Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nWH6ZWat2t6LmQv9t4uLpLEiUN0.roa
File: nWH6ZWat2t6LmQv9t4uLpLEiUN0.roa (raw, json)
Hash identifier: hIQnadGfhZcw8qAiM54KGLzL3URVVKSUB14635PgyAc=
Subject key identifier: 9D:61:FA:65:66:AD:DA:DE:8B:99:0B:FD:B7:8B:8B:A4:B1:22:50:DD
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01942748321DC1D88DCD73AE3EC0DBD62FBB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nWH6ZWat2t6LmQv9t4uLpLEiUN0.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395839
IP address blocks: 2a0f:3940::/29 maxlen: 29
2a0f:39c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:32:1d:c1:d8:8d:cd:73:ae:3e:c0:db:d6:2f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d61fa6566addade8b990bfdb78b8ba4b12250dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:06:ea:48:1b:92:15:a5:23:ba:79:30:22:
cc:e2:35:06:d8:0c:19:49:61:a9:f8:14:29:57:51:
2c:3d:b0:37:89:42:35:eb:12:6d:5d:57:1d:db:1a:
02:71:9d:1b:35:1f:aa:f1:51:72:7f:9f:4f:c4:b7:
c8:21:a9:d6:07:aa:c8:25:52:f7:0e:87:7d:f2:32:
fe:b7:36:a3:52:0c:63:ed:eb:97:94:66:38:ea:1f:
0a:22:56:08:33:74:b6:02:2f:ab:bf:d6:cf:67:c5:
2c:42:8c:2d:c7:c7:15:13:cf:fe:c6:61:6c:91:a5:
2f:a3:e0:13:4b:bf:ff:f0:95:ac:2c:d8:61:04:f9:
ac:99:b9:6b:f5:83:aa:11:8b:09:4a:91:0b:28:fa:
01:7a:d4:23:44:7c:3a:a4:92:30:ad:61:66:c1:14:
27:74:f9:8d:18:99:39:25:c4:73:15:a8:79:b2:65:
b4:e8:d7:69:a4:5b:7e:f1:7a:6f:75:72:4d:7e:a8:
46:5d:e6:91:7f:5e:9a:50:cd:95:f3:56:b6:b4:79:
8f:15:d3:61:bc:16:0a:d2:75:72:7e:b0:4d:df:de:
c2:a2:de:3b:8f:49:18:38:57:2d:d7:24:35:7d:80:
e8:d2:fb:dc:1b:36:09:a7:4c:36:1e:46:b5:69:00:
7c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:61:FA:65:66:AD:DA:DE:8B:99:0B:FD:B7:8B:8B:A4:B1:22:50:DD
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/nWH6ZWat2t6LmQv9t4uLpLEiUN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3940::/29
2a0f:39c0::/29
Signature Algorithm: sha256WithRSAEncryption
77:1a:de:9d:02:6b:2e:c0:02:36:aa:43:81:32:ed:82:75:3b:
e1:44:eb:1a:e4:5d:d9:bb:08:fd:34:42:b0:e3:25:a8:50:f1:
4b:36:0c:d6:6a:ea:81:57:02:b6:37:fa:9f:fe:2d:77:21:ad:
49:51:0c:bd:41:fc:84:9f:11:d2:f2:94:cd:c0:d6:20:52:f2:
35:70:28:56:2a:03:39:51:03:d7:f7:e7:66:99:1a:12:52:4a:
eb:f3:32:31:58:73:2e:5b:f1:ef:21:a7:41:86:da:97:89:c5:
69:46:95:c2:6b:5b:97:ca:40:f8:bd:ca:40:ce:2a:8b:cf:10:
62:00:74:17:13:f0:65:6a:2a:e7:fa:bb:f0:f8:d4:d2:db:e8:
38:38:ef:40:f5:db:45:a5:f6:b1:82:05:d3:a3:33:d4:54:31:
a4:83:d6:29:49:53:04:57:84:e1:d8:78:6e:b3:c3:ea:94:4e:
f0:fc:b1:34:31:82:a9:0c:f7:10:cb:e2:a4:94:6e:04:96:d3:
ff:da:08:9b:64:a0:03:6c:ff:d2:f6:61:54:71:fe:5e:44:50:
32:44:de:c0:a6:b1:00:57:c6:a7:ec:1d:2c:91:c5:1d:9b:21:
51:34:3f:74:dd:69:94:df:4a:09:1f:24:3f:c0:fc:9f:97:85:
0c:a5:3d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:32 2025 by rpki-client