Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Xbf_-LI-ynG7XEYjoTINYpZCrSA.roa
File: Xbf_-LI-ynG7XEYjoTINYpZCrSA.roa (raw, json)
Hash identifier: VCONteQufdKCOXYEc/dPgu8rdpQST2c0RKTHjtRclAo=
Subject key identifier: 5D:B7:FF:F8:B2:3E:CA:71:BB:5C:46:23:A1:32:0D:62:96:42:AD:20
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBC9325958DEF6553A7068D62E82D1
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Xbf_-LI-ynG7XEYjoTINYpZCrSA.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61138
IP address blocks: 2a0c:9a40:8082::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c9:32:59:58:de:f6:55:3a:70:68:d6:2e:82:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5db7fff8b23eca71bb5c4623a1320d629642ad20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:89:5c:93:7a:b8:3f:c2:8c:d3:b4:8e:9b:
36:d5:61:21:8e:77:9f:2e:5d:01:9f:6a:da:cf:9d:
b8:12:4d:43:e1:8b:a6:ca:8b:d6:65:65:aa:27:aa:
c9:6e:68:82:d9:e5:bd:c9:69:c7:57:6a:a2:51:ad:
47:b8:0f:01:a1:cc:5c:a6:4f:aa:65:88:1b:4b:78:
f9:3b:21:a8:7a:3b:84:b4:a8:a9:48:83:75:da:5c:
d8:2a:0a:83:c9:a2:48:88:95:09:8a:eb:05:c9:39:
67:11:8f:6a:45:72:09:1d:f9:42:47:ff:26:dd:ea:
a5:c7:65:3c:5e:bb:65:8c:d1:7c:b2:70:d2:26:e4:
45:3a:dc:46:97:53:ee:5e:56:0b:2c:9b:5c:49:7a:
82:6c:11:ec:f3:06:3b:6b:2a:c0:ec:da:0b:d1:f9:
35:77:bf:c7:ea:cb:54:d8:3c:67:47:32:f2:d1:1d:
e9:c7:39:3a:05:03:87:96:98:30:c9:ad:ff:62:bd:
95:e8:01:fa:14:66:41:58:ac:36:82:7b:90:08:84:
13:73:b3:6e:55:23:12:63:6b:65:d6:e2:cd:d3:40:
e7:93:b7:75:5b:6b:da:81:20:95:a8:81:b7:0f:df:
b8:4b:86:34:82:41:93:5a:02:a7:ba:08:f2:0a:e9:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B7:FF:F8:B2:3E:CA:71:BB:5C:46:23:A1:32:0D:62:96:42:AD:20
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Xbf_-LI-ynG7XEYjoTINYpZCrSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8082::/48
Signature Algorithm: sha256WithRSAEncryption
2b:96:7a:5b:78:36:f4:d1:de:9b:39:ac:66:c9:df:40:c3:bf:
25:f2:e2:d6:37:a1:be:ae:b4:fb:a5:b0:80:b9:f5:f1:a0:52:
2e:60:f7:ea:1a:ea:53:20:3e:03:85:a2:d3:09:43:32:38:69:
92:57:dc:a7:cb:6f:e6:d5:7d:88:fd:26:3d:32:6e:87:ef:13:
aa:a0:d9:21:4a:50:f2:3b:07:61:87:df:93:c2:dd:81:77:fd:
e5:a9:1f:60:ed:62:ca:4c:a7:f8:cc:31:8c:ea:41:c5:77:72:
8a:dc:2c:f2:c2:64:2a:d0:28:ef:d4:92:b1:b8:f1:9e:b0:e0:
e9:c5:ab:5b:64:47:d7:17:09:0b:fc:0a:a9:35:ef:83:1a:34:
61:f0:a3:3f:5b:65:65:33:4b:31:3b:d1:f0:10:14:24:59:ea:
94:3d:ed:25:9d:ca:5c:18:cd:50:eb:0e:17:b8:56:6d:8e:c1:
c2:99:17:9c:be:2b:54:00:b4:fc:74:8e:cf:13:1f:96:8e:dc:
f5:15:ce:31:46:15:28:89:f0:fe:99:48:3f:87:bd:49:5f:a9:
ed:54:46:64:21:42:19:d8:a4:75:89:5a:8f:55:71:87:a3:7f:
0f:8d:f0:9a:68:35:fc:40:03:6e:45:d2:fd:bf:90:78:64:a3:
b8:8e:28:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:42 2025 by rpki-client