Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/naFvCl70pzp8lqXc_ULFx0iXk4o.roa
File: naFvCl70pzp8lqXc_ULFx0iXk4o.roa (raw, json)
Hash identifier: cK9sOAQ/zRhni0h2BPw0jOMDrZVlNLHsF4OIcwwOSE4=
Subject key identifier: 9D:A1:6F:0A:5E:F4:A7:3A:7C:96:A5:DC:FD:42:C5:C7:48:97:93:8A
Certificate issuer: /CN=a91f1e577ca1dbb8e05c0f56a6f678b1ea40d8ce
Certificate serial: 018572834B79B2E17CC118598B77ADD269D1
Authority key identifier: A9:1F:1E:57:7C:A1:DB:B8:E0:5C:0F:56:A6:F6:78:B1:EA:40:D8:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR8eV3yh27jgXA9WpvZ4sepA2M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/naFvCl70pzp8lqXc_ULFx0iXk4o.roa
Signing time: Mon 02 Jan 2023 12:44:45 +0000
ROA not before: Mon 02 Jan 2023 12:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:ec80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:4b:79:b2:e1:7c:c1:18:59:8b:77:ad:d2:69:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91f1e577ca1dbb8e05c0f56a6f678b1ea40d8ce
Validity
Not Before: Jan 2 12:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9da16f0a5ef4a73a7c96a5dcfd42c5c74897938a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:59:d5:66:c0:aa:3d:f5:88:54:77:16:b5:
8a:ad:6a:0d:9e:27:af:0e:35:82:f0:7b:75:3a:39:
5a:28:e5:30:bb:20:82:e8:d3:28:0a:74:27:d6:5e:
ee:32:7d:45:d5:b3:89:ee:7d:1e:2b:c1:0d:af:5a:
85:92:f8:93:b5:df:43:2b:02:3b:00:54:7e:13:cd:
91:35:46:7f:50:2c:42:b4:13:98:32:78:fc:4b:d1:
65:c2:0c:9c:ca:8d:26:ce:84:d8:24:55:f4:95:80:
0b:d9:59:08:2a:20:b3:dd:03:c0:20:b1:c6:0d:fb:
07:b9:f4:59:35:2b:88:aa:11:b6:6b:ba:cb:dd:8d:
3a:e2:86:78:db:35:5a:33:46:34:57:f6:a8:8d:9d:
a3:56:2e:25:8e:32:24:ed:b6:81:11:8e:13:12:a0:
ae:99:88:13:87:37:70:83:fe:77:4e:28:9d:2f:70:
b4:6c:25:11:fc:e4:cc:0f:81:72:30:b9:f0:63:fb:
23:dc:05:c1:68:5f:45:55:d5:03:39:43:d9:9c:60:
b3:8d:40:66:da:e9:bd:e6:d2:36:9a:ce:f9:b8:aa:
e7:5c:03:a5:ca:34:41:80:8a:23:32:ad:e3:39:75:
5f:36:c8:24:da:ad:61:29:ce:e9:e3:9b:34:27:d6:
f5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A1:6F:0A:5E:F4:A7:3A:7C:96:A5:DC:FD:42:C5:C7:48:97:93:8A
X509v3 Authority Key Identifier:
keyid:A9:1F:1E:57:7C:A1:DB:B8:E0:5C:0F:56:A6:F6:78:B1:EA:40:D8:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR8eV3yh27jgXA9WpvZ4sepA2M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/naFvCl70pzp8lqXc_ULFx0iXk4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/049a12-fe9b-4c32-b63c-ef4674562566/1/qR8eV3yh27jgXA9WpvZ4sepA2M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
6f:f4:e8:54:9b:44:c3:78:20:75:97:c1:7b:5d:94:f8:ae:41:
dc:c0:e1:98:4a:2c:f3:f6:59:29:4f:b5:9f:06:03:15:db:68:
bc:ab:e3:21:29:4b:12:59:e8:67:5f:c6:bc:32:f1:20:4e:84:
01:ac:ec:4b:49:38:8b:dd:3e:78:f1:4c:1e:2a:b6:6b:25:30:
76:f6:6a:db:a1:67:b6:11:19:c6:bd:d3:61:55:bd:72:16:df:
2d:dc:28:ea:d4:13:91:a5:d7:bf:6d:a6:12:4f:b5:60:31:8b:
27:2f:5f:83:fb:85:e1:4a:a4:d8:e8:d0:d9:f9:11:1b:dd:96:
95:fb:43:78:eb:ca:b2:b5:78:aa:2f:04:c9:ef:f3:0d:36:92:
40:8c:85:04:28:36:f4:f0:85:ba:c7:36:2d:a8:92:4a:12:5a:
57:e5:e3:f1:af:ca:e2:c0:51:11:4b:62:c7:94:16:ec:f5:4e:
06:5b:b3:29:47:21:b8:00:b8:f3:86:f9:81:62:ad:60:87:20:
d7:c3:8d:d7:13:4f:15:f5:8c:e3:26:dc:74:30:71:8c:75:6a:
02:14:d4:fa:93:1a:74:c2:2f:95:64:ce:87:a1:fc:79:0a:7b:
ce:5c:22:11:c7:27:6e:32:f6:93:79:f0:2b:73:b0:15:97:e2:
e9:ed:cd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:03:01 2025 by rpki-client