Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/X8dBAOgbQmMZTDWCVOoHFaPqdGo.roa
File: X8dBAOgbQmMZTDWCVOoHFaPqdGo.roa (raw, json)
Hash identifier: FKP0JnrxsHmdLjO3RxgRsJIjvK6vevaI8Id8nvFYZkk=
Subject key identifier: 5F:C7:41:00:E8:1B:42:63:19:4C:35:82:54:EA:07:15:A3:EA:74:6A
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 0194266B48D618358071C3E59D05C171E3D4
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/X8dBAOgbQmMZTDWCVOoHFaPqdGo.roa
Signing time: Thu 02 Jan 2025 09:49:12 +0000
ROA not before: Thu 02 Jan 2025 09:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60445
IP address blocks: 2a12:f8c3:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:48:d6:18:35:80:71:c3:e5:9d:05:c1:71:e3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Jan 2 09:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fc74100e81b4263194c358254ea0715a3ea746a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:41:6a:ed:ee:45:aa:2e:0b:79:79:78:43:
b1:1b:ef:8b:dc:17:d0:bf:71:11:5c:68:4f:ac:9b:
e5:02:1e:83:a7:d1:78:90:29:1a:9f:29:be:02:84:
33:54:78:4a:2d:da:31:9c:c6:59:2c:a5:ea:99:0c:
bd:2d:f8:1a:29:db:18:4e:fc:7e:e7:2f:9d:96:84:
b8:f5:df:eb:89:12:a5:a6:0a:10:ab:4f:80:ef:3c:
83:90:48:58:29:6a:7f:92:a6:ac:72:ac:e9:1a:23:
57:03:89:9b:ee:e2:bf:f0:07:c6:2e:55:03:2d:83:
98:03:11:87:41:a4:d8:d8:d3:6e:9b:12:98:9e:c0:
92:77:e3:fe:04:35:f6:56:e2:b5:8e:01:df:d6:63:
a5:2a:2c:e6:94:99:95:c6:25:4b:c7:01:1a:20:3c:
ba:eb:54:1f:5b:83:1d:12:1c:fd:a4:0c:66:1f:dc:
c5:8a:1e:05:6d:44:37:27:a3:8a:78:7b:d5:49:20:
65:4b:cb:df:8a:a5:17:49:48:95:8c:53:46:15:70:
97:11:2e:8c:87:f4:47:58:04:b9:6d:6d:42:72:f2:
51:fe:7d:8b:85:1a:64:5c:0a:10:12:8c:a3:30:1a:
ad:99:e9:44:d2:1e:79:10:79:ad:89:b9:fa:fa:f9:
49:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C7:41:00:E8:1B:42:63:19:4C:35:82:54:EA:07:15:A3:EA:74:6A
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/X8dBAOgbQmMZTDWCVOoHFaPqdGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c3:2000::/36
Signature Algorithm: sha256WithRSAEncryption
4f:a6:58:4e:f5:da:04:29:a6:3b:2e:bc:73:68:72:20:6a:72:
f8:06:60:35:13:41:bc:4b:4a:00:39:df:ef:8a:fb:1e:55:96:
91:28:98:a0:e5:82:21:36:f2:1e:8f:82:cb:28:1b:6b:b7:81:
69:45:b1:e2:28:4d:f5:88:2d:61:36:3b:6a:67:01:99:03:52:
66:7b:ed:be:82:15:e1:58:e1:a2:ce:81:09:5a:05:3e:cd:d2:
0f:07:b2:59:4a:75:80:f4:5b:7d:68:11:59:dd:af:d2:ba:25:
58:c4:ef:d8:80:64:49:7f:1a:a7:30:e3:e0:22:22:49:ab:d0:
3b:e2:f5:89:42:7b:80:74:fe:13:f0:91:fa:3a:89:74:c0:02:
76:f5:14:80:32:ff:06:33:c7:b9:b2:39:5d:37:a2:0e:85:3a:
73:a0:1e:b3:1d:22:2d:ab:3a:ce:1d:00:b6:ed:7f:c7:6d:72:
e5:8a:31:ef:17:f2:ab:61:ff:83:6d:af:3e:6f:8d:68:9a:94:
01:9f:4f:96:b6:85:6c:99:95:5f:e5:a7:5d:8d:19:e2:85:b6:
8e:39:62:c0:5a:f8:d4:b8:4c:fe:53:57:63:b5:e9:9d:3c:57:
22:f7:3c:8c:fc:7b:79:b3:b1:20:ea:f7:03:de:1a:70:c0:04:
e4:82:85:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:37 2025 by rpki-client