Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xly-F6zhz9BlGk-hEkrPuZsJ8_I.roa
File: xly-F6zhz9BlGk-hEkrPuZsJ8_I.roa (raw, json)
Hash identifier: yeOCyci6ZrAMq5e7+1XV1QmslZooXrpVPtnkH4VjgRc=
Subject key identifier: C6:5C:BE:17:AC:E1:CF:D0:65:1A:4F:A1:12:4A:CF:B9:9B:09:F3:F2
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 1A5B2B9F
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xly-F6zhz9BlGk-hEkrPuZsJ8_I.roa
Signing time: Tue 31 May 2022 06:46:14 +0000
ROA not before: Tue 31 May 2022 06:46:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200306
IP address blocks: 2a06:a005:b00::/44 maxlen: 48
2a06:a005:af0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442182559 (0x1a5b2b9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: May 31 06:46:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c65cbe17ace1cfd0651a4fa1124acfb99b09f3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:bd:fe:cc:6c:80:24:04:17:66:21:e2:04:
86:64:0b:55:bf:1f:77:32:e2:ce:ba:b3:ba:90:90:
df:a1:7d:a4:fd:8a:bc:aa:e1:e2:72:d1:14:bd:dc:
93:b8:71:ee:27:a1:13:2e:63:c4:5b:1c:bd:88:ec:
5e:ab:87:a0:7a:72:ed:d6:6e:bc:05:e1:b4:d6:85:
e8:ed:f1:ea:0d:82:8b:fe:3d:ba:b3:84:6c:4c:bc:
a8:a1:95:3b:7b:e4:ff:44:42:ec:4b:8c:cf:57:7a:
29:7c:d6:1f:92:6d:b6:50:ca:9d:49:90:2a:97:d6:
bc:5d:19:34:5b:a9:c2:23:58:8e:d0:d9:85:29:4f:
e7:dd:c8:34:95:46:82:35:64:a6:5a:56:e8:35:8b:
04:5b:69:b2:49:51:b9:2f:1c:19:dc:be:5d:24:aa:
8f:3c:02:e8:c2:7e:a3:6e:77:71:40:a7:bc:68:1e:
9b:f6:ca:4a:d5:8d:8a:b1:09:0a:8f:11:d3:ae:3e:
1a:8b:5a:c1:a4:94:d7:4b:d8:92:7d:64:ab:6c:a0:
23:cf:fd:54:5a:9d:99:cf:f2:de:2c:6a:d0:87:2a:
38:7d:25:0e:17:c1:7c:ff:53:b1:55:21:90:e9:19:
99:f5:01:d8:cd:d7:54:36:cd:5c:33:ee:99:a3:3c:
35:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5C:BE:17:AC:E1:CF:D0:65:1A:4F:A1:12:4A:CF:B9:9B:09:F3:F2
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/xly-F6zhz9BlGk-hEkrPuZsJ8_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:af0::-2a06:a005:b0f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
14:03:ca:1b:6b:f2:9d:c2:a7:77:81:a7:10:98:fb:9d:49:2f:
a0:11:42:97:61:dd:97:15:6c:b3:08:41:76:84:be:2e:91:79:
37:72:04:0f:c6:2d:1b:18:be:80:af:df:4d:7b:98:3f:4a:42:
88:90:e9:55:2a:89:60:90:9e:0b:bb:7f:fc:f4:04:19:11:90:
b6:cb:73:41:06:0c:42:5f:ae:7a:b5:13:63:71:36:b8:0c:8c:
a1:47:91:4e:b2:d0:4a:7c:e9:cb:97:da:dd:fd:2e:09:f1:f4:
09:c0:da:f3:5b:05:7b:10:91:01:8e:22:56:c9:9a:94:ef:c9:
3c:8d:e4:8e:f5:40:a9:9c:4a:c2:da:c4:d4:c6:a0:15:0d:e2:
12:0d:da:07:7b:47:5e:07:b8:2b:ef:8a:e7:26:1a:3d:58:9d:
89:ce:92:16:5b:09:f4:09:d0:3f:2f:53:96:6d:89:59:4a:9b:
70:e5:93:8e:d6:24:ad:74:bf:14:77:aa:97:70:08:49:a3:63:
73:e2:47:57:eb:e0:e3:03:bc:e3:db:7b:04:0a:67:f9:b6:e4:
69:2c:b5:50:d3:0d:89:59:c7:8a:75:fa:c8:16:02:4b:2a:03:
63:77:7b:6a:75:57:e8:14:76:d1:d4:7c:f1:83:75:fe:6b:21:
0c:b1:88:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:12:37 2025 by rpki-client