Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/Xaj9OdBqfavMGz9Hj8WqPzLlJv8.roa
File: Xaj9OdBqfavMGz9Hj8WqPzLlJv8.roa (raw, json)
Hash identifier: 7/qzdKWyXhihMYbJd/tdnZB95rQnEJJturOlIFjIUFc=
Subject key identifier: 5D:A8:FD:39:D0:6A:7D:AB:CC:1B:3F:47:8F:C5:AA:3F:32:E5:26:FF
Certificate issuer: /CN=ff836ed8cd29b81b8421a1dab920905e2ed76184
Certificate serial: 01856F42B22FE7281347734A8EF72A520441
Authority key identifier: FF:83:6E:D8:CD:29:B8:1B:84:21:A1:DA:B9:20:90:5E:2E:D7:61:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4Nu2M0puBuEIaHauSCQXi7XYYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/Xaj9OdBqfavMGz9Hj8WqPzLlJv8.roa
Signing time: Sun 01 Jan 2023 21:35:20 +0000
ROA not before: Sun 01 Jan 2023 21:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206502
IP address blocks: 2a0b:2180::/32 maxlen: 32
2a0b:2180::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b2:2f:e7:28:13:47:73:4a:8e:f7:2a:52:04:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff836ed8cd29b81b8421a1dab920905e2ed76184
Validity
Not Before: Jan 1 21:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5da8fd39d06a7dabcc1b3f478fc5aa3f32e526ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:7f:42:a1:f0:72:85:c0:5a:49:c0:b1:5f:
d1:5a:23:67:f1:6c:ae:03:2b:df:f0:eb:1c:c2:6c:
86:cf:9b:4b:eb:15:df:46:84:58:50:0b:c5:04:27:
30:a6:c9:19:74:21:65:80:d2:56:1f:d3:35:d8:80:
07:c0:2f:3c:c8:d9:fa:09:e0:3e:b7:b2:43:12:54:
a8:58:ee:cd:e4:ac:2f:04:07:15:ce:b5:80:a0:ad:
98:92:34:27:7b:66:66:3a:85:05:cb:2d:7a:e4:15:
fd:75:95:83:b2:85:13:d8:35:f2:12:77:43:9c:1f:
81:72:dd:a0:11:0e:fe:f9:9e:30:53:27:cf:3c:64:
cc:72:d1:8e:f1:99:2e:30:bc:54:ef:ae:4a:be:09:
c0:f7:3a:6d:0b:d3:6a:b7:30:00:52:9f:d0:7d:8a:
ab:de:a0:e5:b5:fb:64:96:af:bf:15:66:d8:d5:20:
ec:00:fe:0b:2d:54:11:17:5c:69:b8:68:a8:5b:54:
b0:40:b0:83:18:6d:0d:f9:bc:4e:58:be:84:d6:16:
7f:4b:69:11:e7:ac:fb:b5:da:e8:04:0e:82:54:6b:
23:f0:c5:05:f3:d0:12:7a:bf:ba:e4:75:9f:d7:4e:
1a:91:5d:4e:3f:9c:2f:72:e9:3e:a9:15:3c:a0:22:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A8:FD:39:D0:6A:7D:AB:CC:1B:3F:47:8F:C5:AA:3F:32:E5:26:FF
X509v3 Authority Key Identifier:
keyid:FF:83:6E:D8:CD:29:B8:1B:84:21:A1:DA:B9:20:90:5E:2E:D7:61:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4Nu2M0puBuEIaHauSCQXi7XYYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/Xaj9OdBqfavMGz9Hj8WqPzLlJv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/57d581-3994-4d83-a1b0-968470b650f4/1/_4Nu2M0puBuEIaHauSCQXi7XYYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2180::/32
Signature Algorithm: sha256WithRSAEncryption
0e:3b:cc:34:da:aa:0c:35:fd:0b:50:df:b5:4d:fe:db:2d:24:
0d:0a:6c:74:66:b3:5c:e4:6b:e4:41:75:0f:df:da:e3:7c:df:
f4:b4:dd:b1:8a:c2:a3:a0:6a:6c:18:d1:79:e7:91:a7:47:d0:
02:d0:2e:76:93:35:1d:87:d5:3d:3e:81:52:a7:0e:87:9c:cc:
7d:dc:bd:73:cc:e9:9b:a9:52:f0:c6:05:a0:20:49:e5:0e:df:
78:ad:84:f9:a0:30:67:4f:09:1d:46:28:67:5e:6d:cb:3c:95:
a6:9f:65:65:fa:48:3e:19:c0:13:9e:25:67:fd:3f:14:2b:40:
36:5c:d9:8a:3b:2f:eb:bd:2c:50:99:56:a5:34:ab:99:12:2d:
0a:30:e8:2b:49:5e:a1:76:59:9f:eb:11:d7:b3:e0:e7:25:d1:
0b:5e:5f:04:86:cc:56:42:0c:23:bd:dc:8e:81:f2:e5:79:ec:
28:5f:d8:be:6f:51:7b:6a:db:2d:92:8c:12:bf:ed:08:96:b1:
ef:14:02:b9:1c:73:f5:00:11:91:48:c2:7a:08:95:c8:42:80:
0b:1b:a7:bd:66:c0:9d:42:3f:9c:00:70:35:6a:79:dd:f7:13:
23:4a:5b:06:82:ca:93:54:ee:8f:93:b7:b6:4c:a0:41:5b:69:
25:22:32:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:36 2025 by rpki-client