Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/xPtLrdBipypengrag4x8EV22chI.roa
File: xPtLrdBipypengrag4x8EV22chI.roa (raw, json)
Hash identifier: e8oNgVF8qAJmmFaRNtWzL9yJSZki65XpFoHpBsnKgqs=
Subject key identifier: C4:FB:4B:AD:D0:62:A7:2A:5E:9E:0A:DA:83:8C:7C:11:5D:B6:72:12
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 018C4F7CFD69A022E027AEC06E13BD6481A6
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/xPtLrdBipypengrag4x8EV22chI.roa
Signing time: Sat 09 Dec 2023 16:50:40 +0000
ROA not before: Sat 09 Dec 2023 16:50:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51396
IP address blocks: 2a13:ef46:b00b::/48 maxlen: 48
2a13:ef44:b00b::/48 maxlen: 48
2a13:ef43:cafe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4f:7c:fd:69:a0:22:e0:27:ae:c0:6e:13:bd:64:81:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Dec 9 16:50:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4fb4badd062a72a5e9e0ada838c7c115db67212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:79:0e:da:6d:ad:63:82:71:65:94:61:84:
8e:36:0c:77:57:93:0f:7d:ba:15:b9:27:dc:b7:5b:
ad:e2:50:a7:01:66:7e:7c:b0:3b:fc:0d:20:8f:67:
c1:ca:7e:e1:8c:b5:16:0f:a8:79:36:f2:80:40:be:
50:fc:c3:14:37:36:12:14:78:41:72:a6:17:34:2f:
cd:85:fe:16:73:94:db:8e:72:ff:f5:48:40:cf:f7:
5c:81:63:0c:20:5c:f1:ad:6b:b4:a2:ff:d7:0b:9b:
14:d9:ba:21:a3:bc:85:a4:5d:07:06:9d:c1:41:e1:
0e:4f:2c:73:45:58:65:e7:cc:c7:00:0a:bd:dc:0d:
e8:aa:88:aa:40:9f:b3:b5:60:83:80:57:10:3d:1e:
57:13:05:27:78:58:15:44:74:ac:61:d4:07:e4:16:
0b:67:1d:7e:2e:b3:11:3d:9b:a4:7f:9f:2a:c8:35:
07:82:c0:c5:71:aa:c1:f4:6d:21:0d:20:a0:33:a5:
7d:97:bf:55:08:ef:4d:3b:f0:82:5f:56:e8:23:1f:
bc:13:70:fd:8a:bc:fa:1a:3b:45:ff:00:9a:49:d5:
99:46:db:37:81:8b:30:61:88:59:01:f5:8f:39:aa:
92:b5:7d:28:95:f4:1d:f9:34:f6:d3:47:66:34:20:
44:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FB:4B:AD:D0:62:A7:2A:5E:9E:0A:DA:83:8C:7C:11:5D:B6:72:12
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/xPtLrdBipypengrag4x8EV22chI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef43:cafe::/48
2a13:ef44:b00b::/48
2a13:ef46:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
62:08:dc:65:ee:62:59:de:6b:a2:ed:3c:25:02:f8:d9:30:23:
70:c8:2c:1d:c3:ee:2e:d9:b2:24:5b:31:9b:02:f3:55:e6:0b:
41:88:dc:88:0d:e0:5a:a0:d9:d5:46:12:d2:09:b2:a4:7a:7f:
41:88:2f:bc:3c:51:fe:53:bd:8e:1e:1b:27:12:c4:9a:c9:fe:
74:8b:af:5c:98:24:ee:18:d3:15:d3:90:1a:16:4c:79:85:4b:
97:0d:2e:a5:4f:c2:9b:20:ac:33:22:ac:3e:0d:d0:90:46:18:
20:06:75:b8:4b:76:bc:52:4c:8a:14:b4:c9:fc:63:a0:ce:df:
a5:8a:4f:a0:7d:ab:dc:35:04:1d:7e:93:59:b8:6f:5c:ca:5b:
2b:ec:11:1f:e7:e7:00:21:2d:49:0c:3f:1b:57:eb:2d:c7:df:
46:3f:61:d3:44:c8:bf:58:61:d1:3e:56:d6:62:28:39:4a:50:
d0:04:23:43:d2:c1:3a:73:b5:da:2c:2c:be:7b:a2:07:3d:4c:
15:c1:50:78:1f:c4:5a:01:37:9d:dc:19:c8:bc:1f:9b:1e:82:
f8:e0:70:f9:f5:dd:6c:45:7c:eb:65:25:24:c8:49:b8:9a:80:
eb:94:b2:96:a6:6f:70:90:5e:0a:c9:21:ff:5d:ab:cd:89:06:
ed:6b:84:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:41:51 2025 by rpki-client