Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/XOraKSxzxrwhqKYes5-js7tbyMM.roa
File: XOraKSxzxrwhqKYes5-js7tbyMM.roa (raw, json)
Hash identifier: WQ2IBOPtnhThz+gIf7Qaas166QmuF5Q3ApP6XXJ39d4=
Subject key identifier: 5C:EA:DA:29:2C:73:C6:BC:21:A8:A6:1E:B3:9F:A3:B3:BB:5B:C8:C3
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019424B27A5672E5A66FC0A538A586E0F864
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/XOraKSxzxrwhqKYes5-js7tbyMM.roa
Signing time: Thu 02 Jan 2025 01:47:43 +0000
ROA not before: Thu 02 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3308
IP address blocks: 2001:2000:1000::/40 maxlen: 40
2001:2010::/28 maxlen: 28
2001:2010::/31 maxlen: 31
2001:2012::/32 maxlen: 32
2001:2092::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:7a:56:72:e5:a6:6f:c0:a5:38:a5:86:e0:f8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Jan 2 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ceada292c73c6bc21a8a61eb39fa3b3bb5bc8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:16:a4:18:30:16:dd:b1:5f:9d:3e:3a:95:
7f:c1:23:13:b8:5b:d5:5a:28:f9:29:04:be:7f:1b:
f1:04:b6:c2:60:08:3f:c9:0d:3d:6c:76:03:fd:26:
09:4a:2e:61:55:84:ed:bc:97:25:fd:65:04:95:11:
39:27:72:42:41:ff:a1:31:19:3e:7e:ff:b1:44:bc:
c8:b9:41:36:00:55:d2:46:45:80:29:95:0c:2a:86:
bc:b6:89:e1:28:82:36:f2:33:d9:a0:7e:3a:12:66:
25:75:b5:c4:43:e2:fc:43:e9:4f:a5:9f:6e:2b:55:
27:92:12:12:df:37:c0:f8:09:73:87:5d:d3:48:51:
cf:5a:b6:20:d2:ab:66:65:06:3c:16:a0:5c:bf:dd:
c2:c7:a0:d1:f1:4c:be:36:46:bd:27:4c:a0:36:79:
47:00:16:90:d7:6e:fe:45:5a:62:f9:80:3a:78:27:
1b:74:3b:60:8e:01:0e:bf:e4:22:ff:3c:5f:05:0a:
e2:72:7c:a1:07:70:ed:ce:8e:85:fc:53:2f:e0:be:
b3:e0:99:70:e5:8c:0e:ff:55:1c:58:dc:fd:01:3b:
2e:64:32:a1:4a:68:90:9a:64:c1:ec:ad:cc:d0:e9:
c7:8a:9b:f6:6a:21:8f:93:94:9d:37:c7:22:c9:0c:
a1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EA:DA:29:2C:73:C6:BC:21:A8:A6:1E:B3:9F:A3:B3:BB:5B:C8:C3
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/XOraKSxzxrwhqKYes5-js7tbyMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:2000:1000::/40
2001:2010::/28
2001:2092::/32
Signature Algorithm: sha256WithRSAEncryption
16:64:4c:18:db:31:1f:f7:93:93:9c:f3:d6:83:c8:1d:11:77:
8f:8f:38:11:de:c6:77:04:af:b5:8e:7c:cf:50:40:32:05:08:
d1:d4:8e:01:bf:83:4e:18:b1:d2:53:97:19:a7:f1:0d:82:e8:
a9:55:d5:ce:7a:88:69:ad:b9:e7:e9:f6:94:b6:9d:e9:48:4f:
4e:a0:85:d9:70:8b:33:ef:40:90:06:ac:99:ce:b4:a1:a1:b9:
50:4d:12:cc:a1:7b:05:20:cf:e6:e1:3f:24:c5:32:db:ee:25:
6e:23:dd:e8:e0:d3:4e:63:ab:75:64:17:4f:69:2c:3c:cf:1f:
69:08:db:5c:83:69:ed:86:d7:ff:56:0a:81:5d:13:24:c0:b9:
9d:4e:17:83:49:cd:23:a9:59:ee:0e:9f:12:b9:d6:fa:59:2b:
e0:0f:08:24:74:d3:46:40:71:1c:09:9b:d9:08:1f:6c:49:d4:
b6:be:dd:44:4a:92:72:d8:3e:c6:b0:e5:c6:d9:8b:b3:2c:a9:
65:0e:89:dd:9f:91:fd:9c:ba:09:cd:96:b3:68:ca:88:2c:3b:
39:d6:2e:96:78:1e:8a:61:60:8a:dd:63:bc:0a:b9:b9:bd:36:
84:db:77:03:48:70:4d:ac:3c:fe:f7:7b:d9:7a:75:5e:83:2b:
4a:37:96:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:51 2025 by rpki-client