Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/x4O9V3tAmzZjxZHKXXKdfDf1aNY.roa
File: x4O9V3tAmzZjxZHKXXKdfDf1aNY.roa (raw, json)
Hash identifier: F4vKg2iqkGQkTay3EP9VXjOjSKkwkZAg3JC6CDhOzYc=
Subject key identifier: C7:83:BD:57:7B:40:9B:36:63:C5:91:CA:5D:72:9D:7C:37:F5:68:D6
Certificate issuer: /CN=593897174f967490dbf6189d479df2c9371bf404
Certificate serial: 019422FB574AE99A601BD4512D3E6D573300
Authority key identifier: 59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/x4O9V3tAmzZjxZHKXXKdfDf1aNY.roa
Signing time: Wed 01 Jan 2025 17:48:04 +0000
ROA not before: Wed 01 Jan 2025 17:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6825
IP address blocks: 2a05:bc1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:57:4a:e9:9a:60:1b:d4:51:2d:3e:6d:57:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=593897174f967490dbf6189d479df2c9371bf404
Validity
Not Before: Jan 1 17:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c783bd577b409b3663c591ca5d729d7c37f568d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:22:8e:48:71:ea:55:aa:a6:40:ef:da:11:
8d:9e:d1:e2:e2:17:51:f9:0c:ab:89:42:93:35:d6:
66:9a:1f:9c:9b:b1:f1:e3:65:12:4a:a1:41:92:16:
b9:0c:38:db:a0:fb:f9:f0:b5:ab:1e:09:bd:2d:09:
a9:e9:fe:3f:58:69:59:74:e9:2a:ff:b7:d6:64:0e:
1b:03:c2:20:fc:ba:b2:46:f1:52:45:33:02:09:94:
e8:76:d7:fb:c7:5a:2f:ec:d9:ab:75:b6:e8:cc:6a:
55:cf:88:ed:29:ae:5f:19:82:c5:fb:87:9e:67:98:
8e:9f:58:4e:da:d6:42:3d:8f:3b:89:24:5f:1a:d5:
19:3b:0c:3b:46:4f:1b:d8:56:94:8b:44:36:0b:1b:
1c:92:d2:40:4f:cc:ae:be:08:6b:b8:f1:ef:77:ba:
cd:0a:27:5f:b3:10:fc:33:59:9c:6f:be:93:43:08:
d6:a2:18:dc:35:b6:8b:e5:95:1e:0b:a6:a3:dc:51:
e1:c7:4a:ee:f2:3f:c6:09:0e:d4:67:e4:8f:00:f4:
60:b0:58:73:b3:b8:32:19:c8:5b:4c:51:de:f3:97:
f4:e0:ca:09:3b:1c:75:cb:8e:bc:b6:2c:83:7d:f9:
17:81:98:ac:83:c6:cc:2e:9d:79:ac:4e:45:33:dc:
10:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:83:BD:57:7B:40:9B:36:63:C5:91:CA:5D:72:9D:7C:37:F5:68:D6
X509v3 Authority Key Identifier:
keyid:59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/x4O9V3tAmzZjxZHKXXKdfDf1aNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:bc1::/48
Signature Algorithm: sha256WithRSAEncryption
12:23:5c:bf:bb:01:c0:81:87:02:cd:6f:37:85:ec:06:64:7b:
c8:94:04:95:58:43:bb:ba:ec:3f:81:79:40:15:73:8d:c3:3c:
c3:e7:97:9c:43:ee:80:30:dc:a7:02:d6:59:44:d9:b9:22:be:
ac:ed:b2:50:c2:f8:55:0f:5d:a4:ec:22:ee:35:b9:4d:68:09:
6c:bb:dc:3a:13:f1:ba:34:9a:a2:20:c7:4f:8e:5b:84:38:d5:
81:8d:99:af:86:9d:72:6e:99:07:43:9f:26:bb:c8:51:dc:e5:
55:20:6f:c0:5d:27:02:d4:08:02:1b:a2:29:d3:36:6b:35:dd:
1e:5d:3f:29:4f:05:47:25:2e:23:e8:e8:f8:5b:09:73:d1:07:
66:6d:ea:04:0a:62:df:ad:70:03:e4:bc:63:fa:10:a1:fb:a4:
11:71:f3:73:ca:61:6b:5c:69:73:24:88:b4:96:92:4f:ac:d0:
cf:0d:48:9f:09:35:46:06:1b:12:81:06:96:0c:08:bf:29:4f:
b5:f3:33:e7:02:e1:fe:55:1f:bb:03:b2:98:06:c0:3f:a4:d0:
22:e5:5b:98:e0:92:1e:de:4d:f5:6b:13:eb:34:75:2a:10:05:
0d:54:a6:86:e3:44:7c:89:1a:c4:64:ad:6b:e5:84:b4:7b:f3:
91:7d:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:35:44 2025 by rpki-client