Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/NJbMFgEWR8OCOcj-4vA3BkIS944.roa
File: NJbMFgEWR8OCOcj-4vA3BkIS944.roa (raw, json)
Hash identifier: MWZ/EMVCArGx30ry9vrlbraU7VZaJ+T1oviZlNEjkZM=
Subject key identifier: 34:96:CC:16:01:16:47:C3:82:39:C8:FE:E2:F0:37:06:42:12:F7:8E
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01956BF08A2A446BB3B0A4489D05E9022FA2
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/NJbMFgEWR8OCOcj-4vA3BkIS944.roa
Signing time: Thu 06 Mar 2025 14:51:20 +0000
ROA not before: Thu 06 Mar 2025 14:51:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205964
IP address blocks: 2a11:400::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:f0:8a:2a:44:6b:b3:b0:a4:48:9d:05:e9:02:2f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Mar 6 14:51:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3496cc16011647c38239c8fee2f037064212f78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:f8:2c:14:f4:0b:9c:23:01:18:35:e6:04:
a2:64:4d:6a:ab:dd:b1:27:ec:a9:12:44:1d:81:6d:
56:a5:4b:2e:9b:b3:49:31:77:b1:bb:36:cc:d6:23:
ab:38:db:d7:f6:4b:5d:ba:a7:c9:02:93:df:80:d2:
5f:1f:ed:04:af:0d:6f:8a:04:02:e0:a6:c2:dd:dd:
bb:d2:98:cd:e8:f2:4d:85:61:64:23:ef:70:2c:08:
01:c3:14:4f:3e:5c:bb:68:f6:87:7c:7d:f2:df:9d:
dc:cd:3e:0b:56:59:6e:9c:02:d6:70:e9:85:10:4a:
47:12:69:16:af:f6:9b:4e:a6:93:51:e4:48:f2:66:
8f:a5:4b:39:3c:e5:97:93:77:14:d0:9d:68:95:15:
d6:dd:ef:8a:34:5d:3d:e9:da:8e:6e:91:0d:0e:ee:
67:56:0b:aa:b2:90:2b:bd:2f:0a:b4:28:fa:a8:0d:
c9:c0:67:4d:36:c7:b0:dc:72:fe:6d:8b:51:84:3d:
dc:9c:19:eb:8c:33:21:f3:20:15:25:be:2f:9a:03:
5e:d3:15:ba:f4:4d:ac:d0:b0:21:ab:cc:56:b8:ea:
04:e2:c3:46:c6:39:0c:6f:9e:a5:78:58:43:40:20:
3e:96:9a:f9:ed:34:2f:2e:98:3e:36:b5:f4:2a:8a:
c0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:96:CC:16:01:16:47:C3:82:39:C8:FE:E2:F0:37:06:42:12:F7:8E
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/NJbMFgEWR8OCOcj-4vA3BkIS944.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:400::/29
Signature Algorithm: sha256WithRSAEncryption
09:f2:68:98:b5:2d:bd:bf:30:65:ad:ac:c7:77:fd:59:1a:e9:
0f:da:31:d8:10:af:b1:06:23:6e:5a:1e:bf:ae:c3:0a:d3:59:
17:ba:3b:fc:4f:6e:73:6d:2b:09:a6:2a:cc:a7:04:f1:44:8f:
ad:14:f0:4e:eb:79:c9:0f:d3:0e:0c:26:21:83:d4:4f:11:bb:
70:38:ac:81:df:a8:0e:7d:47:f9:29:84:4f:1a:df:20:b2:40:
75:61:f3:45:13:3a:27:64:82:39:29:f8:f6:d7:3a:9c:6d:e1:
1b:99:f9:17:b0:68:2f:72:73:9d:3d:51:ea:1b:72:e6:34:fd:
ef:7a:07:35:50:7c:87:bc:92:87:1e:b5:be:b1:bd:8e:23:85:
91:71:2b:ab:63:48:d2:c2:47:d7:d6:fb:51:ae:e3:ed:74:44:
99:83:b4:60:4d:86:9a:af:34:41:06:45:24:42:4a:dc:c9:d8:
58:6e:cb:61:47:d2:1e:bf:28:65:ec:92:b5:62:34:9f:f4:f9:
e3:4b:82:28:77:6a:0d:b1:ab:e1:bd:77:23:f2:40:3c:ce:da:
48:93:b9:87:b4:c3:93:df:b1:76:f4:34:51:08:d1:f1:67:38:
6e:90:0d:b6:c5:bf:46:e6:98:e4:eb:67:77:08:9c:3b:84:f0:
57:4b:08:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:38:18 2025 by rpki-client