Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/xTPblglr4TYoyJotTqPI-C0T4s4.roa
File: xTPblglr4TYoyJotTqPI-C0T4s4.roa (raw, json)
Hash identifier: UiEru9fUaM3d6pVC0GNwD0YrE+8b1bGf05QMBq/rtq0=
Subject key identifier: C5:33:DB:96:09:6B:E1:36:28:C8:9A:2D:4E:A3:C8:F8:2D:13:E2:CE
Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Certificate serial: 0194266B212A7F8F80714A1DF871A109DC49
Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/xTPblglr4TYoyJotTqPI-C0T4s4.roa
Signing time: Thu 02 Jan 2025 09:49:02 +0000
ROA not before: Thu 02 Jan 2025 09:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211718
IP address blocks: 2a0d:1a40:7b00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:21:2a:7f:8f:80:71:4a:1d:f8:71:a1:09:dc:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2
Validity
Not Before: Jan 2 09:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c533db96096be13628c89a2d4ea3c8f82d13e2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:97:08:40:cc:b2:9e:dc:e3:f4:42:1e:67:
1c:8d:26:24:d5:0d:36:f2:24:fa:69:42:d6:e8:ae:
6e:17:ce:71:9a:e4:4f:1e:04:9f:5f:5e:55:e8:f2:
cc:30:bd:33:f7:e9:13:c6:f7:d5:cf:47:0e:35:68:
80:70:c9:fa:57:48:72:5c:2a:66:28:dd:ee:e7:3a:
fe:4d:b9:bd:2b:a2:11:ee:6d:59:9c:59:d9:07:2e:
e1:53:07:e6:af:8a:f3:b5:a3:c0:54:5b:da:84:f4:
61:af:b4:42:71:51:34:39:06:c0:86:68:87:b5:c4:
d4:93:2c:63:09:26:89:93:b0:25:2d:bf:1e:ed:66:
99:35:43:13:df:0a:a1:22:2e:28:72:17:57:a8:f1:
11:25:10:92:f9:f8:34:32:54:59:dd:a0:10:ba:65:
71:a2:15:fc:75:fa:c0:39:3d:4e:fa:4e:16:ec:9f:
75:bf:87:85:35:8b:70:6b:93:ca:76:a0:1e:75:04:
78:fe:89:06:d5:15:5a:64:46:13:39:71:ac:83:64:
d0:b5:cb:6a:82:b8:5a:32:67:97:dd:21:60:9b:df:
6d:e9:41:46:8c:a3:7e:58:f9:65:e1:78:ff:25:98:
33:ad:fd:02:77:2c:93:d4:e9:b9:88:cd:6d:40:89:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:33:DB:96:09:6B:E1:36:28:C8:9A:2D:4E:A3:C8:F8:2D:13:E2:CE
X509v3 Authority Key Identifier:
keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/xTPblglr4TYoyJotTqPI-C0T4s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:7b00::/48
Signature Algorithm: sha256WithRSAEncryption
61:12:37:65:16:e8:13:4d:6f:b8:e1:e2:9d:e5:c4:99:fb:a8:
d5:f3:af:27:89:a2:ae:7d:12:ee:a1:26:70:30:6c:8f:68:1c:
36:72:3a:f9:6f:c1:8a:3e:ef:aa:4d:ca:14:c2:d6:ac:38:e4:
96:1d:70:1e:f0:0a:04:95:d0:c6:58:de:ec:fe:4b:92:58:64:
f8:de:b8:6c:38:87:65:ed:32:09:53:fe:71:77:3e:45:59:2a:
3f:54:c6:66:f6:b2:2e:3f:1e:e3:11:bd:95:b4:13:4d:6c:3b:
f9:2c:96:4e:14:aa:73:fb:53:93:36:70:3e:d6:95:56:3c:51:
7c:c7:45:dc:f5:88:fc:cc:a8:e8:60:5e:8b:9c:08:69:65:14:
2c:71:3f:95:50:9f:30:1e:2a:77:0a:a3:71:c1:b7:be:9c:cc:
67:5a:4a:81:96:81:3b:17:58:a1:68:87:9b:c2:c7:b6:fa:a0:
48:84:79:34:4a:38:12:05:d5:e2:54:d0:1e:41:4f:c5:08:52:
18:8b:0d:88:79:5c:fb:68:c7:bd:24:3e:03:26:11:40:b1:a5:
7d:0d:c5:65:4a:4c:f4:34:d4:53:84:24:ff:f2:dc:ad:9e:0c:
8d:65:80:67:09:82:84:42:50:87:ce:75:f8:09:7c:cb:3e:81:
c5:4a:e9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:39 2025 by rpki-client