Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/nL6nA1XUkI-yjxnR-Sllfx_Rdhw.roa
File: nL6nA1XUkI-yjxnR-Sllfx_Rdhw.roa (raw, json)
Hash identifier: ic4vLCYFU+9vQY2Fze/39Yh6SvPhzwSzvX0dSkYlXGg=
Subject key identifier: 9C:BE:A7:03:55:D4:90:8F:B2:8F:19:D1:F9:29:65:7F:1F:D1:76:1C
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369F67966C6682540B8DC1632BFEBF1
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/nL6nA1XUkI-yjxnR-Sllfx_Rdhw.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214808
IP address blocks: 2a0f:7803:fac0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f6:79:66:c6:68:25:40:b8:dc:16:32:bf:eb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cbea70355d4908fb28f19d1f929657f1fd1761c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:ce:10:f5:22:5d:e5:5f:43:7f:97:e7:6b:
89:9e:a6:17:0b:62:6f:22:11:60:7b:c3:81:2e:a3:
a4:84:7f:48:cf:90:6c:b9:55:f1:87:29:a6:59:94:
ff:76:58:02:a5:54:d5:b5:82:31:a4:66:1d:6d:89:
4a:da:d2:d0:51:60:33:57:db:bc:eb:54:e3:94:6a:
ea:62:6b:11:6e:87:ca:cf:80:4c:49:b1:4a:f7:2d:
8a:98:e7:21:40:be:c6:6f:6a:25:4c:cc:c1:d0:23:
1e:3b:c8:21:eb:76:7a:8f:6a:ae:7e:48:97:5a:95:
b2:d4:b5:42:48:10:df:ff:76:cc:76:be:53:c8:28:
c1:7c:e8:cc:32:c4:0a:40:1a:d3:44:1a:a9:cf:7d:
04:74:44:c4:7a:c4:33:e8:8d:e8:9c:e3:bc:90:24:
e3:48:b1:16:3e:7c:b8:65:3f:af:59:07:dd:e0:b1:
c5:65:68:9c:36:e6:cc:41:33:cd:c3:ba:c2:da:a8:
e8:e7:1f:23:8d:ce:4e:68:79:17:06:f9:52:ce:41:
11:38:2a:97:e1:43:8a:37:41:40:80:be:cb:9d:5b:
7e:9b:3e:35:84:1f:22:fe:65:a1:ae:ff:b9:a6:68:
2b:1e:c0:bd:8b:55:2d:0e:4a:fb:7a:40:69:91:00:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BE:A7:03:55:D4:90:8F:B2:8F:19:D1:F9:29:65:7F:1F:D1:76:1C
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/nL6nA1XUkI-yjxnR-Sllfx_Rdhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fac0::/44
Signature Algorithm: sha256WithRSAEncryption
4f:36:ac:3f:fc:39:7d:82:4d:d6:f5:79:2c:81:01:e4:bf:ba:
c6:05:87:b9:c3:c7:68:40:92:dd:14:ee:99:8e:e7:22:0a:f8:
03:2c:ce:0f:4d:3e:31:1a:87:bc:cc:3e:26:f9:bb:55:f1:0b:
5d:10:de:ca:72:0d:f4:40:06:35:bf:52:f4:92:c0:6e:7b:85:
46:c1:f9:c6:f7:52:a5:0a:22:90:45:0c:21:f9:5e:c3:a6:d6:
d8:36:a2:e4:41:33:8b:b5:13:24:ce:db:81:25:ae:11:d7:3c:
cb:eb:47:72:17:af:37:48:32:9a:62:02:56:91:86:51:26:0e:
f1:1b:03:97:78:98:56:5d:ce:fc:86:41:0b:ae:86:3d:94:76:
71:69:e3:98:b1:32:5f:18:d0:a4:84:6e:df:a3:00:8a:af:55:
59:1e:ad:95:df:68:3d:77:26:c0:d0:fc:b9:9a:c9:18:9f:53:
51:25:30:fb:87:f4:ef:c5:2a:87:d8:d9:a5:b6:3c:f3:e6:fe:
f1:e0:55:5b:3b:a1:45:01:97:f7:bb:53:6e:33:bb:93:ba:55:
86:0a:08:f2:50:a8:9b:2b:1a:53:8b:f6:b8:55:fc:7d:2a:8e:
51:7c:e6:00:ad:a7:0a:c4:af:2c:9e:e0:82:11:cb:48:e7:ec:
32:6f:ea:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:07 2025 by rpki-client