Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa
File: NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa (raw, json)
Hash identifier: qXIyT3lUz5bJt0IF4d25cysT8WLakbijoLlu5EAXUys=
Subject key identifier: 35:03:9E:95:77:E7:87:DC:CD:CB:81:79:84:DF:7F:B5:88:C4:DC:1B
Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial: 01941F8C48973C0C90A593C9FF29A94E6C0C
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214209
IP address blocks: 2a0d:8140:1fff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:48:97:3c:0c:90:a5:93:c9:ff:29:a9:4e:6c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35039e9577e787dccdcb817984df7fb588c4dc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:68:c1:c3:3d:ce:ac:1c:0f:94:d5:f6:37:
cd:75:bd:24:2b:08:df:84:b0:04:5a:48:d0:dd:52:
c7:f1:96:e8:37:37:9f:f7:f8:40:87:10:f5:9a:5c:
eb:d5:b7:79:a1:93:62:17:5b:86:67:d9:e5:43:68:
d5:be:93:f0:27:e5:7b:ce:19:7f:88:c6:6f:c2:af:
d4:cd:6d:a4:03:ac:ec:1c:c1:03:c5:4c:08:75:a0:
60:81:2b:0b:23:0a:70:bb:e7:3e:3b:ec:15:4c:cd:
f9:3e:13:74:e2:4d:e9:a8:e2:21:df:fc:2a:cf:03:
9b:ff:60:ff:3a:d5:e8:78:19:4e:4e:7c:ce:cb:53:
d9:95:b5:9a:f7:13:78:af:23:f6:b3:3b:1e:07:dd:
ef:00:c4:d8:f6:70:59:c6:b8:a6:3c:2e:80:d4:64:
c7:13:31:c5:6a:ee:37:c6:ea:e5:42:e9:8a:c4:40:
3a:5b:fe:6e:d4:1b:d5:bf:80:de:af:f9:eb:cf:7e:
cd:e9:a6:90:10:9b:8d:5a:48:68:8a:24:a4:85:38:
46:b6:77:af:54:29:56:a3:25:c6:91:b2:0a:49:c5:
94:f9:67:87:c5:72:6e:ed:c9:81:d5:1a:30:6d:d3:
3a:53:de:b8:7f:1c:7b:38:da:47:ff:59:4f:56:61:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:03:9E:95:77:E7:87:DC:CD:CB:81:79:84:DF:7F:B5:88:C4:DC:1B
X509v3 Authority Key Identifier:
keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8140:1fff::/48
Signature Algorithm: sha256WithRSAEncryption
28:7e:46:98:21:70:00:85:24:19:37:43:d1:93:36:7f:1e:49:
02:13:12:d7:78:5c:73:f8:86:f3:3a:0b:58:c9:14:35:95:86:
7e:44:71:c6:80:c0:75:0b:54:cc:c3:90:99:ef:40:f8:fd:f4:
2d:95:1a:d2:18:74:5a:55:85:25:52:63:5a:99:b8:18:18:d5:
22:3d:47:10:67:5f:ed:80:ff:78:ba:71:fe:c7:94:96:01:dd:
1a:6d:56:90:56:4c:e6:55:25:bb:11:db:46:6c:3a:be:2a:41:
72:8c:a6:f6:c3:cb:f7:dd:ab:18:36:73:bf:54:6a:74:23:04:
0f:8c:5b:57:22:49:31:72:24:a2:1d:60:e1:4d:a9:44:d0:ff:
49:55:dd:cf:36:2f:e2:e6:30:9b:5f:eb:7f:93:4a:4d:5a:46:
66:e3:21:64:da:59:7a:94:82:85:68:9b:18:1e:a2:16:0b:7c:
61:30:9d:bd:11:7b:9f:be:03:44:6b:c4:a2:51:aa:f0:12:ad:
1e:9d:98:d6:fe:37:a3:62:f7:78:3c:04:64:36:4f:57:98:33:
e8:fc:12:90:3f:43:a3:66:b2:4d:d4:5a:50:7e:7d:e7:8c:96:
02:14:e9:f1:54:80:7e:1a:43:e4:f9:c9:02:82:88:c6:1b:f8:
54:4e:18:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:06 2025 by rpki-client