Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/C9KImdLZ9to6ZVA06iOzN2U46sU.roa
File: C9KImdLZ9to6ZVA06iOzN2U46sU.roa (raw, json)
Hash identifier: I1LAmBBBB/Ds3FNpil0jD8b9PsftI8wpzpWsrAKJpPc=
Subject key identifier: 0B:D2:88:99:D2:D9:F6:DA:3A:65:50:34:EA:23:B3:37:65:38:EA:C5
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369E379D17C4BC7810CDFEC34E7A735
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/C9KImdLZ9to6ZVA06iOzN2U46sU.roa
Signing time: Wed 01 Jan 2025 19:48:49 +0000
ROA not before: Wed 01 Jan 2025 19:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a0f:7803:f98f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e3:79:d1:7c:4b:c7:81:0c:df:ec:34:e7:a7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bd28899d2d9f6da3a655034ea23b3376538eac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:f3:f4:33:36:82:a6:4c:e3:33:0e:01:0d:
84:a1:b5:7a:fd:11:1d:d7:48:19:91:f6:b3:0a:15:
aa:09:0c:82:36:6c:f3:e5:4c:55:ce:a8:24:45:37:
a9:8c:28:c1:2a:35:86:fa:11:3d:10:25:7f:e5:0b:
cb:c6:c3:db:ef:09:b2:0a:52:f9:98:d9:1d:6e:51:
0a:b8:a0:b0:cd:59:71:81:69:ec:42:35:ad:4e:bd:
5b:01:06:c8:6f:57:36:0a:07:89:89:70:98:82:a6:
b7:09:ed:40:37:73:80:40:36:91:b5:90:5d:7a:aa:
fc:0a:f5:0e:44:17:b4:11:42:10:c0:04:a3:02:3c:
13:a9:f6:5d:56:d7:82:e6:fe:71:35:c1:b3:30:21:
52:bb:51:98:a7:7c:3e:66:99:5a:c1:93:39:5a:5e:
40:a3:a4:83:f3:59:89:ee:d3:8a:86:2b:67:2a:04:
c5:97:58:f6:6b:67:dd:fd:5b:30:2d:c4:4b:64:bd:
e6:e8:d1:24:82:f2:b6:e4:fd:1e:18:bc:11:ce:a9:
2a:e4:0c:3e:4d:90:5c:f8:21:50:ff:bb:0a:e2:3b:
e5:0c:7a:d7:5a:ff:79:0d:87:b0:82:9f:cc:10:0c:
da:83:aa:3d:f8:7e:03:6b:c1:a9:47:17:b8:4f:f6:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D2:88:99:D2:D9:F6:DA:3A:65:50:34:EA:23:B3:37:65:38:EA:C5
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/C9KImdLZ9to6ZVA06iOzN2U46sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:f98f::/48
Signature Algorithm: sha256WithRSAEncryption
04:30:39:69:8a:30:7c:35:7f:a3:df:4b:b6:5f:16:a4:bb:a0:
24:bd:4f:df:19:7c:97:54:dd:9d:c9:0c:4d:f9:cf:c2:be:b0:
d3:5f:a4:21:a3:5a:9c:b7:39:7e:87:57:e4:0b:32:2a:2b:1b:
35:c3:84:c4:ec:29:a1:09:b3:27:17:4f:1e:bf:47:64:b2:0e:
3d:df:dc:56:92:9e:4e:e7:c7:84:ee:11:8b:70:65:d0:c6:ce:
b5:c3:ab:fe:13:24:8c:a4:d6:d0:73:03:24:b0:fa:4a:27:45:
3e:38:77:e4:d8:f3:53:34:5b:65:5b:5e:4f:99:fb:24:1f:d3:
1f:d0:35:b8:02:13:21:1c:d1:8d:55:ca:2a:67:3e:95:e9:20:
d8:6f:e3:a4:cc:55:c3:c4:29:48:6e:20:0b:8c:aa:d4:e2:69:
eb:a4:f7:1b:d9:df:e0:12:77:1e:57:88:45:e8:67:4d:d0:65:
6a:0b:26:50:96:8c:38:aa:58:04:89:7c:f5:19:ed:34:de:26:
d7:95:c0:a5:64:ed:fb:ba:73:a9:04:a5:6e:f3:c8:50:61:c0:
a3:27:99:3e:b2:15:88:78:20:26:2f:56:54:69:10:e5:d9:28:
64:a1:19:da:d2:db:db:ef:b9:c5:a3:4a:97:7c:4a:20:ca:22:
33:86:08:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:04 2025 by rpki-client