Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/XeENoq2HuB6omGApVd7MyU5r1TA.roa
File: XeENoq2HuB6omGApVd7MyU5r1TA.roa (raw, json)
Hash identifier: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=
Subject key identifier: 5D:E1:0D:A2:AD:87:B8:1E:A8:98:60:29:55:DE:CC:C9:4E:6B:D5:30
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 019426D95B9C80144C6E1A1F6C757C52AE14
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/XeENoq2HuB6omGApVd7MyU5r1TA.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60262
IP address blocks: 2a11:c40::/29 maxlen: 29
2a11:1000::/29 maxlen: 29
2a11:1100::/29 maxlen: 29
2a11:1e80::/29 maxlen: 29
2a11:2040::/29 maxlen: 29
2a11:37c0::/29 maxlen: 29
2a11:4300::/29 maxlen: 29
2a11:4600::/29 maxlen: 29
2a11:4ec0::/29 maxlen: 29
2a11:74c0::/29 maxlen: 29
2a11:8580::/29 maxlen: 29
2a11:8d40::/29 maxlen: 29
2a11:9100::/29 maxlen: 29
2a11:bec0::/29 maxlen: 29
2a11:d300::/29 maxlen: 29
2a11:d780::/29 maxlen: 29
2a11:e240::/29 maxlen: 29
2a11:ea40::/29 maxlen: 29
2a12:700::/29 maxlen: 29
2a12:980::/29 maxlen: 29
2a12:1600::/29 maxlen: 29
2a12:6080::/29 maxlen: 29
2a12:6f80::/29 maxlen: 29
2a12:7b00::/29 maxlen: 29
2a12:c780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5b:9c:80:14:4c:6e:1a:1f:6c:75:7c:52:ae:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5de10da2ad87b81ea898602955deccc94e6bd530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:db:7d:2e:79:18:75:7d:b0:e6:1e:18:5c:
07:f4:9b:b1:88:16:84:1b:b4:f4:1c:c4:69:62:c3:
4b:63:f3:f5:c7:b0:50:82:25:cc:f4:49:34:60:34:
e3:a7:e7:3c:04:5d:f8:74:82:71:5a:7c:17:1c:4d:
ba:9a:55:9a:92:88:0a:cc:2d:d3:50:bd:a9:f9:81:
4a:3e:ab:cc:3d:c2:23:a9:62:07:8a:eb:e3:5d:ea:
45:a2:8d:e7:63:d7:21:30:d4:72:74:29:dd:28:f7:
e6:9f:09:5c:09:ca:81:e6:20:c8:17:00:06:10:1a:
3e:ff:65:51:26:e3:a9:52:45:3d:85:6f:06:0a:27:
59:09:75:2d:81:69:2e:24:e2:50:d3:ef:93:24:ef:
1a:33:0c:72:dc:6f:52:1f:d0:fe:d5:aa:14:69:88:
04:fc:56:ec:0b:9e:73:7f:fb:1d:1d:b0:78:8e:35:
b4:93:a8:60:68:9f:c2:81:4e:9b:34:48:b4:3e:e3:
7c:01:72:2c:5e:dc:72:87:9d:5e:17:bd:20:da:64:
c4:87:f7:5b:7a:24:b8:e8:1c:72:1c:a4:a1:cf:82:
71:6e:ba:39:7e:a6:ab:81:10:e8:dd:16:54:a1:fb:
93:b4:ea:55:d2:e0:a3:3a:c9:92:8a:98:4e:60:78:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E1:0D:A2:AD:87:B8:1E:A8:98:60:29:55:DE:CC:C9:4E:6B:D5:30
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/XeENoq2HuB6omGApVd7MyU5r1TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c40::/29
2a11:1000::/29
2a11:1100::/29
2a11:1e80::/29
2a11:2040::/29
2a11:37c0::/29
2a11:4300::/29
2a11:4600::/29
2a11:4ec0::/29
2a11:74c0::/29
2a11:8580::/29
2a11:8d40::/29
2a11:9100::/29
2a11:bec0::/29
2a11:d300::/29
2a11:d780::/29
2a11:e240::/29
2a11:ea40::/29
2a12:700::/29
2a12:980::/29
2a12:1600::/29
2a12:6080::/29
2a12:6f80::/29
2a12:7b00::/29
2a12:c780::/29
Signature Algorithm: sha256WithRSAEncryption
2f:e2:0e:76:ee:19:7a:bc:cc:b1:dd:e2:2f:89:4e:c9:50:5c:
1f:4e:cd:18:75:db:82:26:f1:be:0f:52:75:b7:3c:6b:b8:6c:
c4:7d:69:cf:00:89:a6:97:a0:6a:85:2f:97:e5:fe:07:b0:22:
e8:d7:a3:3f:71:fe:c7:90:b1:f4:26:e8:b5:03:19:3b:54:24:
7e:8a:42:93:f4:87:36:37:af:50:9a:d7:0b:7c:40:60:54:ee:
6e:5d:4e:b1:3b:66:73:c9:c5:3e:7c:18:b9:eb:71:a1:dd:e0:
04:90:6e:f4:70:00:cb:8e:62:06:4f:3d:71:a6:ae:19:37:46:
7b:b8:f9:11:63:2e:1a:46:52:ae:58:2d:67:ae:14:0a:2f:bf:
7e:5f:59:79:7c:0c:3d:ab:f5:d4:99:40:d3:58:cd:fd:fb:a3:
50:b3:4c:64:4b:a3:ac:9d:d7:c4:8c:54:57:38:a8:6a:fa:93:
b4:67:02:b5:94:2e:72:fc:14:3e:65:16:7c:c4:d3:4c:45:dd:
e2:9b:e6:58:65:08:68:d2:fd:7b:b6:19:d2:69:10:10:d8:25:
51:f8:63:cc:01:83:ce:ed:26:88:ab:e2:bf:68:c0:3f:5e:e6:
b0:99:50:8e:a8:94:a8:9a:e0:35:32:3f:c9:8b:2c:75:bb:c4:
cc:c0:df:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:13:57 2025 by rpki-client