Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/xu908d1x7ZZAyJSQllDU6MuExl4.roa
File: xu908d1x7ZZAyJSQllDU6MuExl4.roa (raw, json)
Hash identifier: lNKGrgJxnj6QPFbpQgdciCH/wYNErsT7dmA1/kh6l/c=
Subject key identifier: C6:EF:74:F1:DD:71:ED:96:40:C8:94:90:96:50:D4:E8:CB:84:C6:5E
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 019427481169326979880CB508204748BBC1
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/xu908d1x7ZZAyJSQllDU6MuExl4.roa
Signing time: Thu 02 Jan 2025 13:50:21 +0000
ROA not before: Thu 02 Jan 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141776
IP address blocks: 2a13:b487:1500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:11:69:32:69:79:88:0c:b5:08:20:47:48:bb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6ef74f1dd71ed9640c894909650d4e8cb84c65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:11:23:5b:2c:1c:55:07:48:54:4c:92:c3:fb:
af:62:57:2d:56:d6:97:3e:2d:b7:8d:7b:d9:11:92:
72:40:0e:80:7f:52:5b:49:be:a6:21:7e:82:15:72:
2e:fa:ee:f7:69:fd:fc:61:87:67:e4:52:55:45:d5:
8c:f2:87:5f:cd:b9:34:db:31:75:03:ff:45:8c:7e:
2a:7f:e3:9b:c1:7a:65:c8:03:5b:1b:5f:3e:fb:12:
88:f3:09:04:dd:1a:18:f7:a1:b1:12:84:9e:37:98:
4d:05:b4:7e:89:11:59:75:ce:37:ec:15:3a:ff:68:
a4:09:00:20:ca:e3:e9:c6:ea:9b:95:b5:06:42:91:
25:b3:b9:7c:91:ea:87:71:8c:45:d9:06:61:fa:66:
c6:fc:c3:cc:11:f7:b3:d7:2b:02:f6:0a:00:cc:d4:
b3:57:9f:cf:2b:31:5b:5a:74:22:85:cf:f4:3c:ec:
a9:21:da:4f:c2:f8:13:ed:31:0b:e4:cd:c6:7c:b7:
e0:15:ba:fd:8d:b9:54:eb:82:13:2a:65:8a:b0:f6:
0b:31:55:93:22:1e:42:b2:7f:04:f6:67:c9:7f:a1:
ac:ce:95:d9:23:01:b9:a3:1f:61:d0:50:72:25:ad:
3c:d3:5a:a1:66:b9:20:97:a1:96:d5:8d:3c:a8:41:
95:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EF:74:F1:DD:71:ED:96:40:C8:94:90:96:50:D4:E8:CB:84:C6:5E
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/xu908d1x7ZZAyJSQllDU6MuExl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1500::/40
Signature Algorithm: sha256WithRSAEncryption
af:88:5e:5b:49:3d:c0:ca:ba:a8:30:99:2d:ff:38:6d:4e:d7:
d8:7a:2e:8d:e4:00:36:f9:fd:e2:df:94:19:58:0d:2f:f8:a9:
d5:f8:d5:52:e4:08:ff:1a:14:a3:78:17:89:fa:74:86:cb:26:
e5:32:7f:d9:ec:82:19:47:7c:48:fb:39:04:e8:4b:14:c1:bb:
30:9f:b0:a8:3b:39:e6:e4:b2:02:9c:5f:ad:12:28:07:f5:49:
76:8c:47:22:9e:81:8d:97:0d:75:90:a2:41:d6:18:ec:d2:bf:
fd:39:7c:47:42:0b:26:42:03:c6:5b:f9:26:54:94:44:5b:3a:
2c:e8:78:40:6d:09:9b:45:44:1a:68:fe:0c:b3:60:30:d1:06:
fe:f0:27:88:00:b3:de:82:be:80:d3:ef:87:75:95:ee:61:57:
57:bc:8f:bc:c2:70:73:a2:a2:0e:b2:e7:a1:a7:52:15:af:00:
24:f0:96:35:48:10:1e:c9:7a:2b:db:56:98:28:11:08:61:33:
8a:6a:01:38:de:f0:85:75:52:8c:54:ed:f9:02:f0:35:7a:47:
6a:79:a2:64:e8:dc:9b:7a:3b:ca:9c:21:7b:c7:7f:25:db:be:
d0:ca:22:ac:5f:54:e5:8b:98:eb:5b:69:19:66:5b:9b:ee:ab:
cd:a0:79:ef
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQnSBFpMml5iAy1CCBHSLvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh
NWQzODQwHhcNMjUwMTAyMTM1MDIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmVmNzRmMWRkNzFlZDk2NDBjODk0OTA5NjUwZDRlOGNiODRjNjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BEjWywcVQdIVEySw/uvYlctVtaX
Pi23jXvZEZJyQA6Af1JbSb6mIX6CFXIu+u73af38YYdn5FJVRdWM8odfzbk02zF1
A/9FjH4qf+ObwXplyANbG18++xKI8wkE3RoY96GxEoSeN5hNBbR+iRFZdc437BU6
/2ikCQAgyuPpxuqblbUGQpEls7l8keqHcYxF2QZh+mbG/MPMEfez1ysC9goAzNSz
V5/PKzFbWnQihc/0POypIdpPwvgT7TEL5M3GfLfgFbr9jblU64ITKmWKsPYLMVWT
Ih5Csn8E9mfJf6GszpXZIwG5ox9h0FByJa0801qhZrkgl6GW1Y08qEGVlQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMbvdPHdce2WQMiUkJZQ1OjLhMZeMB8GA1UdIwQY
MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt
ZDZhNTk1MGNhZGYyLzEveHU5MDhkMXg3WlpBeUpTUWxsRFU2TXVFeGw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy
LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhO0hxUw
DQYJKoZIhvcNAQELBQADggEBAK+IXltJPcDKuqgwmS3/OG1O19h6Lo3kADb5/eLf
lBlYDS/4qdX41VLkCP8aFKN4F4n6dIbLJuUyf9nsghlHfEj7OQToSxTBuzCfsKg7
OebksgKcX60SKAf1SXaMRyKegY2XDXWQokHWGOzSv/05fEdCCyZCA8Zb+SZUlERb
OizoeEBtCZtFRBpo/gyzYDDRBv7wJ4gAs96CvoDT74d1le5hV1e8j7zCcHOiog6y
56GnUhWvACTwljVIEB7JeivbVpgoEQhhM4pqATje8IV1UoxU7fkC8DV6R2p5omTo
3Jt6O8qcIXvHfyXbvtDKIqxfVOWLmOtbaRlmW5vuq82gee8=
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:17:26 2025 by rpki-client