Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/X9uTe5-UG7vdNOl2FoPhgBdLzy8.roa
File: X9uTe5-UG7vdNOl2FoPhgBdLzy8.roa (raw, json)
Hash identifier: ZN2FTFtME9Jpje03ub46CoQvHKeERQqb3UfF9wkCEaQ=
Subject key identifier: 5F:DB:93:7B:9F:94:1B:BB:DD:34:E9:76:16:83:E1:80:17:4B:CF:2F
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EE3D5CC497DF0694FB3D3BBEF70C3
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/X9uTe5-UG7vdNOl2FoPhgBdLzy8.roa
Signing time: Thu 02 Jan 2025 05:48:28 +0000
ROA not before: Thu 02 Jan 2025 05:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210872
IP address blocks: 2a0e:aa07:e026::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e3:d5:cc:49:7d:f0:69:4f:b3:d3:bb:ef:70:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fdb937b9f941bbbdd34e9761683e180174bcf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:bd:b1:64:45:8e:92:c0:b2:51:39:e0:3c:
cf:ef:85:73:b0:9d:08:51:e3:91:f5:d9:30:43:68:
fb:75:3e:d1:2f:26:c2:5d:94:e0:21:82:94:38:ff:
cf:ff:e6:52:0d:e6:eb:de:59:a5:43:f5:75:f1:96:
00:de:c2:58:1f:ee:a9:e2:8c:44:e1:42:9f:a5:81:
52:86:1c:ea:0f:5c:28:b3:cc:4a:c3:95:c7:b9:43:
97:7e:ea:3d:b3:e3:58:8f:bb:64:64:01:fe:76:78:
49:c0:a5:8e:ae:6c:23:d7:59:81:d7:dc:d0:c4:a4:
15:f4:f5:f0:aa:80:20:1b:8d:44:92:a0:23:f7:30:
cb:22:a1:c2:ee:cb:64:42:b9:6f:47:a4:a8:89:04:
9b:03:7e:b2:e1:11:26:87:04:a6:e8:b1:e4:58:54:
ea:e2:d0:69:ca:ed:79:f7:e0:c9:ac:12:ce:b0:bf:
4e:e4:49:ff:e7:4d:ef:ba:14:b6:6c:4e:53:24:d4:
ac:a6:1a:c6:22:5c:9c:2a:0a:29:fe:a9:c6:b6:ee:
b0:52:a2:b8:bc:23:ab:98:83:46:21:4b:d2:c1:33:
83:d9:79:fc:f8:5d:7d:00:9e:49:22:fc:4b:e8:2a:
b6:bf:22:fa:c1:b1:e5:04:7b:5e:a7:e5:d3:ca:15:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DB:93:7B:9F:94:1B:BB:DD:34:E9:76:16:83:E1:80:17:4B:CF:2F
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/X9uTe5-UG7vdNOl2FoPhgBdLzy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e026::/48
Signature Algorithm: sha256WithRSAEncryption
7c:22:54:ee:3f:15:63:c2:61:89:3c:91:80:c2:69:59:0b:41:
5f:1b:3b:9f:f8:33:31:aa:be:62:0d:27:c7:5c:f5:ec:df:ce:
d0:4e:51:2a:08:e8:fe:cb:c9:98:7d:f1:87:b5:a3:1d:76:78:
05:ad:10:e0:04:c2:ec:b7:5a:b2:a7:48:36:ff:7f:b3:eb:dc:
b0:84:31:dc:e4:1d:73:78:f3:59:21:d0:79:2b:2c:e2:e1:f5:
e8:2d:91:5d:ec:48:8e:cb:2b:e9:f5:cc:83:42:64:e8:91:8a:
9a:5e:b9:b5:1f:41:af:ac:b0:6b:82:33:d9:73:d3:b5:66:2d:
60:0a:42:77:b0:df:f5:a6:6c:50:62:5e:25:19:ac:5e:5e:e5:
e4:5e:9f:fc:b6:62:8d:16:4d:33:d7:20:0e:c7:5c:98:46:65:
0e:d7:61:28:5c:0d:ec:64:cd:c3:f0:9a:44:c2:f2:56:c0:38:
d1:4f:ee:d9:25:8a:f9:68:72:78:cf:6c:5c:7c:c6:f8:9d:48:
a6:d7:98:3d:de:b7:7b:99:a3:fc:b1:62:a3:64:57:55:fd:b0:
85:9f:f6:af:f3:d8:c3:aa:df:a1:04:2e:02:07:14:c0:b9:eb:
64:79:7d:93:bd:b8:03:45:99:e3:a9:36:d9:f7:d9:2f:3e:f6:
c5:6f:02:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:51 2025 by rpki-client