Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/Xon3ZRUmiHyafmwSbpFGnaeltWw.roa
File: Xon3ZRUmiHyafmwSbpFGnaeltWw.roa (raw, json)
Hash identifier: M4Nh/8K2vjAav0TbJZxKf47ENVLTCLivupIBPIaomOw=
Subject key identifier: 5E:89:F7:65:15:26:88:7C:9A:7E:6C:12:6E:91:46:9D:A7:A5:B5:6C
Certificate issuer: /CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Certificate serial: 019420D5E4CAB6A8C43A54DC606D35C097D6
Authority key identifier: 54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/Xon3ZRUmiHyafmwSbpFGnaeltWw.roa
Signing time: Wed 01 Jan 2025 07:47:56 +0000
ROA not before: Wed 01 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30892
IP address blocks: 2a02:aa8::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e4:ca:b6:a8:c4:3a:54:dc:60:6d:35:c0:97:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Validity
Not Before: Jan 1 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e89f7651526887c9a7e6c126e91469da7a5b56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:7e:ec:f4:a6:b0:c0:60:21:ba:72:2f:6e:
aa:b1:3f:8e:49:f3:55:41:1c:4c:57:91:09:fd:8c:
b9:96:69:fa:3b:38:fb:d4:d5:e8:10:7a:28:e1:42:
e4:04:3a:b5:50:86:db:e2:71:4c:27:86:c0:29:83:
1b:26:e6:25:6f:4b:e4:15:84:71:8b:73:6d:14:9d:
51:7b:14:30:8e:67:91:54:6a:0b:3d:21:d5:19:99:
09:7a:72:d4:af:18:16:aa:ab:08:a0:da:15:68:dc:
f5:4d:51:a6:b1:e7:19:8c:80:64:68:5b:b8:6f:4c:
00:ac:77:7e:47:83:7b:de:45:12:f4:90:5a:1f:e7:
c5:a4:9c:b2:f6:14:9e:39:1c:9b:4a:1b:5d:ff:8b:
77:34:74:d8:b9:63:7d:18:6c:37:d7:2a:e7:d8:b3:
9e:1c:45:fa:23:3d:6e:48:f4:73:b8:c2:87:90:d9:
89:1c:9d:1c:7b:38:52:40:29:17:4c:49:02:9f:1f:
0a:4e:49:a4:92:7a:11:a2:7a:51:24:00:07:48:4b:
e8:9b:30:3c:c5:f8:28:38:1b:c6:a5:b4:e8:cb:8d:
b3:67:a7:48:69:32:d7:5f:ec:78:b8:e5:d2:69:ae:
33:ec:7e:5d:41:a2:b9:65:dc:ce:8b:d8:f2:3e:b7:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:89:F7:65:15:26:88:7C:9A:7E:6C:12:6E:91:46:9D:A7:A5:B5:6C
X509v3 Authority Key Identifier:
keyid:54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/Xon3ZRUmiHyafmwSbpFGnaeltWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:aa8::/29
Signature Algorithm: sha256WithRSAEncryption
51:8a:b6:71:d8:f9:b0:19:5b:8e:4c:f6:b9:d9:b2:d9:a2:9a:
3e:23:6d:3a:f2:13:82:37:a2:a9:3c:63:6d:15:0c:ca:26:e8:
0c:a2:66:d8:aa:fc:95:09:9d:bf:f3:19:62:75:a9:eb:a4:34:
ac:a8:86:39:30:04:b9:8d:05:17:18:86:ff:71:01:8e:9c:0c:
3c:30:b4:5e:76:69:92:02:d8:a1:36:65:a3:f2:12:23:2c:b8:
57:3e:0a:04:5e:16:b9:a1:57:6c:4c:7f:32:c6:c6:45:31:5f:
17:eb:2f:5f:8d:b9:fc:1a:17:fa:15:4b:4e:0b:77:90:ff:fd:
98:2f:95:60:85:d6:07:4a:e2:03:ca:c3:c8:65:f0:1b:5d:fc:
8e:b2:6d:60:f0:01:29:b4:a2:73:9a:1a:58:b9:50:d3:2d:0c:
12:32:39:1e:c3:68:37:76:f6:c9:27:5d:6e:09:b9:70:23:9f:
d6:cd:76:0c:d5:eb:42:c9:2c:d0:f0:1d:ab:5e:ce:62:f2:44:
91:b9:8c:e9:ef:96:a6:76:19:02:e6:00:73:d8:93:12:42:0c:
0e:d1:6a:44:fd:21:cc:74:7e:40:57:7e:82:4c:c2:7e:4c:cf:
36:85:24:6e:d9:b1:37:b4:e2:35:ba:d9:e5:6f:ca:1e:be:07:
69:06:59:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:03:59 2025 by rpki-client