Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/xNepidC8uACX32kWa_VL3tbDEeo.roa
File: xNepidC8uACX32kWa_VL3tbDEeo.roa (raw, json)
Hash identifier: y5CaszoHPg0zyBMJzeb0d+4m77F/p1UwRMz8jfe+AvQ=
Subject key identifier: C4:D7:A9:89:D0:BC:B8:00:97:DF:69:16:6B:F5:4B:DE:D6:C3:11:EA
Certificate issuer: /CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
Certificate serial: 0187A52FBB01ABFB5292C23F8BFDD1A2BFC3
Authority key identifier: 83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/xNepidC8uACX32kWa_VL3tbDEeo.roa
Signing time: Fri 21 Apr 2023 18:59:41 +0000
ROA not before: Fri 21 Apr 2023 18:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44812
IP address blocks: 2a09:6902::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a5:2f:bb:01:ab:fb:52:92:c2:3f:8b:fd:d1:a2:bf:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
Validity
Not Before: Apr 21 18:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4d7a989d0bcb80097df69166bf54bded6c311ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:c1:de:1c:dd:da:07:c0:91:fb:e7:f8:8e:
c3:da:7f:0b:34:3f:c4:5a:a1:b6:25:5d:48:27:79:
82:3e:2c:ce:6a:54:a0:4b:a5:26:62:f9:a3:e2:25:
a8:02:79:76:d8:55:9a:28:6e:36:6b:96:ad:e9:5c:
92:18:1e:a7:11:ce:35:54:54:5f:0f:f3:c9:62:43:
79:30:f5:56:87:20:c3:d5:78:a3:f0:b1:15:7e:89:
29:c6:d3:8f:a5:e0:69:16:f0:db:50:d9:39:3b:6e:
52:b7:1f:81:ed:df:89:7b:31:e4:ca:b8:8a:df:27:
c8:f3:e4:28:3a:f3:a8:5a:63:07:58:99:83:9a:bc:
c5:0a:a4:11:3f:63:0b:ec:62:89:4e:3e:1d:99:12:
d8:d5:7d:b4:b8:c5:26:69:49:70:73:27:14:c2:e6:
42:11:87:6f:51:f8:fa:2e:b3:ba:dc:b5:bc:2e:d3:
99:24:51:7e:83:c4:6b:70:d1:1d:99:26:1d:fd:9e:
63:aa:16:c8:71:bb:9c:80:0b:72:36:7e:5c:2f:d5:
46:f7:8e:6a:ae:b5:cb:ef:4f:44:da:6e:41:75:93:
50:09:9b:75:58:e6:a2:9c:eb:05:51:f9:39:3d:4e:
50:d6:38:5e:3b:2f:7c:96:c2:f4:fc:73:98:c4:3a:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D7:A9:89:D0:BC:B8:00:97:DF:69:16:6B:F5:4B:DE:D6:C3:11:EA
X509v3 Authority Key Identifier:
keyid:83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/xNepidC8uACX32kWa_VL3tbDEeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/gzGjYb3FHXqsrc4wLxJX1cPzWuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6902::/32
Signature Algorithm: sha256WithRSAEncryption
05:9e:46:7c:3d:77:2a:ad:3b:3e:5f:4c:75:45:d5:07:24:4c:
bf:55:0a:92:08:da:77:37:3d:f1:f1:0f:a4:1c:03:96:69:d0:
b5:5a:a0:b8:f4:a5:74:5e:f5:1e:e3:10:f9:b4:80:48:5b:7c:
1b:9d:c5:72:41:b4:4d:d4:33:7b:9d:1a:0c:48:0c:d1:24:0e:
14:52:a7:37:8b:bc:f4:4d:3e:4b:80:ee:96:74:bf:82:a8:f7:
d7:94:e8:4b:6d:f9:d8:cb:2c:28:00:28:f5:ee:c9:f5:cd:ee:
31:95:0a:a0:c3:ce:e6:2c:70:fd:bc:b9:bd:e7:7c:b4:5b:35:
0c:ab:ec:6d:a2:c1:6d:92:a3:8d:03:f1:e5:74:aa:a0:5b:71:
25:36:f0:78:89:c4:85:ea:de:e7:bb:ba:98:54:b5:43:ac:0a:
13:81:06:61:33:0d:44:d3:df:37:c5:03:20:3d:05:da:d3:6a:
f7:aa:ad:13:66:ab:1d:03:2d:d9:0d:08:ce:8d:fa:4e:b0:f2:
e1:4f:60:e8:72:cb:8a:40:03:ad:ed:49:c5:a0:39:89:fe:e8:
96:07:f2:0a:cf:9e:4f:4b:27:3c:c5:19:af:8c:e4:03:6a:e4:
ba:e6:2b:85:63:ec:d6:3b:3c:f3:d3:25:91:c6:48:b8:a2:23:
14:a1:7c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:40 2025 by rpki-client