Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/x6FbQ2O6qeigJ_DjZb3WHwNrr5k.roa
File: x6FbQ2O6qeigJ_DjZb3WHwNrr5k.roa (raw, json)
Hash identifier: b6Xbxc4B5PcQR/6u1pjeaDaXYfTGp9+tHTDdJzfSjXw=
Subject key identifier: C7:A1:5B:43:63:BA:A9:E8:A0:27:F0:E3:65:BD:D6:1F:03:6B:AF:99
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 01942521A10482FBF95691C43FC347291302
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/x6FbQ2O6qeigJ_DjZb3WHwNrr5k.roa
Signing time: Thu 02 Jan 2025 03:49:08 +0000
ROA not before: Thu 02 Jan 2025 03:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210000
IP address blocks: 2a13:a5c6:5030::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a1:04:82:fb:f9:56:91:c4:3f:c3:47:29:13:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7a15b4363baa9e8a027f0e365bdd61f036baf99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:09:3e:1c:58:fe:58:1f:85:48:3f:b2:be:
29:0e:9f:82:33:74:a6:26:b2:d3:81:22:bc:7c:88:
18:92:a1:69:f3:c2:4b:00:e3:90:d4:3e:8c:f2:9b:
ba:03:fd:2a:b9:21:71:22:10:78:fc:2c:c9:23:c9:
71:85:0f:60:0a:26:6d:b1:c4:d3:c7:83:bd:f5:a0:
61:12:cc:b1:d2:3d:f6:24:d6:d5:c8:de:62:44:25:
1f:86:58:5f:85:d9:ed:bc:97:08:c5:ff:6c:bc:c8:
13:3a:1b:d5:d6:3c:53:2c:06:46:cd:02:3a:ac:a8:
59:44:bc:65:73:f0:c9:88:e1:bb:98:1b:40:c2:41:
67:da:d9:80:5e:9a:42:fe:dc:a8:e8:66:a2:5b:75:
a1:da:dc:29:93:ae:95:9a:fd:37:d4:ce:13:dc:15:
cf:b0:a4:6b:1c:e7:52:0c:9f:73:3b:a7:d2:a1:e2:
5d:a7:0a:74:de:ec:8b:30:ff:40:d0:1e:7c:1b:27:
74:90:bc:94:31:cb:7c:e5:bb:19:bf:d5:36:8c:7f:
e3:b9:c8:6c:34:16:c6:3f:04:e7:a5:0f:91:bd:84:
a2:42:f0:1f:24:20:ae:37:f4:34:9a:e5:21:9e:de:
50:50:84:92:d3:8e:6e:e5:61:d0:e9:47:2c:73:78:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A1:5B:43:63:BA:A9:E8:A0:27:F0:E3:65:BD:D6:1F:03:6B:AF:99
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/x6FbQ2O6qeigJ_DjZb3WHwNrr5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c6:5030::/44
Signature Algorithm: sha256WithRSAEncryption
0f:9d:62:9f:a8:70:48:ca:aa:54:d6:08:3f:b4:c9:a4:68:e4:
6a:7d:fe:90:02:44:ff:bd:86:cb:d0:77:23:ca:31:38:0e:7e:
5c:9a:c3:af:cc:2f:99:2d:ab:8a:7c:19:d8:8f:30:85:35:d8:
82:59:6d:39:bf:a9:8e:32:3b:4b:aa:e7:fc:84:aa:e7:5f:74:
23:55:f7:79:e1:4c:25:1f:12:84:f8:45:4a:3d:be:b3:ce:39:
8f:31:6b:e5:a8:dc:ef:33:94:ab:56:8b:84:90:15:aa:bf:21:
3e:d7:c8:7f:ab:fa:2b:4e:ca:14:a5:00:ec:22:e4:a2:b3:6c:
4b:3a:4c:a5:d8:73:1a:af:15:b9:59:fa:56:84:b1:13:14:7f:
f9:5f:ee:e1:3a:6e:8a:d5:6d:7e:51:e2:c2:52:03:4b:b8:8b:
82:71:0b:bb:94:bb:c2:39:9c:10:71:ae:24:7b:39:0b:31:97:
32:fa:5f:33:02:12:43:c4:10:a1:b2:8f:8f:07:23:65:1c:48:
f8:96:6f:d9:ca:e0:2f:ef:c3:65:d0:7a:2a:fb:9e:0e:56:fb:
f0:98:58:c7:b6:27:0c:37:b5:84:8f:4f:3d:c6:63:15:d0:0c:
ec:96:4a:73:28:3f:50:86:44:31:80:8f:7b:88:b2:0d:e8:40:
4d:84:0f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:36:17 2025 by rpki-client