Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/_XKoXTKVnWCLwAIXrIOIX5N7LsA.roa
File: _XKoXTKVnWCLwAIXrIOIX5N7LsA.roa (raw, json)
Hash identifier: aBRMqCaXma5bv7k5qtFiE8eKr35EEhefvcnO3bd6aPU=
Subject key identifier: FD:72:A8:5D:32:95:9D:60:8B:C0:02:17:AC:83:88:5F:93:7B:2E:C0
Certificate issuer: /CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
Certificate serial: 018CC5004C06F61B29BB4456CA6D7C268D2D
Authority key identifier: 52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/_XKoXTKVnWCLwAIXrIOIX5N7LsA.roa
Signing time: Mon 01 Jan 2024 12:29:40 +0000
ROA not before: Mon 01 Jan 2024 12:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48597
IP address blocks: 2a09:2b80:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:4c:06:f6:1b:29:bb:44:56:ca:6d:7c:26:8d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
Validity
Not Before: Jan 1 12:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd72a85d32959d608bc00217ac83885f937b2ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:47:db:46:fb:2c:e7:ba:68:9f:0c:bc:35:d5:
13:52:c2:4c:ee:bc:e9:16:17:78:64:e4:22:b6:09:
14:9e:dc:5e:a6:b5:ae:fa:a7:3c:e3:af:19:2b:34:
11:66:b1:a3:f2:d5:ee:c8:2b:9a:dc:c9:d9:ec:8c:
0b:ff:71:ea:3c:fd:33:5d:c2:6c:05:57:5f:12:a6:
64:2c:a5:83:62:fe:d7:87:12:0d:16:c3:58:9d:02:
8f:34:a4:4b:c4:6a:bc:8c:06:43:a3:d4:8c:29:be:
74:83:97:8f:b3:21:6a:49:d4:a9:50:a3:01:b5:f8:
4e:d6:ac:e7:ac:5d:71:63:9e:63:cc:f4:00:6c:e3:
33:e2:df:ab:35:c5:7c:39:92:8b:e5:72:65:7f:21:
2d:68:fb:f9:51:d0:63:82:82:46:9a:1c:e0:d1:a1:
36:22:63:8c:f3:a3:3c:ee:0f:00:6a:24:ba:5c:86:
02:52:21:72:9f:06:ac:e2:74:3a:51:a7:b1:4d:30:
32:df:63:c1:87:af:f4:b7:b8:53:7d:03:23:26:92:
79:d2:bf:b3:6f:45:9d:6c:64:c4:63:54:e2:78:b0:
cc:9d:75:38:a8:f7:40:10:bd:e0:cd:60:ca:55:c1:
32:4e:b2:01:8a:45:07:c9:4a:fe:13:c7:50:7c:54:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:72:A8:5D:32:95:9D:60:8B:C0:02:17:AC:83:88:5F:93:7B:2E:C0
X509v3 Authority Key Identifier:
keyid:52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/_XKoXTKVnWCLwAIXrIOIX5N7LsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/UlAqKawGtl6TLhvZfX_PKcNxyz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2b80:1::/48
Signature Algorithm: sha256WithRSAEncryption
27:4a:1b:6e:ce:a7:06:98:d1:63:6f:74:d1:3b:ab:56:57:27:
cc:cb:b5:05:a6:7f:46:b9:60:2b:1b:97:ed:83:c3:a6:99:31:
14:d0:56:ba:43:5e:38:0c:de:3b:b1:a1:20:62:45:51:b4:3f:
0b:e8:5b:8b:17:c6:90:9c:d0:ec:76:05:29:cb:34:1f:f3:97:
6d:28:8a:06:5c:31:32:7f:27:82:6f:74:9c:86:32:f5:0c:70:
bc:e4:92:59:ed:e5:13:95:1f:a8:44:1a:5f:80:eb:8d:70:4d:
8a:4c:68:d1:83:ec:21:e9:42:ff:42:ad:9c:7b:da:0e:71:45:
00:97:ce:58:3c:eb:62:d1:7a:f0:9a:df:e9:cf:79:a8:4c:7f:
d6:9a:25:58:74:97:b9:08:7a:0e:4b:af:14:f7:ee:4d:8f:da:
98:b5:16:99:8b:55:04:43:17:da:4a:11:c9:3a:45:99:ba:52:
80:4f:89:4b:fd:e6:a2:da:25:f6:61:f6:5b:e7:e2:28:e4:f6:
a0:2a:cb:ff:5a:1a:d0:23:a6:18:04:2e:fd:f5:de:89:1d:57:
09:b5:bb:6b:0b:9c:b2:a6:3b:79:81:ef:13:9d:3b:6e:e4:8b:
e4:a8:5c:da:9d:c4:54:e8:63:1a:46:55:94:6a:33:4c:88:17:
3b:d4:9e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:20 2025 by rpki-client