Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/xRhvDR9aVN-YUXHGm03QOx4uLoE.roa
File: xRhvDR9aVN-YUXHGm03QOx4uLoE.roa (raw, json)
Hash identifier: fCiE2SEDxxaXY61eaI8JHgmfrHPEqM7kXgALwekex78=
Subject key identifier: C5:18:6F:0D:1F:5A:54:DF:98:51:71:C6:9B:4D:D0:3B:1E:2E:2E:81
Certificate issuer: /CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Certificate serial: 0192C34B7C22762444BAB850B7D520ADD07E
Authority key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/xRhvDR9aVN-YUXHGm03QOx4uLoE.roa
Signing time: Fri 25 Oct 2024 10:49:17 +0000
ROA not before: Fri 25 Oct 2024 10:49:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0c:7b81::/32 maxlen: 32
2a0c:7b83::/32 maxlen: 32
2a0c:7b85::/32 maxlen: 32
2a0c:7b87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c3:4b:7c:22:76:24:44:ba:b8:50:b7:d5:20:ad:d0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Validity
Not Before: Oct 25 10:49:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5186f0d1f5a54df985171c69b4dd03b1e2e2e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:b2:4f:75:e2:c4:e3:f7:52:4d:e2:db:c2:
1a:12:c4:91:1b:fc:55:c4:71:38:e5:7b:b2:9f:e7:
e5:60:f1:5e:05:fd:4a:93:af:f0:b9:d9:49:07:4c:
81:f3:30:b1:7b:0b:4f:53:c6:24:b5:0e:05:e9:79:
ab:05:3a:d4:3b:0b:fd:bd:7f:c2:8d:81:58:0f:bc:
e7:4c:cf:3a:5c:7e:64:e7:40:20:dd:da:da:9d:d8:
7d:63:f9:bb:7b:bf:c3:16:88:1b:35:43:46:86:5b:
7b:5e:a4:f0:60:4f:7f:15:cc:4c:79:41:a5:c3:df:
d4:4e:44:0b:68:42:4d:a2:7d:d3:ae:4a:2b:e9:81:
c6:f2:03:79:98:26:d9:3c:9d:27:1d:c8:fc:e8:d7:
2a:19:5e:cf:15:83:c0:74:db:15:5a:2c:65:2e:2c:
8e:55:8f:bf:d5:8b:78:97:19:19:0b:8a:d8:a9:a6:
7a:2c:39:84:cb:dd:02:87:22:31:80:53:59:d7:55:
30:23:18:51:d3:83:a0:ff:a5:9e:3a:00:6e:2a:25:
b5:59:05:c7:f3:66:0a:83:8e:24:1d:96:b4:dd:41:
52:15:07:50:bf:63:e6:0c:36:da:55:b3:2b:14:2d:
37:74:71:32:1b:7b:d2:0d:78:ac:41:df:26:3b:8e:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:18:6F:0D:1F:5A:54:DF:98:51:71:C6:9B:4D:D0:3B:1E:2E:2E:81
X509v3 Authority Key Identifier:
keyid:F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/xRhvDR9aVN-YUXHGm03QOx4uLoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7b81::/32
2a0c:7b83::/32
2a0c:7b85::/32
2a0c:7b87::/32
Signature Algorithm: sha256WithRSAEncryption
78:a0:ec:40:a8:05:df:e7:86:ab:bd:68:3c:ea:b4:04:3c:b0:
83:cb:91:30:a0:7a:84:cd:28:46:aa:10:24:02:be:4c:8b:6b:
9d:bc:92:db:22:b8:80:77:90:49:76:f9:e5:49:5e:59:ff:25:
5b:dd:76:71:8b:4e:2d:41:56:c4:c0:1a:66:98:11:cd:ae:67:
c3:51:c9:d9:09:7a:b8:33:ca:df:e1:f5:23:7b:1f:af:da:2f:
ee:2d:02:70:4a:d0:b1:a7:dd:7e:bb:86:4a:91:e9:7a:49:b9:
d9:4d:49:fc:7a:ef:b6:3b:2d:70:fe:54:b5:97:51:57:47:09:
a7:67:2f:56:09:03:05:30:49:c7:71:ab:9b:b6:45:60:d8:11:
86:45:44:93:31:9c:87:9a:fc:17:8f:32:33:0c:22:ac:8e:ab:
c6:bc:28:83:55:c5:b8:e1:3f:a4:46:cb:b4:7d:e1:96:76:ae:
ad:b3:bd:27:f5:96:d5:67:51:1c:cb:fe:b4:31:1e:9e:91:85:
50:d6:c1:a0:33:cf:53:83:f9:2c:f0:ff:b5:ce:5b:f9:42:e6:
34:9c:2e:22:b2:10:10:3c:04:d7:ba:70:aa:45:d1:91:70:26:
4d:7f:fc:3e:aa:f4:42:9e:cd:8a:b1:04:53:53:e1:54:d2:ff:
75:71:5e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:09 2025 by rpki-client