Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/nzaW7aFzNZWZ3s1WL84iARdReAc.roa
File: nzaW7aFzNZWZ3s1WL84iARdReAc.roa (raw, json)
Hash identifier: tcY1jL8rHcVFx+anuSB4DW5VRR2l1AU/8uCjHxYTjls=
Subject key identifier: 9F:36:96:ED:A1:73:35:95:99:DE:CD:56:2F:CE:22:01:17:51:78:07
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 01942747AC035F028C26F80B72F910FC15B0
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/nzaW7aFzNZWZ3s1WL84iARdReAc.roa
Signing time: Thu 02 Jan 2025 13:49:56 +0000
ROA not before: Thu 02 Jan 2025 13:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206804
IP address blocks: 2a03:efc0:2100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ac:03:5f:02:8c:26:f8:0b:72:f9:10:fc:15:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Jan 2 13:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f3696eda173359599decd562fce220117517807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:4d:7a:54:d5:78:64:85:e9:1c:e4:96:e8:
97:29:70:09:63:99:1c:86:a7:a0:fa:ff:ca:90:90:
82:db:0d:b0:33:48:d0:b0:73:31:ea:cb:9a:41:07:
88:eb:86:34:c9:54:92:a7:6a:40:09:fe:6b:8c:ff:
4d:08:ac:d9:96:f2:08:3f:d8:a2:f9:75:1e:f0:d5:
3b:a0:a0:ee:7c:37:0d:57:d2:f5:58:96:33:40:c7:
f5:7b:33:6e:0e:96:b8:3f:9e:b3:13:d2:47:c9:36:
28:7a:80:0e:1d:e7:cd:bd:86:df:e5:a8:99:7c:6e:
08:e9:f4:56:16:ce:e2:b4:fc:3e:c8:b1:08:e7:84:
14:d9:4d:4e:13:00:d4:e6:f3:b1:79:e8:a4:12:dd:
07:8e:38:89:bb:4e:13:3a:b4:7b:f0:13:0c:34:f3:
ba:a5:e7:e1:9a:4b:f6:b8:26:83:68:b3:e1:fb:55:
6c:1b:0a:a3:2b:22:3d:5c:71:e1:97:8e:7f:7b:fd:
be:e3:69:43:4b:c3:85:90:50:96:29:99:9d:47:86:
ad:09:e7:6a:fb:d2:1b:05:28:b7:79:ab:55:03:62:
f2:d4:4c:9a:92:85:67:9c:86:66:ec:75:40:ed:02:
1c:c7:6a:86:39:74:35:95:f0:a0:9b:ab:cf:8d:28:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:36:96:ED:A1:73:35:95:99:DE:CD:56:2F:CE:22:01:17:51:78:07
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/nzaW7aFzNZWZ3s1WL84iARdReAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:efc0:2100::/40
Signature Algorithm: sha256WithRSAEncryption
81:04:7d:c3:e5:17:b0:8e:cc:93:6f:79:c2:b6:24:a1:3b:9d:
85:0c:fb:53:34:26:7c:a4:dd:11:7c:73:34:72:f9:af:45:44:
e1:9e:b3:a2:e0:97:f5:e2:ce:ca:d4:6f:d8:b5:92:a2:39:35:
9f:42:a3:48:19:14:59:11:e4:f3:be:2b:04:ea:5d:b1:fe:5b:
25:ee:ce:f4:89:35:6e:95:bd:d3:8b:18:fa:83:a7:32:d6:0f:
93:4f:1b:a5:ac:67:45:c3:ee:0b:45:7c:89:b1:85:5c:9c:5f:
52:3c:d5:12:6f:dc:49:2e:43:45:d8:a6:d0:d3:6e:10:9e:f0:
f1:9c:87:4d:f5:39:da:3b:82:df:bd:5d:1f:b4:6a:90:20:be:
0f:cc:0b:21:e8:55:ab:f4:fc:01:2a:e7:b7:76:b2:cb:b2:f6:
56:e7:4e:2d:a9:ae:39:e7:28:57:4f:69:6f:66:67:a3:a4:e7:
53:66:39:c0:c9:1f:50:d5:42:7f:9f:3b:0a:8f:55:69:3d:83:
cf:f1:96:af:7e:15:2a:ec:00:2b:24:7d:ad:96:0e:b3:0a:44:
70:59:16:d4:4f:23:2c:b7:d0:69:a7:fe:6f:db:ee:3b:1c:a5:
10:d2:66:d5:db:1e:c6:d8:ef:66:5e:76:47:23:17:2b:68:11:
ed:55:70:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:22 2025 by rpki-client