Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/nUyrqanjlTLxlBHi8dA8EfDXG_4.roa
File: nUyrqanjlTLxlBHi8dA8EfDXG_4.roa (raw, json)
Hash identifier: IGX6m5AICiLUdK/bf7JmXZQVlw2S3FFwzl3O59Z1d3Y=
Subject key identifier: 9D:4C:AB:A9:A9:E3:95:32:F1:94:11:E2:F1:D0:3C:11:F0:D7:1B:FE
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 0194282732477A4BEEA86732E01ACAFC3C4B
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/nUyrqanjlTLxlBHi8dA8EfDXG_4.roa
Signing time: Thu 02 Jan 2025 17:54:04 +0000
ROA not before: Thu 02 Jan 2025 17:54:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42473
IP address blocks: 2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:32:47:7a:4b:ee:a8:67:32:e0:1a:ca:fc:3c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Jan 2 17:54:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d4caba9a9e39532f19411e2f1d03c11f0d71bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:87:41:ac:52:98:93:3b:46:ac:6d:73:93:
1e:c2:25:bf:6a:17:06:7f:41:d0:f5:c7:c9:dd:4f:
ce:86:6a:01:51:49:50:a2:78:12:d3:d8:bc:e3:5a:
53:1a:c0:0b:dc:b2:42:7a:95:2e:76:cf:3b:5d:9b:
93:56:59:85:73:0d:5e:8e:b1:5d:85:66:8b:db:7b:
1e:90:e9:80:dd:85:1f:b5:8a:ee:2f:46:9e:0c:bf:
3c:8a:ca:17:21:4c:ae:39:0c:c8:b5:f4:96:cc:72:
87:44:dc:60:02:65:e2:d7:66:65:a1:53:8e:b8:58:
70:8b:7b:f3:64:11:19:fb:3a:11:58:c6:c4:00:8e:
00:63:42:c8:5d:6f:b4:d5:24:fd:69:2a:86:04:99:
00:54:62:f5:21:ee:84:45:55:f3:65:d2:f4:9c:9c:
11:c9:8b:3d:1b:f7:d3:92:8c:18:19:4c:33:d7:b6:
12:f4:1e:b3:d7:49:ed:b3:ed:e2:5b:77:7d:3f:2e:
b1:c0:47:33:cb:a8:ad:d9:69:84:93:0a:ad:28:4a:
89:bc:8b:33:14:12:4c:84:ff:c2:4f:e0:71:ff:b5:
1d:74:71:0b:3f:e1:1d:35:34:4a:28:66:c5:4c:a5:
80:c4:13:0f:2f:e5:a0:7e:5d:4f:5d:76:88:5d:6b:
c2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4C:AB:A9:A9:E3:95:32:F1:94:11:E2:F1:D0:3C:11:F0:D7:1B:FE
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/nUyrqanjlTLxlBHi8dA8EfDXG_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4cc0::/43
2a0a:4cc0:40::/43
2a0a:4cc0:80::/43
2a0a:4cc0:c0::/43
2a0a:4cc0:2000::/48
Signature Algorithm: sha256WithRSAEncryption
6a:3e:34:73:8e:f7:32:91:ba:e0:dc:67:69:54:e3:ac:e3:54:
13:60:4a:e5:bc:e1:41:84:cd:17:6d:26:6b:d6:3a:cf:c1:bb:
2f:65:79:4b:3d:23:a3:8a:cd:25:4c:c4:4d:03:97:50:e5:78:
03:2f:50:a3:f8:b3:43:22:da:78:85:fa:33:3e:7d:41:87:8f:
da:ad:51:ee:f3:61:ba:d2:af:d8:33:a4:ba:1d:e0:9e:47:3e:
d3:52:72:c0:3a:03:2c:bc:9d:16:59:9f:49:08:a1:96:f0:8f:
9c:61:f4:99:ec:d3:26:3d:7f:28:5a:98:4e:d0:df:cf:39:f2:
f4:c5:60:14:77:d2:0e:1a:a1:57:ac:be:a4:af:0b:20:cc:0d:
72:ba:45:3d:94:50:be:68:2b:11:5a:1e:e1:7a:23:25:74:63:
24:42:2a:ec:76:f4:ad:6a:92:44:70:ee:0d:f7:36:eb:59:35:
03:d5:33:b2:ad:c3:2c:54:83:28:d5:d9:e2:83:56:92:d8:50:
dd:f9:ec:bb:fa:91:58:be:18:9e:7d:6c:97:28:d1:90:5b:c2:
cd:fa:cc:18:16:fe:97:43:33:1f:32:83:64:dd:6f:25:41:ad:
6a:b4:3b:2d:cc:e4:f3:63:8e:96:d0:5f:7b:13:58:14:e5:55:
09:39:38:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:53:04 2025 by rpki-client