Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/9xV9_fze4hEiHRTfetcMOaYtwpc.roa
File: 9xV9_fze4hEiHRTfetcMOaYtwpc.roa (raw, json)
Hash identifier: CklFQfcIKFqNZPhKFZNKEUynWDpDHjzYSRYtePRY3l0=
Subject key identifier: F7:15:7D:FD:FC:DE:E2:11:22:1D:14:DF:7A:D7:0C:39:A6:2D:C2:97
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0195082CB5E2C22ADE17D89253F830FE05C8
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/9xV9_fze4hEiHRTfetcMOaYtwpc.roa
Signing time: Sat 15 Feb 2025 05:55:02 +0000
ROA not before: Sat 15 Feb 2025 05:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a05:9080:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:08:2c:b5:e2:c2:2a:de:17:d8:92:53:f8:30:fe:05:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Feb 15 05:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7157dfdfcdee211221d14df7ad70c39a62dc297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:61:4c:3e:15:10:40:69:b2:3a:14:a4:09:4c:
1e:ef:a1:f9:e5:fa:b0:1a:db:70:cc:c5:8b:69:55:
d9:a0:01:38:9b:30:1c:d9:10:e7:d4:34:4f:db:3a:
92:64:d0:00:65:3b:bb:ff:dc:cc:0b:c9:24:c8:d8:
bd:39:f8:ed:ee:69:c9:33:fc:fe:5a:be:30:e1:ff:
2e:a4:0d:36:37:92:63:52:a5:ec:45:d3:07:6c:8f:
99:57:fc:af:a1:fe:ce:01:d7:f4:cd:4d:66:a9:87:
a0:77:9c:7b:a9:45:ac:ca:1f:ce:34:4e:dd:40:dc:
46:3d:25:fb:c2:2d:7e:9b:b5:27:cf:be:5e:7c:65:
9f:90:5d:7d:76:e2:1a:48:1b:3b:f2:6f:4e:90:2e:
43:31:b4:bd:bd:03:39:e8:75:33:30:eb:ec:42:22:
1e:0c:44:26:48:85:c8:a1:fb:b7:ec:4d:f7:ef:99:
ef:0b:4a:2e:14:4f:39:6d:2b:04:47:b4:aa:66:11:
f5:21:0a:48:75:f6:3e:73:35:4d:1f:df:a7:60:7b:
f5:f0:87:66:77:da:ac:00:db:fb:c7:8a:78:58:d5:
e6:f6:b9:8c:dc:f3:09:cc:23:53:c8:4a:25:94:3a:
2a:fb:b8:11:07:9a:6f:9a:96:ab:95:e2:61:de:1c:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:15:7D:FD:FC:DE:E2:11:22:1D:14:DF:7A:D7:0C:39:A6:2D:C2:97
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/9xV9_fze4hEiHRTfetcMOaYtwpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:1::/48
Signature Algorithm: sha256WithRSAEncryption
ac:a4:67:67:8b:e5:94:cb:28:2b:05:f0:09:87:1c:3f:6a:0e:
e1:83:41:5f:a3:9f:ea:70:e9:98:4e:d4:e6:1e:87:17:a3:12:
b4:95:e8:1c:19:e1:57:f6:98:43:ef:f4:69:5c:45:6d:d6:85:
48:36:fa:47:07:9a:8d:e8:82:fe:f9:1d:20:31:b0:6a:f1:30:
44:6a:d5:88:12:dd:ea:5e:de:22:d5:3b:dc:70:ce:37:29:75:
9e:9d:f0:3e:87:22:e8:68:f8:73:33:d1:14:94:3a:2c:f7:60:
ca:1e:05:64:13:47:d7:37:2a:9b:28:ad:5b:7b:b1:a9:b6:f2:
f4:d0:77:60:3d:08:fd:c3:67:26:1b:3f:b3:84:2c:60:dc:4d:
80:61:42:96:a4:ac:41:af:fc:8a:3e:eb:03:fe:4a:46:57:f0:
0f:84:46:90:26:01:0b:96:cf:64:9e:4a:00:ba:2a:4b:3c:f3:
01:72:34:68:26:58:f4:20:91:aa:ce:79:fc:0d:03:b0:3e:43:
ad:db:ff:ff:47:6f:98:04:3a:90:da:80:5e:46:be:12:47:74:
03:eb:69:4e:9e:2e:59:66:c0:95:a5:77:32:bc:ec:a2:3d:e9:
e2:07:8f:50:fe:0c:95:ad:51:bd:c7:25:ca:04:f0:ac:1c:53:
c1:9b:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:26:44 2025 by rpki-client