Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/X4mDKoaEKklVWqi65S2czwe3Uww.roa
File: X4mDKoaEKklVWqi65S2czwe3Uww.roa (raw, json)
Hash identifier: awkG37p+dMC0xnBqk5pVZUx3VUN7i0bkBcHU+9UBP/I=
Subject key identifier: 5F:89:83:2A:86:84:2A:49:55:5A:A8:BA:E5:2D:9C:CF:07:B7:53:0C
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 08835F21
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/X4mDKoaEKklVWqi65S2czwe3Uww.roa
Signing time: Fri 03 Jun 2022 19:10:20 +0000
ROA not before: Fri 03 Jun 2022 19:10:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204829
IP address blocks: 2a0f:85c1:56::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142827297 (0x8835f21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Jun 3 19:10:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f89832a86842a49555aa8bae52d9ccf07b7530c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:91:21:c1:30:21:45:12:a9:2c:63:57:04:c6:
37:31:b4:85:23:95:21:5a:87:d8:2d:d2:af:5a:c0:
6c:26:12:74:37:1d:07:a5:ab:20:1e:35:0c:82:c2:
c6:ac:c8:4f:15:9b:3c:83:45:4f:79:89:3a:32:d5:
53:ae:55:a3:62:08:0d:d3:aa:42:f6:7b:42:28:3d:
e9:ab:b5:48:e9:69:dc:a4:60:0c:42:a2:78:c0:62:
f4:ba:d0:6d:8a:d8:6c:27:c5:4a:33:9f:17:ce:d3:
f6:e3:ed:ae:71:03:14:83:cf:18:a7:95:59:a6:c6:
b8:12:de:5d:83:ae:2c:8a:46:33:ea:bb:4b:6f:96:
a9:3b:c8:77:4e:a0:ab:e1:65:89:7e:45:4f:ae:32:
37:16:64:cf:c4:16:18:f0:18:1d:4f:c3:4d:af:e2:
71:c1:8d:55:66:f4:e4:5e:8a:89:99:70:87:47:0b:
0f:f4:19:b5:2e:ab:77:b7:05:94:a3:c2:c4:a8:dc:
88:8e:19:72:ec:00:47:e0:08:e1:1b:a4:5a:8e:8d:
8a:b6:d0:57:a7:e7:b4:0e:41:46:52:13:4c:4f:c0:
21:b8:fa:0d:ec:a0:ae:4d:46:87:93:b1:fe:7d:7a:
17:7b:fe:9d:05:45:e7:67:f0:d6:85:b2:2c:ec:a2:
80:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:89:83:2A:86:84:2A:49:55:5A:A8:BA:E5:2D:9C:CF:07:B7:53:0C
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/X4mDKoaEKklVWqi65S2czwe3Uww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:56::/48
Signature Algorithm: sha256WithRSAEncryption
5a:42:1e:9a:25:b6:0f:91:d6:22:83:bb:a4:f8:b0:8f:f4:76:
9f:cd:36:2e:3f:00:a6:f1:25:4c:cb:56:db:f7:b9:6a:6b:8d:
71:12:fc:85:44:34:01:9f:69:55:53:b5:b4:3c:dc:8f:e1:41:
3b:00:10:2b:6b:6e:17:1c:12:1a:44:d8:b6:d3:a7:01:cd:87:
17:20:48:80:f4:d0:e8:f7:ea:25:0f:c9:6c:1c:f8:c0:14:87:
76:ae:2a:a0:26:46:40:bd:80:67:c8:10:a3:f2:6b:f7:94:07:
76:cf:dd:94:76:63:80:e6:74:a0:3e:63:90:30:86:1f:51:0b:
e9:98:68:a4:6b:bd:5a:21:8b:1d:5c:b5:02:27:cc:dc:dd:b3:
3f:52:a0:93:3f:2a:36:99:94:49:a8:8f:26:18:27:07:44:54:
01:35:94:ea:30:11:7d:28:2b:f7:c8:06:1b:e3:a4:39:f2:10:
a6:58:19:9f:37:7b:6e:90:5d:07:57:45:8d:1a:ad:df:be:30:
14:aa:33:8e:d3:f8:ba:c2:a1:2b:c0:e1:68:bd:d6:17:b2:4b:
1a:0f:46:81:6e:d1:05:d6:9c:18:e4:dc:40:06:a0:f1:e9:04:
e4:f4:63:4e:68:91:e2:0b:4d:4c:d4:ce:94:24:54:06:36:90:
a9:b2:00:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:10 2025 by rpki-client