Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/nwNU_ZVsEVwWW-MPHCXQR7MoGLY.roa
File: nwNU_ZVsEVwWW-MPHCXQR7MoGLY.roa (raw, json)
Hash identifier: WfcobdwHZZLTin4pgT10WiDCkpO1MQUllHQPapGmEYs=
Subject key identifier: 9F:03:54:FD:95:6C:11:5C:16:5B:E3:0F:1C:25:D0:47:B3:28:18:B6
Certificate issuer: /CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Certificate serial: 0193A273DCC0372DB5AEFACD0B3957DD71E4
Authority key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/nwNU_ZVsEVwWW-MPHCXQR7MoGLY.roa
Signing time: Sat 07 Dec 2024 18:48:42 +0000
ROA not before: Sat 07 Dec 2024 18:48:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30788
IP address blocks: 2a0a:f8c0::/29 maxlen: 29
2a0c:c185::/32 maxlen: 32
2a0c:c187::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a2:73:dc:c0:37:2d:b5:ae:fa:cd:0b:39:57:dd:71:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Validity
Not Before: Dec 7 18:48:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f0354fd956c115c165be30f1c25d047b32818b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:75:8f:03:d8:49:00:42:f9:69:19:22:75:
77:63:24:dd:6e:89:fe:7c:85:b1:27:62:cc:82:39:
0b:78:a4:06:21:cf:fb:1c:f4:b2:b0:17:5c:2b:2c:
6c:61:e4:06:d1:25:98:c5:12:5c:7d:d6:c0:96:c2:
70:04:ce:69:a6:67:7a:d5:10:ce:d8:d0:5c:d4:02:
47:ef:de:17:cc:70:f4:62:74:d0:72:33:14:43:09:
58:97:59:63:07:e4:ed:43:93:70:ae:f7:96:ec:6b:
c4:73:4f:c9:ff:0e:9b:04:a5:b8:5a:d2:16:8b:87:
48:83:ad:68:5d:61:61:77:ba:e4:3e:62:b6:3d:9a:
95:8f:e5:c5:3a:a2:68:81:b8:9c:7e:05:de:3f:5d:
0f:1f:f6:06:82:8d:11:43:ac:33:f1:23:9b:1f:aa:
f7:30:c9:07:b3:e7:d7:86:89:ff:14:1c:4b:89:b7:
d5:d1:d0:8f:5c:1c:c5:94:0e:36:12:35:1a:ed:6e:
b7:c4:a3:57:e6:76:ff:91:5b:6d:c4:51:2e:01:ff:
6e:ac:dc:f9:f5:97:72:44:df:6a:0d:b6:75:15:66:
21:3d:f5:51:f6:58:4c:39:15:2d:30:24:62:d9:ec:
dd:6a:bc:4a:26:88:63:6b:de:fe:ea:63:71:f9:bd:
18:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:03:54:FD:95:6C:11:5C:16:5B:E3:0F:1C:25:D0:47:B3:28:18:B6
X509v3 Authority Key Identifier:
keyid:F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/nwNU_ZVsEVwWW-MPHCXQR7MoGLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:f8c0::/29
2a0c:c185::/32
2a0c:c187::/32
Signature Algorithm: sha256WithRSAEncryption
22:56:94:93:3c:69:19:20:b0:f1:a7:ff:65:3a:7d:31:59:2b:
f9:59:e0:cb:c2:77:65:0b:73:9f:cd:61:50:d0:b3:4c:09:35:
7f:b9:7f:a9:9f:c2:ff:98:3e:1c:63:63:d1:8a:4a:7b:73:e3:
76:f4:9b:cf:cc:fd:dc:c6:4d:b6:87:4e:7a:70:cd:fd:70:4d:
e6:a6:a7:c7:2c:5f:4f:e1:95:87:ff:e6:2b:c4:ba:03:69:8e:
64:16:37:86:ae:28:7f:4a:a5:de:8e:aa:61:39:5c:d3:10:1e:
62:0b:fd:96:65:57:7a:32:d2:d7:51:75:13:a8:92:59:6a:35:
28:d5:b1:0f:60:a7:3a:8f:da:a6:d5:07:19:89:ed:85:1a:60:
79:d5:55:f5:f1:df:63:b6:08:5b:89:1c:61:b3:ae:33:a9:f0:
e9:59:60:de:92:2f:68:6c:a1:c2:68:23:53:61:19:33:d2:42:
30:29:c4:c5:0a:d4:ed:37:61:77:b7:62:8a:95:c7:97:b3:98:
11:55:43:87:fc:54:43:ed:1a:09:2e:31:1b:60:50:44:94:55:
99:15:c4:af:cc:b5:dc:1a:31:39:9d:2d:82:79:b7:68:ba:50:
30:22:fa:8c:1e:95:f9:40:bf:ab:b0:a9:47:bf:0e:f9:97:b6:
45:ff:f9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:44:30 2025 by rpki-client