Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/XnUGRcKQ1QjwVPMHWlTU3ttR-1Q.roa
File: XnUGRcKQ1QjwVPMHWlTU3ttR-1Q.roa (raw, json)
Hash identifier: x9C1r40DphD4ncetArBuOXIje8ycmsCbdCyI1Ndy7ks=
Subject key identifier: 5E:75:06:45:C2:90:D5:08:F0:54:F3:07:5A:54:D4:DE:DB:51:FB:54
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194266BF6C1AD82605073542EE2889468AD
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/XnUGRcKQ1QjwVPMHWlTU3ttR-1Q.roa
Signing time: Thu 02 Jan 2025 09:49:57 +0000
ROA not before: Thu 02 Jan 2025 09:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216223
IP address blocks: 2a0f:5707:ab40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f6:c1:ad:82:60:50:73:54:2e:e2:88:94:68:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 09:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e750645c290d508f054f3075a54d4dedb51fb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:88:44:db:c5:69:fc:ba:76:bd:85:b2:bb:
d5:c3:bc:ee:b0:9a:17:69:cf:18:64:64:d5:11:94:
d3:36:98:61:b4:69:92:e7:16:95:38:d3:0e:cd:23:
e1:3b:15:3b:07:61:87:1e:cd:60:8c:a3:49:e4:27:
3c:d5:3c:18:93:a6:bf:c5:50:a3:a1:6d:d1:bb:ea:
7b:ab:1e:44:43:14:8f:f3:24:9e:3e:ae:ef:f3:77:
38:d8:87:1d:ed:d0:99:03:e6:cc:70:1e:be:d2:fc:
91:a4:94:3a:ea:10:79:58:f8:1c:a0:59:a7:b5:05:
a8:c3:df:11:eb:c1:9e:df:ea:46:d1:05:55:06:ae:
84:27:91:e3:21:44:ea:6a:d1:36:67:62:df:71:e8:
11:73:14:c8:7f:ce:46:6d:73:5b:5c:41:97:bd:ea:
83:cb:ea:d2:4e:56:4c:3c:f9:33:23:df:c5:eb:81:
a4:b6:e6:34:c4:3c:fb:c9:94:cd:c9:c6:8c:28:95:
e5:ab:27:10:a7:9f:de:c6:c8:76:da:4d:62:a5:ca:
d9:12:bc:1e:31:67:48:bc:d0:62:ec:bd:80:17:a3:
d8:64:3c:74:06:41:be:d9:3f:fd:d5:27:7a:fd:5c:
1f:8c:42:17:6e:ce:96:d0:29:35:e9:19:19:9d:00:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:75:06:45:C2:90:D5:08:F0:54:F3:07:5A:54:D4:DE:DB:51:FB:54
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/XnUGRcKQ1QjwVPMHWlTU3ttR-1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:ab40::/44
Signature Algorithm: sha256WithRSAEncryption
15:ab:e0:b6:55:57:ea:71:71:66:ea:6d:4e:c6:7a:93:58:0d:
f4:64:df:f6:b3:1b:cd:4d:b5:f6:8a:45:cf:8b:c2:4c:5b:da:
9c:45:ab:3d:6e:e3:5d:8d:c8:b8:1f:93:11:95:fc:b1:15:24:
40:4a:b9:7b:72:ea:9d:c7:37:b1:13:ef:bd:b1:37:53:0d:59:
b7:53:26:64:ec:22:e9:e7:c5:46:97:44:47:ca:4e:bd:e0:bf:
41:7c:e7:ed:77:23:c0:a4:c1:4c:31:ee:ce:06:06:a8:04:ff:
b1:67:f3:cc:51:3a:b1:84:63:f8:12:ef:f5:fe:5b:92:8e:95:
54:c7:a2:36:8e:ea:24:71:d7:89:38:8f:fd:95:44:8a:db:c1:
5e:74:89:df:34:20:74:b0:1b:66:7e:02:70:dc:93:bb:99:1e:
a0:8e:7e:4c:01:50:ed:4f:5f:3b:c0:23:c8:03:2a:32:8f:f0:
62:99:9f:76:43:c5:9e:a1:9c:19:e1:1d:ae:99:71:cb:79:65:
52:15:ec:a2:ce:f9:7b:d9:0b:29:64:24:27:42:65:87:67:b4:
3e:53:a2:b4:f2:1d:49:59:31:78:be:66:5f:57:53:26:a5:80:
b5:03:f3:7f:bb:19:93:d8:a6:24:43:72:06:1d:73:7c:f9:42:
fd:05:1e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:09:27 2025 by rpki-client