Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/XO5x1ed6Qican6ewDJRUjWEnme8.roa
File: XO5x1ed6Qican6ewDJRUjWEnme8.roa (raw, json)
Hash identifier: fx0lc0KbzwovZZhby66v7GxDNGYxnGf/b2m9WLttOyw=
Subject key identifier: 5C:EE:71:D5:E7:7A:42:27:1A:9F:A7:B0:0C:94:54:8D:61:27:99:EF
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018AAE1D9A1B361958FF791895C9C4AD8AF2
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/XO5x1ed6Qican6ewDJRUjWEnme8.roa
Signing time: Tue 19 Sep 2023 15:44:50 +0000
ROA not before: Tue 19 Sep 2023 15:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51741
IP address blocks: 2a12:62c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ae:1d:9a:1b:36:19:58:ff:79:18:95:c9:c4:ad:8a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Sep 19 15:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cee71d5e77a42271a9fa7b00c94548d612799ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ab:23:e7:59:02:72:29:74:26:c4:8e:dc:0d:
7e:f7:17:ac:6a:fc:a1:83:f4:78:41:08:14:5f:f8:
7c:3c:cf:81:3c:67:27:d8:8a:a6:38:e9:19:36:37:
5a:0d:28:30:04:a1:7a:5c:f3:9f:64:ae:46:65:fd:
78:69:a4:ab:23:13:b5:38:fb:8d:86:04:1b:14:2c:
a5:4f:0e:05:1a:25:c5:06:07:ec:73:e3:02:b8:39:
70:f9:9f:e2:6d:85:1c:24:ab:7a:8c:db:09:a8:71:
f3:11:87:a5:61:63:27:e7:4d:ef:11:82:7f:87:0b:
cc:7d:2f:c9:38:c2:35:64:bb:fb:34:18:b5:5a:38:
7c:73:b0:77:d5:35:92:8e:97:fc:60:76:7f:c0:4f:
93:5d:bb:43:f5:a6:19:3e:e6:d3:15:aa:3d:f4:1c:
84:ab:fc:33:73:3b:a9:bc:ca:de:f9:a9:2b:8e:14:
49:39:4b:e4:75:43:23:08:b4:80:c7:e4:2b:c5:17:
db:68:07:b1:a9:7d:5a:93:a8:58:b0:df:71:17:d7:
52:ea:65:98:54:28:1b:d7:7d:50:b2:da:e5:9b:e3:
9d:9d:13:6d:85:6c:39:03:cd:fa:fe:28:ad:38:ad:
07:e9:14:1e:22:4a:58:13:20:93:c3:b5:f7:2e:3f:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EE:71:D5:E7:7A:42:27:1A:9F:A7:B0:0C:94:54:8D:61:27:99:EF
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/XO5x1ed6Qican6ewDJRUjWEnme8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:d4:4f:66:93:bc:68:1e:a4:f5:75:b8:16:98:3e:8a:99:5c:
7a:70:4d:4b:e7:b0:35:e1:ec:b4:f3:86:95:c0:c3:a6:c4:51:
42:2e:64:b2:75:03:f7:49:26:c6:e7:89:b2:6d:19:b9:af:38:
be:04:8b:31:7e:07:d1:8d:bb:d1:00:dd:0d:e9:3d:b9:31:0f:
40:11:a6:c7:40:6f:51:7d:1c:80:0d:2b:2f:3a:d8:bd:34:4b:
43:a8:22:d8:0e:ce:55:62:cc:e9:01:9d:b9:1e:e4:a1:9d:b6:
83:8a:a3:9c:f7:f7:ef:61:ae:c0:bb:80:b8:0e:37:2a:2d:73:
ad:7c:76:3e:7a:6a:e0:06:47:3c:4c:e5:74:58:b2:7b:99:47:
52:01:c4:ef:56:4e:8f:e6:a4:d4:20:b8:8c:60:23:bd:11:74:
7b:7a:b2:3d:40:f5:6f:b7:9f:0c:fe:7d:42:cb:a8:7d:21:97:
44:c6:37:a4:f9:1e:b2:56:da:32:f2:ef:e9:e4:c4:54:e0:a9:
bb:0e:fb:68:6c:a1:5a:39:2a:bf:de:d9:5d:13:2a:a6:48:70:
f1:02:51:37:9f:0e:5a:ad:d0:af:75:02:ae:7c:ff:2e:f9:46:
2a:78:cd:73:0a:f0:aa:fd:71:0f:af:2c:9d:10:2a:de:72:b8:
a3:8e:26:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:28 2025 by rpki-client