d::-2a02:3040:4f:3fff:ffff:ffff:ffff:ffff
2a02:3040:4f:8000::-2a02:3040:50:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9c:86:de:5d:df:0d:f2:d7:18:d5:e1:fd:36:26:fd:78:f0:35:
9a:e1:0f:00:fc:da:c6:65:61:15:bc:bb:e8:ae:99:f8:e6:37:
3a:58:1e:84:9f:a8:ac:4e:cf:b8:d3:a6:ff:5a:51:01:91:f2:
d6:07:62:e1:28:2f:8f:f0:34:87:a5:8c:dc:f0:62:05:f2:b1:
74:41:28:81:ed:92:78:cd:56:e0:ac:e9:78:8f:7f:e6:0b:eb:
f2:5d:26:5a:1f:31:ea:73:d8:db:11:2c:5f:f4:ba:a4:39:2e:
2f:1c:8a:d6:f8:31:5c:bb:a2:8f:f7:ea:4e:95:e1:70:52:aa:
5b:a1:8d:29:e2:13:de:37:a3:87:b9:33:90:4b:e1:8d:99:e1:
c5:5b:2e:01:92:a4:73:fc:a5:a8:38:d9:33:8f:64:b8:17:a1:
06:7a:98:18:80:07:57:ad:96:3e:43:6e:a4:d1:42:72:05:d5:
2a:3f:d5:62:b6:bf:42:14:2f:78:56:d5:c5:69:d4:a6:eb:e6:
cd:76:0c:f1:c1:be:87:cb:6a:45:a1:d4:fd:9d:e5:a8:10:e8:
b3:43:1f:74:8e:e4:e3:b5:e4:58:a7:e8:06:9f:d0:cd:d1:1e:
eb:0d:64:d5:6c:02:ac:f8:09:ff:59:12:11:c5:8f:c4:f5:9c:
4f:bf:c3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:56:45 2025 by rpki-client