Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/XqUpHQ8-a4h7NWOOmuDaL7p8h20.roa
File: XqUpHQ8-a4h7NWOOmuDaL7p8h20.roa (raw, json)
Hash identifier: wucX+GJutPw3tDOpsoQ6MWs680eTe2mkRw2xXYGRGbY=
Subject key identifier: 5E:A5:29:1D:0F:3E:6B:88:7B:35:63:8E:9A:E0:DA:2F:BA:7C:87:6D
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 019427B561F35F16B37E263E38CC3FEEA012
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/XqUpHQ8-a4h7NWOOmuDaL7p8h20.roa
Signing time: Thu 02 Jan 2025 15:49:45 +0000
ROA not before: Thu 02 Jan 2025 15:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211693
IP address blocks: 2a10:4646:b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:61:f3:5f:16:b3:7e:26:3e:38:cc:3f:ee:a0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 15:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ea5291d0f3e6b887b35638e9ae0da2fba7c876d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:36:13:01:a3:a3:ee:2c:51:48:7e:93:53:7c:
b1:4d:09:6b:05:66:40:2f:59:b8:26:c3:11:dc:99:
5c:48:b0:68:d9:0a:31:17:8c:bd:d0:40:1a:c4:5b:
46:31:54:45:3f:e1:a8:5b:24:e6:9e:42:d0:25:3c:
09:8e:79:71:1d:c4:57:f2:4e:26:fa:63:00:62:f9:
dc:8c:72:b6:fd:ac:ae:88:e4:fe:bc:48:38:2a:06:
22:34:ef:2e:f9:d9:58:b5:58:8b:48:0d:6f:7e:a0:
8b:40:7e:2a:da:6f:8a:54:d4:09:2b:ee:7b:ef:49:
66:d3:7d:19:c6:f9:76:bd:b9:01:18:ec:ca:5c:6f:
1f:0b:0c:5d:36:c4:d4:8b:03:90:18:fb:a8:e9:4b:
b7:04:18:55:2b:69:d0:12:de:12:c3:62:97:47:82:
a6:6d:b5:08:25:a7:c9:df:08:a9:c8:f6:21:d3:2f:
cb:65:dd:39:6d:b6:a5:f9:96:92:12:40:bb:c8:9f:
bf:41:3c:e1:71:20:68:11:40:02:e0:86:29:87:bd:
24:02:df:ca:30:77:fd:a2:be:2d:b0:f0:a9:31:68:
e4:74:b8:fb:2d:43:d5:61:55:cd:c0:37:12:9c:98:
94:d8:45:8e:5e:bf:e3:8f:00:73:11:59:b0:b4:5a:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A5:29:1D:0F:3E:6B:88:7B:35:63:8E:9A:E0:DA:2F:BA:7C:87:6D
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/XqUpHQ8-a4h7NWOOmuDaL7p8h20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:b::/48
Signature Algorithm: sha256WithRSAEncryption
a2:49:f8:26:e2:f4:0a:ed:0f:3f:18:5b:2b:56:79:53:14:02:
61:c4:4e:19:a4:64:04:91:f1:bc:f9:65:fa:e5:c1:08:8b:e4:
a4:7b:bc:d9:5a:89:6d:0e:87:ae:1d:eb:81:b1:be:5f:90:26:
72:fc:df:d7:fa:38:dc:37:d3:0d:a3:34:85:83:3f:5b:2a:f0:
26:d9:ea:40:8d:03:7a:2a:81:88:23:84:75:06:9a:0e:76:e4:
ee:c3:52:34:c6:64:0d:5d:ca:b8:88:94:8a:fd:6d:2f:eb:19:
00:9a:78:57:bb:71:f3:3c:0d:fc:a4:c8:49:47:ae:5d:1f:e0:
24:e7:d7:ea:4c:9e:5d:a3:0b:d3:f4:1d:ea:f6:26:36:1f:fd:
25:33:43:a7:e5:67:cf:a6:3b:9b:7f:33:33:3e:49:d9:c8:b0:
e6:ab:53:22:8b:7c:10:ad:60:9b:7c:c1:8b:0d:2a:2f:51:24:
1c:65:90:3b:15:c1:5c:6c:f2:f6:72:30:f6:0f:b0:03:85:05:
c5:4f:d7:1c:05:8d:3e:e4:ae:ee:9e:00:02:70:6a:88:69:1c:
cb:da:fb:91:84:76:b4:ff:b2:bb:a1:90:ae:13:c0:e6:03:75:
9d:e2:a3:0b:2c:22:a5:9d:84:34:6a:ba:24:ee:99:fd:f7:09:
15:62:2b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:05:54 2025 by rpki-client