Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/XJdcwddEgs-q78gmSagWMovn85I.roa
File: XJdcwddEgs-q78gmSagWMovn85I.roa (raw, json)
Hash identifier: Je76MM+YNyOi1CdfvkLH4QNZ11rGS/XGNeifQiQFCLA=
Subject key identifier: 5C:97:5C:C1:D7:44:82:CF:AA:EF:C8:26:49:A8:16:32:8B:E7:F3:92
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 019420D63AEE2ED45BFD970874CFC63BB528
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/XJdcwddEgs-q78gmSagWMovn85I.roa
Signing time: Wed 01 Jan 2025 07:48:18 +0000
ROA not before: Wed 01 Jan 2025 07:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a14:2a00:100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3a:ee:2e:d4:5b:fd:97:08:74:cf:c6:3b:b5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c975cc1d74482cfaaefc82649a816328be7f392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:fc:2f:87:47:98:1b:d0:78:35:cd:8f:81:
43:cd:ab:69:69:13:4f:4a:f2:69:01:87:23:ba:cb:
1e:ce:7b:10:f1:31:a6:a6:78:34:24:ae:74:6b:53:
1a:c1:1b:11:6e:5c:be:06:49:66:cf:ce:8a:25:3c:
1b:ca:d2:9d:50:3a:11:d8:63:c9:ff:df:be:83:b9:
9c:63:35:41:c2:4b:98:6f:7d:5c:70:1c:41:44:11:
46:10:96:b3:5c:9d:6e:f9:b6:90:2f:cc:0a:b9:4f:
73:2b:f0:44:96:4a:27:a4:9f:1e:2d:f9:5b:76:37:
b6:e7:1c:ea:59:31:91:62:14:2c:0a:4b:16:6e:3a:
c2:db:18:5d:f2:22:52:5d:d6:81:50:2d:05:46:69:
2d:4c:27:7d:42:fd:cf:36:ac:ad:ca:87:cb:1f:00:
e5:89:8a:29:51:f2:bd:65:4f:d7:bf:3d:21:1d:60:
3c:21:b8:e6:d5:c7:f4:c9:70:01:70:cb:6d:8f:ea:
ce:e9:4a:c5:5f:4e:0d:b3:4c:6e:f2:67:20:c5:f9:
f5:0d:cf:f3:47:8a:d7:fd:52:4b:5b:3e:20:69:2a:
d0:f4:a0:4a:1b:fe:fd:43:d3:39:e4:52:65:67:80:
3c:e5:57:ae:b4:8b:b4:59:b5:5a:cd:09:a2:f5:24:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:97:5C:C1:D7:44:82:CF:AA:EF:C8:26:49:A8:16:32:8B:E7:F3:92
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/XJdcwddEgs-q78gmSagWMovn85I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2a00:100::/40
Signature Algorithm: sha256WithRSAEncryption
90:ce:95:eb:1a:7e:39:0b:38:2c:9c:39:d0:94:37:95:d7:9b:
e0:aa:d8:d0:17:b7:3f:b5:93:72:d7:ae:3a:41:67:ce:11:a7:
c1:0e:45:48:0d:ed:fc:2b:9f:1f:69:fa:b5:53:23:b3:9e:b9:
97:88:6c:e0:b1:a2:27:a3:7f:2f:21:84:5c:8f:1b:27:d3:fb:
1e:87:d4:9d:95:2e:c2:59:c5:ed:c7:76:24:b3:45:1f:f5:67:
a7:99:cf:e8:90:b5:b6:51:9b:4d:40:18:5c:67:96:d0:e8:e2:
16:bc:e5:65:91:89:c8:2c:dd:46:ee:04:83:d4:18:32:b8:d4:
d8:fe:72:77:f4:ae:90:c3:9c:71:25:bd:e1:82:5e:e6:c6:a3:
cc:9f:eb:03:af:b9:0e:0a:80:6e:4d:6d:22:cf:6b:06:55:0c:
c8:04:8c:64:2d:f1:06:3e:c3:94:d0:90:f9:0e:99:df:f5:a4:
a9:51:46:c4:88:23:a7:52:50:8b:06:d5:0f:7e:17:77:55:b6:
6d:1a:14:4c:46:e3:23:64:cc:12:d1:ab:71:c1:0c:e4:0a:cd:
f9:06:3d:db:14:b2:ce:ac:ce:4e:a8:2a:9d:c7:f3:cb:5c:c6:
af:a4:99:aa:22:99:1a:ea:0c:2e:39:55:50:af:1a:5a:0d:d7:
c9:e4:fa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:27:11 2025 by rpki-client