Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/X6xEtdbtx-FA89KexAHlhM8onBA.roa
File: X6xEtdbtx-FA89KexAHlhM8onBA.roa (raw, json)
Hash identifier: rlVOKfCoCiEEfjhU6f0pemc0VZKNKC23+JgJYG4rtvE=
Subject key identifier: 5F:AC:44:B5:D6:ED:C7:E1:40:F3:D2:9E:C4:01:E5:84:CF:28:9C:10
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0194274811AF11A7C6833B058FC3EBB1169C
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/X6xEtdbtx-FA89KexAHlhM8onBA.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150173
IP address blocks: 2a13:b487:5000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:11:af:11:a7:c6:83:3b:05:8f:c3:eb:b1:16:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fac44b5d6edc7e140f3d29ec401e584cf289c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:e2:44:93:b8:16:0b:e2:ac:17:c0:47:be:
f9:0e:3d:8d:5d:87:44:d5:67:b2:96:0e:4d:e9:21:
88:da:bc:e3:1a:4c:04:f9:1c:07:34:55:81:03:12:
74:f5:71:59:2b:1c:e0:49:b2:a8:bb:b4:7c:8b:e4:
8b:18:c5:27:49:dc:67:92:95:7a:41:18:03:1a:50:
f9:ce:66:91:31:2b:4d:52:31:4d:65:7c:fb:51:88:
f6:4c:97:66:7c:77:62:3c:dd:f2:aa:77:18:b9:e5:
8f:32:13:0a:07:2c:57:e7:4b:66:9b:7a:49:ff:03:
47:39:46:f2:db:ff:20:fe:3e:af:f0:ba:e2:6c:77:
89:7f:96:ca:1c:0c:40:a1:55:48:49:00:3c:af:1d:
4f:d2:99:2f:a0:eb:a9:b1:c3:fd:4b:0f:10:3a:00:
69:b5:09:58:ff:a8:7a:73:0d:19:d8:68:1c:25:cb:
19:0e:46:aa:23:3e:84:d8:08:ba:93:89:d8:7f:fb:
64:f1:92:25:c0:2d:4b:b0:86:48:02:cd:0e:36:e4:
50:29:20:9f:89:3c:e3:78:19:1f:8a:11:37:7f:6a:
be:96:ff:ee:da:ae:a9:76:d1:ab:68:cd:fd:85:bf:
98:3c:b8:f6:7c:a8:01:32:d4:4f:49:c9:35:5e:f2:
d9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AC:44:B5:D6:ED:C7:E1:40:F3:D2:9E:C4:01:E5:84:CF:28:9C:10
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/X6xEtdbtx-FA89KexAHlhM8onBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:5000::/40
Signature Algorithm: sha256WithRSAEncryption
b8:90:43:d7:63:d1:a3:69:29:4d:0d:e7:1b:72:03:69:97:31:
eb:d6:dd:e8:85:66:b6:ad:61:87:dc:59:83:ad:0e:1c:0d:d2:
d2:05:3f:6b:01:15:be:f4:fc:b2:ca:9e:70:f1:dd:09:bf:ae:
1d:0b:43:72:f6:06:bf:f0:01:39:6c:50:8e:dd:e6:97:a4:f5:
33:1d:e0:06:ba:cb:ca:76:c6:a0:11:97:0c:6b:73:7e:fb:03:
d3:6a:03:c3:e9:a1:78:80:3f:44:f7:77:4e:19:2f:dd:47:77:
60:48:4c:fd:1b:b4:70:8c:2b:ff:e7:54:b6:7a:29:d3:c9:6e:
59:70:7e:df:03:e1:4f:dd:1b:6f:9e:a8:c6:ca:ac:27:51:bd:
51:60:e7:4d:e1:eb:4e:06:8f:21:f2:e9:8b:50:8a:c4:3f:5f:
a9:72:25:b5:49:cd:fc:4b:1e:88:83:dd:47:c0:8d:c3:e5:da:
57:a2:47:66:b8:dd:a9:ee:47:0a:dd:e7:31:05:83:b2:5b:3e:
a6:8d:2a:74:9c:ff:1c:a5:3f:08:48:b4:19:72:f3:c5:eb:c3:
6c:cc:f3:83:b9:a5:3d:1e:99:4e:11:68:15:ff:31:1c:61:d2:
35:10:9b:18:33:f3:e8:18:a8:e5:3b:5a:5b:0f:df:57:57:b7:
9c:31:ed:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:53:03 2025 by rpki-client