Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/c_hgrXwWiFyz3nd6PwDsHDYvJRc.roa
File: c_hgrXwWiFyz3nd6PwDsHDYvJRc.roa (raw, json)
Hash identifier: 6BkjtBIpdAnW6zBv64Dj5gD6rhB2Up+LHmHdfpuN1D4=
Subject key identifier: 73:F8:60:AD:7C:16:88:5C:B3:DE:77:7A:3F:00:EC:1C:36:2F:25:17
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0194258F173C603DDC7ED0FD87F686D22F0D
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/c_hgrXwWiFyz3nd6PwDsHDYvJRc.roa
Signing time: Thu 02 Jan 2025 05:48:42 +0000
ROA not before: Thu 02 Jan 2025 05:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9095
IP address blocks: 2001:a98:8000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:17:3c:60:3d:dc:7e:d0:fd:87:f6:86:d2:2f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 2 05:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73f860ad7c16885cb3de777a3f00ec1c362f2517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:d4:61:b2:d7:29:31:92:6f:c3:24:d9:30:
d6:28:c5:69:b9:be:e8:93:ab:e3:6d:28:1e:24:75:
f8:21:e8:7b:5b:cc:da:3b:1f:4c:e2:e2:4f:17:b9:
fb:22:9b:05:48:f1:dd:f5:ad:a5:89:84:02:51:5c:
9d:57:f7:a9:df:a6:df:01:f4:62:db:e3:86:ae:e0:
fe:1c:f4:fd:3a:f4:34:af:b8:b1:ed:31:e0:9c:c1:
22:16:75:71:3b:83:c2:86:b8:ee:47:87:54:f4:89:
cd:b2:33:a6:e5:5c:c6:04:7f:67:a7:78:29:a4:52:
91:65:a7:43:24:00:88:e9:11:5e:73:8e:4f:07:65:
e3:5b:13:d8:3d:a0:f6:f9:6b:93:a6:99:e8:c6:98:
5f:02:b2:a9:ad:cb:ab:13:2b:28:9f:d9:6c:e0:31:
b3:75:d6:16:50:31:53:9f:de:ef:12:9c:fe:24:9a:
1b:51:a8:de:4c:3a:2d:a1:3b:95:a6:7f:4f:c0:a1:
f7:9a:4a:45:0f:f5:90:7a:27:39:d0:27:6d:b4:fe:
5c:b5:0b:c9:dc:14:2b:a1:22:07:77:34:a6:b8:4a:
07:a1:79:78:18:53:dd:53:2d:ef:1a:d6:d3:ac:4c:
9e:99:0e:ee:bf:fe:a3:f4:08:ce:80:9d:e6:46:a3:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F8:60:AD:7C:16:88:5C:B3:DE:77:7A:3F:00:EC:1C:36:2F:25:17
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/c_hgrXwWiFyz3nd6PwDsHDYvJRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:a98:8000::/48
Signature Algorithm: sha256WithRSAEncryption
9a:e4:5f:04:59:85:c0:b1:af:72:93:42:74:30:ef:b0:9e:99:
67:d9:d8:0e:77:aa:49:04:3d:17:a3:f2:8c:4a:6f:ed:cd:09:
d3:f1:af:2e:a5:84:58:25:97:5d:6b:0e:a7:a9:b2:6b:c3:b3:
a1:bd:32:c8:7c:11:28:c5:82:38:53:60:58:c5:4b:5a:11:8a:
75:c6:1c:b4:f5:ba:a0:63:72:3b:82:5a:09:39:6c:1b:43:3e:
15:a6:15:62:0f:47:e9:85:65:3c:28:97:c5:24:97:62:4d:9f:
9d:38:7a:0f:a5:79:d4:be:8c:4e:9c:36:0b:ee:c5:e1:02:04:
e7:cc:5a:f2:82:7c:ac:70:42:00:b7:77:36:d3:94:b8:22:70:
72:f9:a4:88:92:c8:a6:b2:01:31:27:8d:b0:0a:45:b2:57:0b:
52:ae:46:80:95:2d:89:d0:79:93:0c:12:54:60:7d:f6:25:db:
52:d5:9c:71:7c:6e:e6:4c:2f:72:2e:35:57:73:cb:98:f6:76:
35:c2:df:18:e9:88:e5:f6:65:16:cd:fc:54:9f:52:be:b4:d6:
0f:75:6f:a1:75:f2:a8:d5:9f:8d:ca:63:d4:7f:08:c8:5c:93:
94:39:ea:74:68:f8:cc:d0:1e:e7:1d:db:bd:a4:ff:14:4c:33:
10:80:08:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:58:47 2025 by rpki-client