Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Xm8s94oKSeTnNPD464EbbilKPyA.roa
File: Xm8s94oKSeTnNPD464EbbilKPyA.roa (raw, json)
Hash identifier: l9V97NgpKfB8nQ3ono9AUeL5BkAbSEl8QCVZycRp9P4=
Subject key identifier: 5E:6F:2C:F7:8A:0A:49:E4:E7:34:F0:F8:EB:81:1B:6E:29:4A:3F:20
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222032C5B305F113BCE9E5F563465DF5
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Xm8s94oKSeTnNPD464EbbilKPyA.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206477
IP address blocks: 2a0e:8f02:f02b::/48 maxlen: 48
2a0e:8f02:f02c::/48 maxlen: 48
2a0e:8f02:f02d::/48 maxlen: 48
2a0e:8f02:f02e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:32:c5:b3:05:f1:13:bc:e9:e5:f5:63:46:5d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e6f2cf78a0a49e4e734f0f8eb811b6e294a3f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:df:ce:a8:ed:4c:72:cd:8e:3f:ab:94:d2:9a:
33:ec:f3:f2:aa:a9:85:f7:67:b5:49:48:ed:fb:73:
42:f7:c3:5d:64:6b:90:32:8d:73:f0:12:1a:ff:48:
54:6a:43:c5:52:2a:ef:70:b2:c0:2c:6b:66:3e:b5:
96:9a:c4:ec:25:41:63:90:6e:28:3e:86:38:6c:50:
be:e6:b9:3a:c0:a6:ec:6d:a1:ed:5b:37:e9:33:9f:
54:f2:f4:22:e1:2a:e9:ad:47:83:c6:49:db:0b:b2:
0e:03:08:0c:a2:3b:ad:67:0c:25:99:fb:76:90:69:
fa:ba:7f:14:03:df:d5:15:15:2a:f0:4a:a7:70:a8:
65:4e:18:f8:9f:09:9f:61:a3:05:c7:37:6a:0e:f4:
5e:59:89:75:99:1f:3b:f5:88:d9:de:49:0d:20:f1:
9c:28:b9:dc:ff:27:08:84:81:37:30:0c:a0:38:e4:
d1:c5:cb:05:db:cf:43:ff:5b:66:e9:e2:7a:9d:91:
bd:40:d9:2b:78:3b:46:8f:cd:ef:41:79:aa:f1:47:
a3:1f:dd:53:62:cb:07:a1:c2:d3:92:ad:17:3c:a7:
16:36:25:a1:f9:db:63:54:80:f3:5b:e0:96:3b:04:
78:02:e1:e3:89:72:79:26:bb:d4:a8:16:ed:ac:3f:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6F:2C:F7:8A:0A:49:E4:E7:34:F0:F8:EB:81:1B:6E:29:4A:3F:20
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Xm8s94oKSeTnNPD464EbbilKPyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f02b::-2a0e:8f02:f02e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
50:e5:b7:2c:e8:07:f5:77:70:d0:92:90:da:8f:ca:09:3b:34:
6e:64:d9:f7:7e:24:c4:e0:6b:ce:3d:bd:92:2f:b0:a9:42:05:
1e:ee:00:ec:ea:74:83:5c:a4:d5:e0:8a:ca:3d:a0:8d:0e:08:
9c:c6:f4:6e:cf:0e:ac:16:7c:64:5a:08:33:d5:3f:3c:f4:b8:
f6:cb:88:10:49:ad:ee:7f:99:8e:69:ee:13:1c:ea:bb:45:28:
e0:fd:1b:9a:4c:65:5d:ff:6d:b4:22:95:ab:d9:6e:77:f6:94:
75:46:16:25:75:5f:a6:74:f8:ec:c0:42:57:1f:93:01:e1:69:
63:c2:2a:52:bb:66:5c:28:31:71:c9:f7:2a:6a:18:f7:25:8e:
69:60:ee:fc:55:a2:ab:b7:7e:e3:39:e9:ac:0d:4a:71:d7:79:
44:5a:71:e6:15:67:61:ac:8c:7f:91:eb:5f:d5:1c:86:46:f8:
4f:da:d5:bb:e3:5d:3a:9a:0c:da:22:2a:22:0c:e6:9c:b1:05:
54:55:cd:4c:8b:17:99:fd:86:7d:96:5d:8f:e3:d0:7d:09:37:
d0:20:bc:49:13:28:58:cc:8b:94:a7:15:eb:d5:6e:7a:49:f6:
03:39:5b:86:95:f5:d3:a2:6c:51:dd:6f:8b:b5:50:c7:d3:f6:
23:59:b4:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:01 2025 by rpki-client