Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/nnCUhVImeKVSSHsPJ4bQMntIe0k.roa
File: nnCUhVImeKVSSHsPJ4bQMntIe0k.roa (raw, json)
Hash identifier: y/vliRYcabvic0DNd0VxC9usOOdHfTvNAxGNCa7L498=
Subject key identifier: 9E:70:94:85:52:26:78:A5:52:48:7B:0F:27:86:D0:32:7B:48:7B:49
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 0194206837A9153A87CF1B4E7922AED4349A
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/nnCUhVImeKVSSHsPJ4bQMntIe0k.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213861
IP address blocks: 2a11:b680::/32 maxlen: 32
2a11:b681::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:37:a9:15:3a:87:cf:1b:4e:79:22:ae:d4:34:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e709485522678a552487b0f2786d0327b487b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:da:78:6e:25:de:a1:9b:99:b1:e3:40:45:90:
52:4e:46:fc:8a:36:d1:b1:52:20:ac:3c:74:8c:ef:
30:4f:72:aa:53:a4:c2:ae:e0:9c:6c:ce:24:97:86:
59:7c:b0:44:cc:e7:23:b3:cd:a6:ff:fd:0c:74:f6:
65:2c:42:b5:5f:44:03:c0:f7:90:0a:8c:be:ad:f4:
a6:6f:65:a5:81:54:e6:b7:4d:25:aa:16:45:92:2c:
5b:c6:9e:90:11:33:55:74:08:7c:05:53:86:65:73:
74:0e:ce:f9:95:18:07:88:f0:ef:4e:fc:63:32:3b:
82:ad:dc:f6:22:3c:e1:c0:41:2e:c2:02:97:eb:fb:
cb:54:8b:6d:24:86:d3:63:47:3c:a9:5b:d8:fa:bd:
37:a2:ca:63:32:12:07:a5:e0:ee:6f:f7:b3:e3:24:
5d:a1:d1:6d:b1:81:06:bf:fd:d6:a5:48:90:80:d8:
21:ad:64:53:a4:5a:7f:11:60:57:56:6c:56:cc:8e:
d4:0f:3e:8b:42:aa:51:6b:21:03:61:d2:88:fc:4d:
d8:3b:af:c7:ad:81:04:95:5e:df:7b:7a:31:9b:91:
98:db:5d:4c:78:dd:8e:8d:e6:44:34:99:80:92:ea:
5d:62:e7:bd:44:4f:40:05:32:db:f0:d7:17:f2:f1:
d7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:70:94:85:52:26:78:A5:52:48:7B:0F:27:86:D0:32:7B:48:7B:49
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/nnCUhVImeKVSSHsPJ4bQMntIe0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:b680::/31
Signature Algorithm: sha256WithRSAEncryption
53:99:b7:e2:6c:61:e4:03:84:b8:2e:3b:40:33:12:54:9d:30:
e9:06:0f:04:8c:2b:bd:dc:c5:d6:32:05:13:1c:30:0f:35:09:
c7:d8:8c:58:7a:7b:9d:ab:ca:1c:00:d7:7e:8e:42:aa:34:1f:
a0:c0:2b:0b:d5:31:65:51:28:6f:ba:88:01:af:b0:0d:08:5e:
43:a8:41:7b:93:3c:22:33:9e:2c:ab:bf:9e:6e:6e:2a:89:67:
c3:90:ff:4e:fa:f3:d1:f6:5d:f9:42:2d:73:c4:bd:3a:54:68:
3c:a4:0d:0b:7a:34:d6:ba:e2:03:2a:a4:85:01:3c:86:19:2c:
86:59:85:ec:d5:c7:be:32:bc:a0:53:72:12:65:12:ab:78:12:
d0:2a:b5:d1:15:12:e2:5e:51:9b:fd:f9:16:25:59:89:19:65:
4d:92:bc:47:1f:4c:fb:51:2b:7d:97:33:07:3b:ad:e4:e4:42:
57:01:2e:6c:90:4e:85:65:d3:1c:5c:94:db:f7:dd:9a:f4:5c:
6a:4f:17:2f:39:68:01:9e:d8:27:05:5b:3b:fd:d2:90:fe:83:
c6:f2:be:fa:b7:3a:24:e5:27:8f:76:9e:56:43:8b:ef:16:d6:
85:6f:30:ee:80:68:14:3b:a2:ae:79:83:bd:0f:6c:ee:83:84:
46:1a:17:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:20:41 2025 by rpki-client