Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/XS6PxuLhSit4pPummN3D9rt_XyI.roa
File: XS6PxuLhSit4pPummN3D9rt_XyI.roa (raw, json)
Hash identifier: 947+sGtOkf9LWyXo/fSAaJ6OjjRfkyNgwZLg86SCJxI=
Subject key identifier: 5D:2E:8F:C6:E2:E1:4A:2B:78:A4:FB:A6:98:DD:C3:F6:BB:7F:5F:22
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823D7B89A3260A4DA95FFEF07D0AF72
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/XS6PxuLhSit4pPummN3D9rt_XyI.roa
Signing time: Thu 02 Jan 2025 17:50:25 +0000
ROA not before: Thu 02 Jan 2025 17:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208157
IP address blocks: 2a00:7180:8000::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:d7:b8:9a:32:60:a4:da:95:ff:ef:07:d0:af:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d2e8fc6e2e14a2b78a4fba698ddc3f6bb7f5f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:2e:66:f7:50:08:6f:6c:69:a4:b0:cd:e3:
8c:0e:7e:ad:71:d9:f7:82:c9:29:f4:19:08:7f:5c:
88:3d:99:0c:e0:4e:0c:86:0b:b4:56:db:d2:70:2a:
80:89:26:74:59:46:90:7b:04:d6:85:66:39:a0:ee:
d5:5e:30:83:ce:48:6e:f4:75:9c:db:f5:cf:58:a7:
2f:b4:df:65:d7:4f:ce:fa:32:ee:18:5f:22:cf:b6:
1e:1a:4f:72:4d:eb:02:87:89:53:48:bf:11:9b:ac:
8b:cf:a4:c5:9a:4a:28:85:66:81:86:c1:a9:a1:1e:
70:f7:66:62:f0:1b:01:39:aa:ca:42:c4:5f:f0:1d:
a4:82:c5:09:52:2f:d9:7f:67:fe:fb:83:11:43:9a:
09:ca:26:1a:95:9f:42:86:ee:93:96:4a:b7:53:23:
19:2a:bd:5e:86:45:8c:21:33:1e:ac:7e:86:b8:f7:
2e:99:db:72:7c:d2:c7:42:8b:90:99:27:3e:d0:2d:
42:d3:74:9b:7c:72:06:c4:71:85:e2:b6:71:c0:89:
bf:06:df:fb:b6:9a:11:11:4c:2a:e5:d0:73:8a:59:
bc:02:ca:ad:f0:a6:9f:55:37:e2:46:38:03:68:bb:
59:58:23:9f:91:30:80:b5:22:a1:c4:42:23:04:11:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2E:8F:C6:E2:E1:4A:2B:78:A4:FB:A6:98:DD:C3:F6:BB:7F:5F:22
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/XS6PxuLhSit4pPummN3D9rt_XyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8000::/46
Signature Algorithm: sha256WithRSAEncryption
54:6f:34:c0:15:e6:6a:b9:0a:f1:a5:65:e5:97:e3:8d:79:55:
76:71:9f:c8:be:17:3c:02:9c:0e:19:b9:f8:49:76:b0:b9:f9:
05:e6:34:2c:8c:98:d5:97:00:b9:3e:bc:b2:80:10:20:54:68:
10:a9:5e:b1:89:af:e8:6b:86:66:4c:42:62:6f:78:1e:0b:45:
28:e8:04:45:6f:52:75:1b:91:9d:9d:53:79:dd:74:7a:70:c8:
02:6b:69:30:71:f4:ad:ff:b0:57:32:3f:35:97:67:67:3a:b5:
ab:59:ee:cb:1e:8a:d1:11:c5:cd:92:79:85:39:44:5d:96:73:
7b:14:ea:f0:1d:5b:58:39:f3:80:5b:05:c7:39:93:28:8a:7a:
7e:34:9e:c0:ba:52:b6:ff:ad:00:24:50:3b:18:48:8f:e8:fb:
c5:15:b1:ed:1c:ca:34:63:8d:fc:da:3b:0b:21:05:77:7c:d9:
99:c8:55:ad:d9:26:55:1a:95:74:66:6c:df:16:b3:3b:21:8b:
10:d2:9f:00:26:10:f1:c5:46:ce:a2:7b:96:59:c7:e9:b9:08:
ac:06:11:94:be:4d:cd:c8:53:b0:21:58:09:15:11:fd:bb:d9:
44:72:c8:9e:ca:24:17:fc:3a:0d:fd:cd:5f:e9:ab:94:43:d6:
ff:78:0a:f6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQoI9e4mjJgpNqV/+8H0K9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjUwMTAyMTc1MDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDJlOGZjNmUyZTE0YTJiNzhhNGZiYTY5OGRkYzNmNmJiN2Y1ZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeYuZvdQCG9saaSwzeOMDn6tcdn3
gskp9BkIf1yIPZkM4E4Mhgu0VtvScCqAiSZ0WUaQewTWhWY5oO7VXjCDzkhu9HWc
2/XPWKcvtN9l10/O+jLuGF8iz7YeGk9yTesCh4lTSL8Rm6yLz6TFmkoohWaBhsGp
oR5w92Zi8BsBOarKQsRf8B2kgsUJUi/Zf2f++4MRQ5oJyiYalZ9Chu6Tlkq3UyMZ
Kr1ehkWMITMerH6GuPcumdtyfNLHQouQmSc+0C1C03SbfHIGxHGF4rZxwIm/Bt/7
tpoREUwq5dBzilm8Asqt8KafVTfiRjgDaLtZWCOfkTCAtSKhxEIjBBEXGQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFF0uj8bi4UoreKT7ppjdw/a7f18iMB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvWFM2UHh1TGhTaXQ0cFB1bW1OM0Q5cnRfWHlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgBxgIAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBUbzTAFeZquQrxpWXll+ONeVV2cZ/Ivhc8ApwO
Gbn4SXawufkF5jQsjJjVlwC5PryygBAgVGgQqV6xia/oa4ZmTEJib3geC0Uo6ARF
b1J1G5GdnVN53XR6cMgCa2kwcfSt/7BXMj81l2dnOrWrWe7LHorREcXNknmFOURd
lnN7FOrwHVtYOfOAWwXHOZMoinp+NJ7AulK2/60AJFA7GEiP6PvFFbHtHMo0Y438
2jsLIQV3fNmZyFWt2SZVGpV0ZmzfFrM7IYsQ0p8AJhDxxUbOonuWWcfpuQisBhGU
vk3NyFOwIVgJFRH9u9lEcsieyiQX/DoN/c1f6auUQ9b/eAr2
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:47 2025 by rpki-client