Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/nQ9AG6h0t4BBBHaY1oIQ2Z7HXiE.roa
File: nQ9AG6h0t4BBBHaY1oIQ2Z7HXiE.roa (raw, json)
Hash identifier: bmhEBNk6LesEwcu8xwGODwFl5oPTmJlYZFKxsnvzgRU=
Subject key identifier: 9D:0F:40:1B:A8:74:B7:80:41:04:76:98:D6:82:10:D9:9E:C7:5E:21
Certificate issuer: /CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Certificate serial: 0194214447A9B85AD186159B947776C9A3C2
Authority key identifier: AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/nQ9AG6h0t4BBBHaY1oIQ2Z7HXiE.roa
Signing time: Wed 01 Jan 2025 09:48:30 +0000
ROA not before: Wed 01 Jan 2025 09:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206051
IP address blocks: 2a01:f780::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:47:a9:b8:5a:d1:86:15:9b:94:77:76:c9:a3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Validity
Not Before: Jan 1 09:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d0f401ba874b78041047698d68210d99ec75e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:8d:bc:59:d0:1d:4b:db:48:6a:d5:fc:4b:
4d:b7:8a:45:4a:07:a2:24:5e:b0:91:b7:4e:ce:6c:
0e:d0:23:22:a5:c6:69:e7:f0:ac:68:e9:ae:d2:ec:
74:76:bd:a8:b3:e1:d8:e2:46:11:7c:80:64:91:d3:
9f:10:ec:15:01:49:bc:b8:1e:6a:8f:9d:d3:80:e8:
56:1e:a4:99:dd:29:46:22:a0:16:40:67:ed:6b:7e:
d2:c3:91:44:e2:ec:ae:57:9a:8c:19:6d:ad:61:bb:
03:89:46:ea:fc:22:3d:cf:cb:a3:83:ca:af:6a:d1:
01:30:40:82:d5:de:9e:06:03:8d:57:cd:ce:83:7c:
a4:ef:ca:b6:70:93:ee:ae:92:38:e5:67:30:2e:d2:
88:38:90:86:69:ae:a7:2c:0d:8d:1f:9a:7f:b9:df:
0f:ea:ad:54:82:db:65:2f:18:40:37:4f:f9:de:96:
da:42:ba:63:bb:16:f6:32:b1:b7:6a:fa:cd:68:28:
92:6c:17:41:e6:4a:4f:a9:11:8d:6b:6a:42:3c:7c:
5a:d4:b4:0a:47:b1:4b:24:64:b2:ce:65:e4:13:13:
96:74:f3:57:36:9a:e5:28:e2:6c:44:76:8b:6c:7d:
63:f5:24:c9:4a:d7:11:4d:85:8d:b7:f0:d4:c0:a7:
9b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0F:40:1B:A8:74:B7:80:41:04:76:98:D6:82:10:D9:9E:C7:5E:21
X509v3 Authority Key Identifier:
keyid:AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/nQ9AG6h0t4BBBHaY1oIQ2Z7HXiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f780::/48
Signature Algorithm: sha256WithRSAEncryption
13:90:4b:2b:2a:a9:01:f7:05:44:bf:da:b1:39:6b:c6:ce:fd:
d6:4e:2e:d7:5c:2d:35:9e:c5:6d:1d:83:c8:ff:21:e9:2b:64:
81:1b:a1:23:10:6b:df:6f:0c:06:3f:43:51:a2:fb:a9:5c:71:
54:13:84:4f:de:ca:52:ce:51:13:e9:23:85:20:1d:d1:45:1e:
2e:7d:60:95:6e:e8:4d:81:e1:1d:3b:ab:4d:f7:6a:72:dc:0c:
14:83:0a:a3:74:06:be:ce:82:90:63:95:3e:d1:ba:29:e2:f9:
77:91:31:44:b5:ab:70:f5:9a:f0:ca:a2:cb:69:4f:44:60:25:
3a:e4:6c:72:d4:5a:c6:81:3a:c7:f5:c7:0c:5b:76:be:14:1d:
98:d5:16:88:e4:58:8b:d5:38:a8:7d:b2:04:33:47:06:36:44:
63:a6:20:02:05:67:b9:db:2f:9a:f3:0f:21:e0:8f:0e:f1:54:
17:33:05:d0:25:04:b6:63:3f:a1:bf:2e:fa:b1:2b:18:f1:29:
0b:ee:cf:d1:88:c0:7f:c2:15:0d:f1:70:ea:dc:41:ed:69:f1:
74:1a:bb:89:c2:e8:f3:8f:06:34:30:a8:eb:c4:62:83:06:9a:
bd:6e:1b:b9:a2:f4:1c:a4:20:fe:ee:4a:98:9d:7f:31:ae:17:
96:76:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:50:39 2025 by rpki-client