Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/xjop4hJHSwoFzXMNDoeeDQYu02I.roa
File: xjop4hJHSwoFzXMNDoeeDQYu02I.roa (raw, json)
Hash identifier: y8HGZqUsvJuN3uzEve/F8D2bZeb8NWDrluxa1LMdNdc=
Subject key identifier: C6:3A:29:E2:12:47:4B:0A:05:CD:73:0D:0E:87:9E:0D:06:2E:D3:62
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C62F468CA1045FB4FA3DB13BA91D1
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/xjop4hJHSwoFzXMNDoeeDQYu02I.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212050
IP address blocks: 2a12:bec0:e00::/48 maxlen: 48
2a12:bec0:e01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:62:f4:68:ca:10:45:fb:4f:a3:db:13:ba:91:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c63a29e212474b0a05cd730d0e879e0d062ed362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:1a:38:a3:d9:0b:67:e3:94:52:11:c3:28:
66:52:93:15:1e:3a:58:6f:09:7f:46:1e:3c:8e:a1:
07:49:8b:d6:14:48:0b:41:9f:ba:29:d7:89:99:b7:
65:3c:d1:ea:c8:37:38:a3:f5:fe:a8:a9:1e:28:c2:
fb:f5:f4:1f:74:75:ad:53:8f:b8:56:57:8a:82:98:
48:91:10:ba:d1:a5:3f:cf:1f:7a:d9:fc:4d:6d:d5:
42:cc:14:c6:09:31:4a:4b:ec:8b:84:d7:c0:d9:7b:
b8:50:72:ac:34:ac:4e:56:9c:cd:f1:a3:50:ad:d1:
7c:42:0a:d9:ad:05:3f:5d:16:57:05:33:ee:75:a4:
fe:48:87:fc:60:30:49:81:77:51:ab:f0:9c:20:59:
d8:f5:e2:55:f5:ca:af:ce:f6:88:72:c9:c6:b9:fa:
8d:7b:60:c4:2a:71:b8:95:26:0a:68:89:98:7b:7f:
fe:b2:e6:31:20:dc:0d:87:a6:0d:0d:e4:22:6b:cd:
f6:43:04:9f:29:97:23:f6:63:98:ff:08:86:ae:3c:
d0:8d:c1:d8:74:1c:4d:b7:da:06:a0:8f:48:cf:04:
ca:d8:8c:cb:eb:95:9d:a2:92:cb:61:ad:be:1a:02:
dc:48:51:85:88:21:37:3f:e1:bb:4e:c7:e3:73:62:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3A:29:E2:12:47:4B:0A:05:CD:73:0D:0E:87:9E:0D:06:2E:D3:62
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/xjop4hJHSwoFzXMNDoeeDQYu02I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:e00::/47
Signature Algorithm: sha256WithRSAEncryption
a5:ad:88:5f:03:31:78:46:ec:03:e5:fe:14:42:61:c9:d3:d5:
55:26:77:77:0e:3c:ee:19:9d:7c:3b:af:fa:a3:34:3c:c2:ff:
01:af:46:24:b8:9c:d7:6b:9b:94:0e:3f:8c:97:6e:22:ec:8e:
88:37:2d:08:86:23:30:84:7c:b5:e1:0d:32:f2:90:af:56:c9:
a6:1a:bb:88:55:32:48:eb:b5:2c:ff:4f:1f:e3:cb:12:2d:23:
fd:ba:2f:df:5e:79:13:a0:fc:8a:8f:be:cd:c9:e7:03:29:26:
bd:43:d6:ba:6e:6b:16:99:30:72:7b:01:86:87:60:0a:4f:2b:
63:32:1b:2e:f0:19:a3:a4:7e:b1:d9:fb:b2:19:25:5e:3f:49:
23:3c:5a:d4:ce:10:fa:ee:e3:d1:99:ac:f4:d1:a9:e5:52:57:
a2:79:99:ea:a0:cd:59:13:59:d9:22:75:44:49:a5:3a:90:8a:
b1:f3:3c:78:54:05:b4:35:b8:ab:52:2b:63:8c:52:9d:6a:0b:
09:22:a2:dc:37:77:aa:48:09:89:e3:f1:73:82:32:4f:0f:ba:
af:5d:f4:05:68:0b:de:94:a4:cc:e4:02:72:f5:3f:54:e1:98:
f9:7d:ab:f7:a9:0d:8c:a2:cb:e7:b3:9e:3f:2f:9c:13:26:18:
e7:ef:2b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:43 2025 by rpki-client