Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/XvUgOjjL99J51pC_sC90Y2oxW38.roa
File: XvUgOjjL99J51pC_sC90Y2oxW38.roa (raw, json)
Hash identifier: c2LYASTNBV0y11dbQezPYJYqj9am3X4y+DmSJidna/c=
Subject key identifier: 5E:F5:20:3A:38:CB:F7:D2:79:D6:90:BF:B0:2F:74:63:6A:31:5B:7F
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 01942144069A40B9A73112363F46857AF4EC
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/XvUgOjjL99J51pC_sC90Y2oxW38.roa
Signing time: Wed 01 Jan 2025 09:48:13 +0000
ROA not before: Wed 01 Jan 2025 09:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a05:1500:910::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:06:9a:40:b9:a7:31:12:36:3f:46:85:7a:f4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jan 1 09:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ef5203a38cbf7d279d690bfb02f74636a315b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:ca:1b:67:e3:5a:17:03:70:7e:a2:b1:f8:
12:08:a2:bd:0a:c6:db:60:9b:bb:8f:ea:d5:f8:93:
82:9b:a0:df:35:3a:9b:8f:77:e8:75:af:df:25:9f:
2b:e8:41:f3:1d:7b:33:07:cc:a2:c1:84:26:1f:e6:
71:c4:dc:e9:c7:47:12:c2:a2:40:1f:b5:25:36:77:
d8:ec:7d:1d:53:03:74:8d:05:43:1b:41:ef:12:17:
3b:d2:70:2e:83:cf:71:7f:5b:04:09:a0:4a:cc:f6:
de:79:0e:f2:00:c9:74:5a:41:31:88:ef:dd:ef:01:
73:eb:dc:9a:15:b0:a8:d4:2d:a6:a2:e7:f0:83:30:
8b:96:03:50:93:5e:e4:f9:e5:fe:73:02:31:c9:70:
84:fa:d2:c3:75:d6:c6:71:c3:10:31:43:bd:51:80:
41:03:d2:0a:d2:a7:74:7d:85:7d:42:ee:41:30:6a:
dc:65:c9:b1:33:a5:a1:9d:47:f3:1e:6b:02:3e:56:
fe:37:63:a8:59:20:9a:44:21:fe:f0:d8:f7:48:bd:
4a:14:71:52:8c:dc:9f:67:72:52:6a:fd:81:bb:72:
9f:97:bd:2a:d0:5c:86:c9:45:3f:58:56:0d:73:a8:
95:42:b9:e5:89:9b:91:27:dc:b3:69:e6:11:6b:5e:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F5:20:3A:38:CB:F7:D2:79:D6:90:BF:B0:2F:74:63:6A:31:5B:7F
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/XvUgOjjL99J51pC_sC90Y2oxW38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1500:910::/44
Signature Algorithm: sha256WithRSAEncryption
30:e0:4f:c4:14:f0:f2:52:df:45:75:9c:d5:dd:8b:4f:0f:8e:
59:a3:24:95:dd:72:0b:58:a6:1e:af:77:2d:95:24:09:e2:bf:
cc:c0:96:8d:00:1f:d1:88:ef:c5:cf:14:4d:19:bd:c4:92:fa:
14:b6:2d:ec:ef:e1:87:72:03:61:70:74:6f:34:75:5a:77:1b:
9d:f9:8a:f8:70:5c:98:5e:1d:4f:fb:12:14:c5:c2:d5:ed:34:
c4:95:54:d5:49:14:a2:fd:36:53:22:b3:97:fe:9e:50:08:fd:
9a:25:9c:5e:36:90:22:10:ab:8f:d1:79:1b:d5:74:d0:33:6e:
94:f5:f7:f5:1d:be:ae:a5:f1:f4:7b:1a:c6:30:66:8a:23:5a:
12:e6:e2:fd:90:f5:8e:b3:22:d6:13:3c:00:84:1c:41:e4:8b:
e1:87:f5:fb:3b:ec:88:8f:9e:99:92:12:8b:2a:e8:76:2f:0c:
c7:51:be:47:3d:82:13:1f:76:22:63:82:3e:8d:7d:97:8c:cc:
70:a7:eb:46:43:c3:1c:d8:3c:4b:45:f0:b1:2c:49:13:1d:a3:
18:cf:a3:a9:fc:88:a8:e4:8a:2b:36:c7:10:86:ba:f2:2f:95:
db:f0:81:17:9c:5a:3c:36:81:d6:07:94:be:68:64:c6:12:f1:
f1:3f:62:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:36 2025 by rpki-client