Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/xqlVZBB9sO3vWj8zwFa7d_DV0K8.roa
File: xqlVZBB9sO3vWj8zwFa7d_DV0K8.roa (raw, json)
Hash identifier: WJGw9tR1uFvJvx7voYo2acpZQ7m9lC9bCrk6L8c57Vg=
Subject key identifier: C6:A9:55:64:10:7D:B0:ED:EF:5A:3F:33:C0:56:BB:77:F0:D5:D0:AF
Certificate issuer: /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial: 019421B22157DC94107A1748D55A35635F18
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/xqlVZBB9sO3vWj8zwFa7d_DV0K8.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205056
IP address blocks: 2a02:7080:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:21:57:dc:94:10:7a:17:48:d5:5a:35:63:5f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6a95564107db0edef5a3f33c056bb77f0d5d0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:99:fa:d0:63:2f:66:84:1d:0b:bc:56:88:
53:52:bd:87:af:ff:10:fc:85:e8:96:1c:06:2f:c4:
76:3d:de:5a:6e:cf:2f:64:4d:ef:1b:a8:06:bd:0b:
66:40:24:ef:73:bb:8b:dc:3e:be:de:99:97:cc:db:
14:64:33:99:a2:b5:57:57:fc:75:a6:c3:73:4e:b5:
3c:16:cf:87:a5:44:df:b3:d3:5c:f2:22:e2:6b:78:
20:62:d4:7c:89:c5:77:ce:c2:97:50:8f:20:13:4f:
4d:fc:3f:35:24:0f:09:56:a8:7e:ea:31:ef:0a:0b:
1d:05:c3:0a:1b:0a:d5:5c:77:c9:b2:21:f4:df:f6:
0d:1a:0c:26:76:a2:5e:fb:8b:22:d7:72:6c:a9:95:
70:2d:70:9e:47:87:69:9b:5b:a8:df:a4:a4:56:86:
b7:5f:33:1d:89:1e:71:fd:ca:7a:06:18:69:7f:36:
22:fe:07:05:57:15:96:a6:a6:31:6f:e7:33:07:9b:
54:84:b9:15:95:d5:55:c1:fd:90:9c:a3:fc:7f:17:
6f:98:83:9a:a1:66:a2:df:70:d1:64:cf:12:f7:58:
bf:90:a2:85:74:e5:39:81:c0:5f:73:cc:8b:0a:19:
6f:79:d0:d4:03:4a:30:f1:38:e4:23:93:21:fe:80:
22:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A9:55:64:10:7D:B0:ED:EF:5A:3F:33:C0:56:BB:77:F0:D5:D0:AF
X509v3 Authority Key Identifier:
keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/xqlVZBB9sO3vWj8zwFa7d_DV0K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:7080:2000::/48
Signature Algorithm: sha256WithRSAEncryption
40:4b:29:45:ef:9a:3e:b6:e3:55:97:c6:ff:da:e6:dd:40:db:
e6:9e:20:82:d0:74:54:4e:fb:2c:15:b8:c8:22:da:bf:36:b9:
3f:e3:42:b5:4d:07:48:93:17:df:2a:75:b9:91:7e:46:e3:44:
3a:ae:e3:06:e4:9d:ff:6e:a5:d4:7e:9f:3d:e3:c7:4a:a7:bb:
f7:fb:6d:1b:44:c6:98:5d:2b:44:84:24:ad:7b:e6:26:26:4c:
1c:a8:d7:86:00:8b:8f:c5:32:e7:b4:2b:99:67:e5:68:bb:2e:
10:33:11:d8:94:46:7f:79:6e:d7:bc:b4:fc:2e:c0:10:d9:57:
ac:34:3d:67:d7:4b:00:a4:f9:f4:39:82:c6:de:1f:fd:15:1f:
d4:4f:22:cc:cb:01:b5:0b:0a:61:dc:91:ca:71:49:7e:de:10:
eb:23:09:5e:2b:d0:47:e9:9d:12:93:3f:e8:be:61:63:40:f3:
5c:ec:f0:5a:b6:dd:1e:9e:8a:58:83:d3:a7:09:77:e0:b6:b5:
bb:6d:ae:47:21:b2:c8:91:46:4b:bc:6c:d4:aa:52:c4:e1:58:
71:48:6d:84:64:06:aa:90:8d:13:c5:80:98:20:dc:6e:69:15:
9e:23:cc:9f:94:76:1c:71:b2:59:61:35:b4:48:d0:41:31:13:
3b:d4:a8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:25:25 2025 by rpki-client