Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/Xrc0g_6FSG8ZFIg-M8j_EmbMaBk.roa
File: Xrc0g_6FSG8ZFIg-M8j_EmbMaBk.roa (raw, json)
Hash identifier: Rc7LlFZsQD6UtspfP1hY2HJq001uYyMfvHYShOgLlRs=
Subject key identifier: 5E:B7:34:83:FE:85:48:6F:19:14:88:3E:33:C8:FF:12:66:CC:68:19
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 01944B11B54ABB818A092D18468D516C1EDE
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/Xrc0g_6FSG8ZFIg-M8j_EmbMaBk.roa
Signing time: Thu 09 Jan 2025 12:37:19 +0000
ROA not before: Thu 09 Jan 2025 12:37:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213877
IP address blocks: 2a01:ecc0:40::/42 maxlen: 42
2a01:ecc0:200::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:11:b5:4a:bb:81:8a:09:2d:18:46:8d:51:6c:1e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: Jan 9 12:37:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5eb73483fe85486f1914883e33c8ff1266cc6819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:c7:27:21:f4:2d:69:e6:2b:2f:67:a0:13:
dc:aa:0e:44:a7:d0:6d:0c:f5:bd:40:90:c1:3d:0a:
73:56:4d:2d:27:79:d6:78:e7:b2:e8:c5:d9:fe:35:
a0:26:21:d9:5c:c1:a4:87:5f:54:18:f8:15:e5:11:
b4:03:44:8d:08:60:8d:36:98:4e:2b:d9:99:24:10:
2a:ad:19:f2:c0:07:7c:e4:ad:38:6e:1b:9b:8f:bf:
81:1c:d7:ac:70:ab:e8:a8:15:07:de:3b:d3:b5:5d:
1c:a6:18:6e:e8:82:4a:15:77:cd:ae:23:17:38:1e:
54:24:50:66:59:a2:5d:f4:7e:2e:ff:60:cf:64:6c:
21:95:83:c0:a5:ab:37:f5:b3:7c:2d:79:3c:59:aa:
cc:d0:ed:3c:a8:b1:19:11:5b:e5:ef:a0:fa:4a:de:
b5:c0:45:5c:1c:62:5e:16:c6:43:88:dc:87:0e:5a:
30:57:b8:42:0a:6e:4b:5b:26:ee:53:13:4b:67:c1:
fa:20:a1:90:3e:a9:82:cc:2f:ae:be:c0:3c:6f:64:
9e:f7:bf:df:78:b5:0c:62:78:e9:3d:1a:97:03:55:
32:af:9a:54:90:05:00:b8:57:b1:09:3b:a7:12:8f:
17:f6:38:d8:27:1c:98:8f:20:63:29:76:b7:b8:57:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B7:34:83:FE:85:48:6F:19:14:88:3E:33:C8:FF:12:66:CC:68:19
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/Xrc0g_6FSG8ZFIg-M8j_EmbMaBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ecc0:40::/42
2a01:ecc0:200::/42
Signature Algorithm: sha256WithRSAEncryption
21:88:92:4c:0b:d1:00:5d:e9:aa:6c:ab:23:fc:34:74:9e:0b:
c1:ef:48:26:9e:b6:8b:d2:1e:09:4c:4f:9c:17:78:68:85:aa:
44:44:b3:6f:92:a2:f4:43:94:04:39:0e:14:85:8c:63:d5:c5:
29:15:56:0a:a0:72:a8:df:79:e5:06:54:e5:1c:cb:9f:f9:ff:
88:e0:11:89:81:1f:ed:20:f9:ea:4d:7a:37:e5:3d:56:7b:fb:
07:fa:ab:eb:e9:e8:b6:82:0d:1f:b9:23:b3:b4:62:4a:c0:36:
a6:d0:7c:71:d3:37:fb:dc:69:b0:64:7b:02:ee:68:4e:70:bd:
31:c9:88:31:b9:04:9a:34:91:31:20:d5:28:d4:7f:1c:39:a4:
cc:71:7c:7d:6f:26:6d:3d:d1:a4:f7:a1:1d:18:3a:4c:38:14:
55:8e:21:9e:3c:9d:28:19:36:e2:9e:9d:a1:6a:b8:07:d6:50:
3e:0c:72:aa:1d:f8:bb:04:e4:eb:2b:4b:f1:ec:a3:92:62:b5:
fd:1f:6c:01:ec:76:f1:36:23:8a:c3:18:4f:00:ce:ac:f9:70:
a9:12:a9:3e:83:4b:9a:07:2a:66:20:b9:a2:28:70:21:1c:d9:
6e:78:10:fb:dc:03:0c:1d:04:ad:f5:0a:53:9a:29:4c:1c:29:
cb:e7:91:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:45:47 2025 by rpki-client