Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa
File: 1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa (raw, json)
Hash identifier: xnmXPX7h0AhX7fCrQfBlW4AC7vVtbQB3crm/g5LQBZ8=
Subject key identifier: FB:9C:70:09:B6:24:C3:A9:F7:2A:35:23:42:AA:E9:1C:DC:9C:8E:CC
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 019424459303849563B2F1029C5F8B3D4C2E
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa
Signing time: Wed 01 Jan 2025 23:48:46 +0000
ROA not before: Wed 01 Jan 2025 23:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203363
IP address blocks: 2a05:4140:19::/48 maxlen: 48
2a05:4140:700::/40 maxlen: 40
2a05:4140:800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:93:03:84:95:63:b2:f1:02:9c:5f:8b:3d:4c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 23:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb9c7009b624c3a9f72a352342aae91cdc9c8ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:6e:78:9a:d4:e0:89:90:0f:d7:69:de:6c:
38:a5:8f:ee:ce:5f:43:48:bb:26:ac:78:d2:9f:e6:
71:52:c3:51:06:ba:8f:81:5e:d0:d5:ce:74:cb:44:
f2:f4:b7:98:4e:34:e0:ea:5b:26:b9:7d:7c:ea:71:
ff:e0:d9:a7:a6:b0:a6:7d:3a:67:73:e5:a8:b3:e6:
65:0f:72:f0:37:2f:08:5d:a1:d6:81:72:88:c0:c4:
ee:5a:0d:c4:4d:87:68:87:46:39:c6:a8:cd:20:a7:
8b:81:7b:39:aa:9c:54:61:9b:a5:6b:40:1e:e6:25:
8b:87:59:fe:9f:95:34:d5:e0:e5:f1:1a:ed:7d:a0:
e7:0c:44:bf:d6:bf:9c:29:f2:ae:06:ec:17:a9:d6:
3a:bc:0d:2f:eb:19:40:68:f8:fc:46:3d:af:d7:26:
81:48:2d:bd:8f:f7:ab:07:d9:02:90:3b:e0:73:be:
00:c6:fc:ec:20:71:74:45:b0:54:b1:da:e2:87:a0:
d5:1e:ad:58:00:00:c2:67:18:ed:31:c3:a3:3e:a4:
9d:15:0b:89:92:65:03:e3:59:70:d9:de:ba:97:16:
66:d9:af:34:c2:08:0c:b2:13:7a:85:90:fe:70:41:
56:36:30:8c:03:b0:58:de:17:c3:17:f0:e7:28:02:
57:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9C:70:09:B6:24:C3:A9:F7:2A:35:23:42:AA:E9:1C:DC:9C:8E:CC
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:19::/48
2a05:4140:700::-2a05:4140:8ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
81:8c:5b:db:c3:22:55:3d:49:ad:a5:85:49:1c:b9:9c:1a:8f:
7f:18:e3:97:e4:22:b6:2e:5a:08:96:57:19:7d:3a:69:db:e1:
e4:83:c7:1e:f0:d7:0d:56:fc:c8:83:45:92:78:3a:2f:f9:46:
fd:53:d0:93:38:64:b2:07:5c:e5:ca:a4:2b:b9:3d:e5:d6:39:
6f:86:23:fe:6c:9c:a9:67:0f:2c:93:a8:82:60:50:cd:df:02:
d7:ef:af:c6:e0:2e:10:0e:59:07:99:89:56:e7:fc:f1:71:18:
e5:8e:21:2d:cc:02:f0:f9:37:ac:30:93:91:39:10:34:3d:1f:
88:30:3e:d1:0d:7f:ca:21:ae:24:49:9a:76:e8:e3:3a:4a:81:
04:7f:a5:c0:aa:a0:69:c5:23:17:d3:6f:5c:4d:c9:74:8f:f9:
98:d1:1d:9e:86:77:9d:cc:07:a1:ee:21:bd:b3:99:84:2a:a4:
68:9d:0d:ae:05:99:66:e3:fe:80:1d:f1:bc:17:62:6a:d3:12:
41:04:a3:91:23:a0:90:63:f8:0a:73:d5:51:10:3d:2d:40:04:
fe:04:47:de:62:1d:b1:3b:a9:5b:29:25:2a:55:83:5e:86:f7:
68:c6:28:d6:18:e1:a6:22:db:5b:87:1b:4a:df:07:bc:8f:71:
a7:e8:79:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:25:53 2025 by rpki-client