Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/XjYbgGRK9V_PFyDlq3G6V2Wxzsw.roa
File: XjYbgGRK9V_PFyDlq3G6V2Wxzsw.roa (raw, json)
Hash identifier: fWbd0EX3ziv/6uF5wR8i+XeMR7zd9h8m0bOvPg7RJi0=
Subject key identifier: 5E:36:1B:80:64:4A:F5:5F:CF:17:20:E5:AB:71:BA:57:65:B1:CE:CC
Certificate issuer: /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial: 0194214394AFD4AE808D3344E67370029235
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/XjYbgGRK9V_PFyDlq3G6V2Wxzsw.roa
Signing time: Wed 01 Jan 2025 09:47:44 +0000
ROA not before: Wed 01 Jan 2025 09:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400587
IP address blocks: 2a07:e04::/36 maxlen: 36
2a07:e05::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:94:af:d4:ae:80:8d:33:44:e6:73:70:02:92:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Validity
Not Before: Jan 1 09:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e361b80644af55fcf1720e5ab71ba5765b1cecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:63:b9:fc:13:eb:c3:95:4d:d0:7c:6e:a2:
a5:b6:1a:04:c9:5d:fc:14:49:5b:f1:1a:f8:f8:3d:
45:15:bd:a8:86:4e:1c:f3:60:a5:6c:ed:55:76:f1:
be:2d:b3:2d:7b:68:09:07:ec:7c:5e:90:eb:3d:f0:
20:56:6a:eb:69:b4:2f:56:0f:35:7d:ac:d6:78:d8:
78:bf:45:b3:00:ba:9a:09:7d:e7:70:5c:7c:ee:38:
aa:dd:91:83:f3:8c:7e:b6:9e:6d:1c:7b:c2:ac:4e:
93:a2:54:b5:bf:9d:9c:88:68:df:6d:5a:7b:4b:e6:
cc:76:a1:60:d1:2e:06:b0:5e:4d:9f:11:a8:f8:e2:
9c:f3:a8:45:0d:fb:36:02:15:81:59:5e:8c:ef:3e:
89:e7:36:a1:93:d7:5c:8a:ab:d0:75:1d:76:40:3d:
21:97:64:01:17:0e:82:ea:17:f6:a8:4a:f4:56:39:
1f:b4:e5:d9:76:9b:06:14:28:9b:19:c7:05:96:a6:
39:04:1e:71:1c:f7:a9:2d:13:ba:8f:08:e5:77:21:
4b:51:cb:94:c8:16:e8:23:c4:d3:f6:53:86:0a:a2:
2b:f3:45:56:93:8e:01:2d:0c:6d:48:2e:8f:b6:3f:
2c:e6:b9:43:43:43:85:e6:02:77:2d:35:fe:14:6a:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:36:1B:80:64:4A:F5:5F:CF:17:20:E5:AB:71:BA:57:65:B1:CE:CC
X509v3 Authority Key Identifier:
keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/XjYbgGRK9V_PFyDlq3G6V2Wxzsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e04::/36
2a07:e05::/36
Signature Algorithm: sha256WithRSAEncryption
79:82:ce:d1:14:54:f2:0a:d6:34:1a:08:b9:53:e7:d1:58:23:
b3:31:39:c7:dd:b3:8e:0e:d3:53:2b:d8:24:25:11:68:c8:66:
9a:1b:52:cf:10:04:5c:90:83:31:f7:88:09:ee:55:44:06:06:
c6:fc:73:c6:8e:fd:53:2e:2d:21:c6:5c:be:29:ca:b1:3a:39:
39:bf:5e:06:3b:ad:39:16:7b:04:1c:2b:4d:e2:0b:45:c1:49:
99:5f:9e:b0:af:bb:ec:b2:9f:df:57:da:12:de:52:a4:36:47:
8d:1e:d7:0c:eb:e7:a3:87:64:7b:90:7a:66:af:f8:ad:8d:cd:
3c:fb:78:20:27:0d:93:f8:9a:3e:7e:e0:15:1c:49:9a:21:43:
e9:fa:57:25:80:8e:ee:97:2e:38:16:ac:59:f6:e2:72:20:01:
61:55:2b:78:18:dd:8d:d1:dc:48:c8:19:07:8b:ee:c0:62:fe:
0b:92:63:2c:6f:ef:e5:0c:6b:72:3c:a1:1c:4f:ff:29:69:6b:
df:14:bd:8d:7f:52:96:3a:f2:b7:28:f0:87:73:f2:b3:b8:4f:
75:64:d6:06:e1:3b:9e:08:b4:76:6f:37:38:37:ce:89:a8:6d:
0c:5b:c5:ef:f7:e2:b5:90:76:dc:e9:c9:82:7a:30:52:a0:be:
be:83:80:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:17 2025 by rpki-client