Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/nLBB4UJx1LuKjpaUgbczrVtaJpg.roa
File: nLBB4UJx1LuKjpaUgbczrVtaJpg.roa (raw, json)
Hash identifier: HXuz+8NQ2/TBmo59S3LgADHI/PGw+l4NTTu2zBVfaVE=
Subject key identifier: 9C:B0:41:E1:42:71:D4:BB:8A:8E:96:94:81:B7:33:AD:5B:5A:26:98
Certificate issuer: /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Certificate serial: 019425FC1931618E3F1B86CF60FEEF83EFB4
Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/nLBB4UJx1LuKjpaUgbczrVtaJpg.roa
Signing time: Thu 02 Jan 2025 07:47:46 +0000
ROA not before: Thu 02 Jan 2025 07:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13347
IP address blocks: 2a12:f3c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:19:31:61:8e:3f:1b:86:cf:60:fe:ef:83:ef:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Validity
Not Before: Jan 2 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cb041e14271d4bb8a8e969481b733ad5b5a2698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:47:bd:b6:e1:ae:17:f9:34:8b:df:91:5e:93:
42:66:45:98:4c:46:68:fb:c5:d1:c0:03:b1:e3:c3:
41:06:9a:38:20:98:f7:9b:c3:9b:de:39:48:66:a4:
e7:eb:22:17:45:c1:9a:5a:82:fd:28:59:42:34:1d:
9e:43:94:63:ef:54:dc:3b:7a:55:1e:42:a4:88:36:
de:ae:ed:52:1d:89:51:c0:77:e0:4b:29:65:97:ec:
e9:f9:ba:89:ff:d1:50:b3:4e:e1:19:d7:50:d1:62:
80:16:d0:2f:f9:30:95:e1:26:04:d1:d2:48:7f:3b:
34:10:a8:d0:68:f4:4f:e9:37:95:08:76:2b:c0:90:
03:2c:ce:e0:f4:62:56:76:42:0f:e6:8e:33:43:ec:
e4:7b:6c:1a:3d:8b:8b:69:54:bf:11:f7:1a:e0:32:
a6:c0:4c:5a:8f:82:1c:b7:4b:38:9f:e5:65:17:d6:
b5:76:69:f4:85:d1:11:81:51:9f:8b:c4:f1:9c:88:
46:03:96:8b:41:11:14:c5:3d:2b:a6:20:82:29:6b:
57:9a:14:48:6e:b2:62:01:2c:8c:5e:d5:e1:41:09:
d6:56:bd:5b:09:5f:73:53:40:97:71:44:ce:4c:e7:
42:63:79:36:73:0c:c5:25:3a:d6:fb:8f:24:9d:70:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B0:41:E1:42:71:D4:BB:8A:8E:96:94:81:B7:33:AD:5B:5A:26:98
X509v3 Authority Key Identifier:
keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/nLBB4UJx1LuKjpaUgbczrVtaJpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f3c0::/29
Signature Algorithm: sha256WithRSAEncryption
a3:a7:03:61:a6:4f:6b:45:a4:96:61:dd:87:cf:2d:84:f7:2b:
b2:df:93:84:11:d3:75:98:cd:62:ef:1e:17:bc:ed:1e:d6:8f:
fe:f7:e8:a8:64:a0:79:85:56:ca:98:0e:d7:82:fa:6c:6d:99:
86:b8:24:08:ec:77:0b:b3:6a:ae:a9:c4:d8:58:3e:28:62:7d:
18:f1:e8:23:bb:f4:30:72:13:88:a2:f3:fc:49:5c:a9:70:b8:
7a:b7:1a:b4:90:e6:b6:cb:5c:fb:02:4e:8f:86:dd:21:89:01:
96:cb:e9:3a:63:48:ac:f7:d6:b7:58:90:c8:86:c1:8c:d1:5e:
3c:aa:a1:cb:82:82:95:62:39:a1:9f:59:84:20:9c:d5:3e:76:
76:07:74:c7:42:e0:d9:66:7b:ae:b9:e9:6b:bf:b0:ef:fe:67:
d7:e2:d8:88:78:03:43:98:f1:8d:8d:80:b5:ad:2d:3a:0c:93:
6b:17:7e:7b:f0:b7:a9:ef:94:94:25:dc:0d:a2:01:9f:e7:f7:
04:15:0a:d2:e3:3f:d7:77:11:49:36:6d:2c:b9:1a:0b:f8:5b:
40:42:4d:e0:58:27:12:17:bf:f3:ae:c8:22:fb:de:e0:27:32:
1f:6b:d8:9c:fb:65:63:93:04:75:20:4e:61:fa:53:9a:21:b6:
ef:24:f2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:19:00 2025 by rpki-client