Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/xkiyfopra9Z8dWj6RKQ21Ghh1cY.roa
File: xkiyfopra9Z8dWj6RKQ21Ghh1cY.roa (raw, json)
Hash identifier: NK5pNQWJhpbChJlovQQprwcPTbgg+ov/G17cFGSMSjA=
Subject key identifier: C6:48:B2:7E:8A:6B:6B:D6:7C:75:68:FA:44:A4:36:D4:68:61:D5:C6
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0195B38C976073C46BB1F7FD18C311A5F7F8
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/xkiyfopra9Z8dWj6RKQ21Ghh1cY.roa
Signing time: Thu 20 Mar 2025 12:34:50 +0000
ROA not before: Thu 20 Mar 2025 12:34:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214967
IP address blocks: 2a0b:ac00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:8c:97:60:73:c4:6b:b1:f7:fd:18:c3:11:a5:f7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 20 12:34:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c648b27e8a6b6bd67c7568fa44a436d46861d5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f6:9a:d3:c9:8d:63:66:86:28:87:5a:87:96:
b7:5a:2c:4a:62:13:dc:d9:5c:7d:64:73:11:41:c4:
21:dc:e9:4e:ec:97:f8:59:17:37:5d:32:b1:bd:6b:
2d:b0:d5:63:6b:72:e6:05:9d:6f:d1:d9:f2:f9:ba:
6c:8c:5b:66:26:41:9b:ae:e7:31:69:e4:f0:e3:cb:
dc:f0:d1:63:23:73:d0:cf:2a:bd:ee:89:4c:a0:a6:
bf:e3:4a:bd:8e:5f:3a:3c:17:ba:54:21:c2:69:95:
e7:f5:85:ad:0e:82:b2:52:40:d9:fb:5d:45:c3:a3:
16:58:4d:98:14:b3:f1:d8:de:aa:e3:36:8d:f6:11:
4d:5e:75:88:50:17:01:35:7a:15:73:29:d8:25:39:
26:d4:27:b9:54:7c:ef:49:2d:88:42:d2:d6:1f:70:
04:25:fe:40:6f:be:34:ba:a6:38:88:30:d9:be:f2:
3f:dd:33:95:15:9f:21:21:83:de:92:de:38:89:b6:
ef:18:fe:6e:94:5d:f2:77:28:16:cd:68:3d:a1:c6:
02:a5:f9:2e:e8:58:63:f3:00:94:35:3e:a4:b1:aa:
e8:b2:8b:7d:90:9d:5e:d7:c8:bf:3a:40:97:4e:ae:
1f:f3:77:46:d8:79:25:16:ca:1a:13:0b:7b:8e:5c:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:48:B2:7E:8A:6B:6B:D6:7C:75:68:FA:44:A4:36:D4:68:61:D5:C6
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/xkiyfopra9Z8dWj6RKQ21Ghh1cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ac00::/29
Signature Algorithm: sha256WithRSAEncryption
67:8a:f0:b7:2f:f4:5b:60:44:af:b0:ba:c5:ea:e3:d2:e4:3a:
ec:93:07:7e:54:b8:d6:e3:9e:d2:d7:3e:43:86:26:8b:39:5e:
a0:db:d6:05:06:09:b2:ee:16:c2:83:fb:b6:b6:c2:52:a3:52:
db:b4:1f:d8:0b:a9:8f:8b:81:c0:77:9e:91:cc:0d:37:5b:cd:
98:01:ec:55:b1:6a:f7:1b:e8:bf:07:79:31:e1:2b:2d:2f:b1:
ac:c1:00:b2:ae:c5:93:2f:79:1b:f6:4c:28:b8:31:47:af:d5:
84:30:82:a8:72:a4:eb:ce:49:79:b9:22:49:16:df:6b:a5:48:
ae:82:cf:d2:9b:8a:63:d8:70:97:b4:e8:32:5e:e3:87:44:a9:
e3:4b:2c:f6:57:44:6a:32:cf:78:14:67:68:2e:41:1d:57:d9:
05:80:57:08:24:25:3f:99:4c:b0:c0:11:ba:ea:21:41:c6:f3:
e6:61:f7:b0:34:63:99:6c:f7:3e:ab:3c:eb:91:33:6f:8e:6b:
6e:a2:cd:ea:06:2e:e8:15:cd:8a:b9:a2:f5:1e:ce:dd:ad:ea:
77:d1:a7:b2:a7:f3:83:61:24:4a:91:c8:b0:4e:5b:bf:2c:b7:
49:d5:eb:79:3a:b9:3b:4c:c6:5f:26:66:64:9d:e2:18:d2:76:
42:8d:6a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:12:48 2025 by rpki-client