Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/NlTNyrWPdL5vOt3EGOf2-nBw1DQ.roa
File: NlTNyrWPdL5vOt3EGOf2-nBw1DQ.roa (raw, json)
Hash identifier: ttRkNbClIFmBa+I1Ta8+zVuctuQ/7uS20NKV7LYulFI=
Subject key identifier: 36:54:CD:CA:B5:8F:74:BE:6F:3A:DD:C4:18:E7:F6:FA:70:70:D4:34
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BE992D27AE98EE2FA27AD0D3C24A7
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/NlTNyrWPdL5vOt3EGOf2-nBw1DQ.roa
Signing time: Thu 02 Jan 2025 09:49:53 +0000
ROA not before: Thu 02 Jan 2025 09:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205923
IP address blocks: 2a0f:5707:fff6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e9:92:d2:7a:e9:8e:e2:fa:27:ad:0d:3c:24:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3654cdcab58f74be6f3addc418e7f6fa7070d434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:d1:9c:9a:46:a5:cf:ea:ff:de:4f:98:21:
69:7d:47:35:dc:8c:39:3b:65:82:a0:e9:a5:53:7c:
b7:6b:be:d0:66:8a:b2:7e:5e:47:05:b1:35:b2:67:
f9:1e:c9:da:73:2a:0f:5b:73:7b:32:0c:16:46:d3:
b7:81:44:32:5c:9b:6c:09:36:c2:2b:6c:a8:03:7a:
d1:23:27:4a:20:de:e8:b3:75:00:4d:d6:70:ce:41:
a5:7e:0d:16:92:95:0c:88:b5:6b:58:a9:92:df:ba:
88:77:7e:91:f0:07:67:a1:51:a4:58:b5:ed:4b:ec:
99:90:ce:d6:82:1a:53:ce:b6:0c:85:26:ac:c4:62:
42:eb:14:a0:19:d0:03:79:0d:65:86:63:a6:7b:17:
86:72:9b:22:25:43:db:58:ae:c4:c8:e2:6e:6d:3b:
e1:14:54:9e:07:6b:0f:e7:d8:27:a7:ae:c6:19:9a:
98:8b:c6:a3:9f:db:1d:0e:e8:96:cb:d6:6e:6b:73:
68:63:0c:0e:6c:64:eb:37:dd:e3:42:60:14:5d:e6:
8d:9c:d8:94:18:be:8f:41:70:b3:ae:3f:6c:ac:1a:
a5:f7:42:0d:0d:32:ed:4a:2c:67:76:b9:8d:1d:71:
c7:e0:2b:bd:73:97:46:4d:9b:6a:37:57:a7:aa:c2:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:54:CD:CA:B5:8F:74:BE:6F:3A:DD:C4:18:E7:F6:FA:70:70:D4:34
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/NlTNyrWPdL5vOt3EGOf2-nBw1DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:fff6::/48
Signature Algorithm: sha256WithRSAEncryption
b6:c3:aa:06:f2:10:59:06:8b:f5:c9:a7:f7:fd:ac:bd:df:4e:
00:11:8a:72:3b:5a:76:73:c1:fa:04:54:c7:bb:15:41:e4:ad:
b9:a2:5d:3b:63:46:fb:23:d9:14:0c:42:3f:7c:64:11:2d:9d:
72:8c:31:cd:56:f0:7a:93:a5:bb:4d:4a:e4:4e:62:ba:e7:e0:
c6:23:58:10:d7:ae:33:dc:b2:44:6d:50:83:bf:8e:87:ab:22:
b1:ba:37:0e:8c:ba:8c:ff:15:cf:33:90:54:4b:72:12:2e:19:
5e:8a:9d:f4:f9:db:78:f8:ce:c8:f4:4a:31:86:d3:7e:95:35:
7b:a9:7a:fe:75:9c:3d:48:09:cb:21:7a:1c:4f:f9:b4:bb:53:
50:87:83:a8:d5:13:6f:e2:4b:8e:a2:88:25:fc:2b:0f:6a:d4:
07:ef:9b:e0:96:a9:82:0a:4d:bc:ad:34:20:5d:a9:5e:81:f8:
3b:b1:12:e5:6b:6e:a5:45:f1:84:69:83:0c:85:a4:d0:b1:b3:
55:6a:5a:37:ad:e5:47:dd:45:7d:5f:49:43:15:81:7a:9a:44:
83:da:95:0b:a7:c3:cd:bb:7b:76:38:5c:9f:d5:01:a7:78:2b:
af:6f:cf:a0:4a:56:6f:84:b9:4b:34:6d:b0:ee:33:5f:fc:3e:
69:e6:17:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:50:05 2025 by rpki-client