Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/XtPC-hLseHu-oNHb7iMp78D7fDc.roa
File: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (raw, json)
Hash identifier: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=
Subject key identifier: 5E:D3:C2:FA:12:EC:78:7B:BE:A0:D1:DB:EE:23:29:EF:C0:FB:7C:37
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 019425FDA1E7F902F67D39FCE81E60AFD34B
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/XtPC-hLseHu-oNHb7iMp78D7fDc.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147173
IP address blocks: 2a0e:da40:100::/40 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a1:e7:f9:02:f6:7d:39:fc:e8:1e:60:af:d3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ed3c2fa12ec787bbea0d1dbee2329efc0fb7c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:8f:85:d6:b9:a9:9a:b3:56:75:77:07:d9:
42:c4:19:67:44:10:78:6d:bd:79:ad:79:c7:8e:e4:
f0:56:6d:81:5d:b1:e1:7b:63:07:87:d7:c3:96:1b:
29:b0:1e:61:2a:2b:0c:f1:4e:f3:78:b7:35:7a:8f:
a0:67:74:93:29:b9:87:6f:97:72:fe:5a:1d:09:c8:
87:b2:f3:62:2f:18:1d:cd:51:92:3a:12:02:12:4c:
77:a2:30:3c:f5:5d:c9:7d:2d:13:f8:85:d6:b2:da:
ac:16:d2:85:66:6d:32:d4:5a:3a:79:49:08:f2:3b:
db:37:26:90:bb:23:21:fc:48:c2:5d:33:da:85:94:
56:f4:d6:c9:22:ed:d7:2e:56:c2:12:6c:ef:34:8e:
b0:f8:aa:7f:08:b7:8e:9e:3a:55:90:da:62:07:46:
85:77:f6:69:aa:73:ea:b5:48:d9:b1:5d:a2:19:b0:
cd:5e:82:ab:e1:ca:df:27:f1:3a:e7:1d:9c:a3:31:
44:20:3f:dd:8b:cd:23:b5:1c:3a:bb:8a:c6:2f:9f:
e7:91:c2:f3:a8:69:9c:f2:c7:4a:63:10:b7:20:b8:
71:98:51:45:78:f3:69:e9:70:3f:d8:12:c7:4e:d3:
3e:c0:22:2d:aa:16:62:fd:71:95:de:52:47:ff:c8:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D3:C2:FA:12:EC:78:7B:BE:A0:D1:DB:EE:23:29:EF:C0:FB:7C:37
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/XtPC-hLseHu-oNHb7iMp78D7fDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:da40:100::/40
Signature Algorithm: sha256WithRSAEncryption
65:d6:4d:36:80:08:38:d4:51:05:94:e6:da:12:b9:c6:fc:df:
3a:cf:a4:e0:88:e9:91:7d:77:b3:06:ce:ff:f7:26:59:e9:9c:
8a:b5:96:66:7b:b6:95:af:d6:22:c6:26:95:5c:f6:0c:0d:12:
5a:3b:00:7c:9a:00:9e:11:8b:95:79:d0:26:85:46:49:a4:bc:
83:96:60:ac:70:02:56:da:f0:81:02:57:fb:23:7b:c7:aa:e6:
47:b3:19:f4:4e:0c:13:5d:77:69:b0:8d:92:f2:dd:13:04:0b:
1f:aa:dd:ba:0e:27:4c:eb:73:16:60:14:76:a6:bc:79:d2:54:
b7:63:35:a2:7a:5f:c3:4b:3e:f8:76:95:f8:55:2d:28:83:2f:
5f:27:8d:47:cc:78:1a:01:bf:ce:92:2f:45:d9:76:cf:40:a5:
3c:a6:6d:5d:fd:53:e5:85:4b:1e:5c:0d:52:a6:06:8c:8c:33:
81:59:68:f0:d2:1a:43:ea:40:27:e8:3a:cd:3d:af:4d:88:c8:
a4:c6:7a:95:6d:80:83:b8:a5:53:54:9e:97:b1:3d:6c:4a:6f:
2d:6c:f7:54:04:bd:24:62:54:c0:74:77:b6:8e:5c:23:d8:0d:
cd:77:5c:a0:23:2e:28:55:79:e5:18:a9:a5:4f:36:cc:86:61:
79:b9:ec:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:51:42 2025 by rpki-client