Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Xe_sGRJry-TLxaphZtVQXmE4yDU.roa
File: Xe_sGRJry-TLxaphZtVQXmE4yDU.roa (raw, json)
Hash identifier: W8CGp2ya1wHpu1Khr8VfGg6VPmkcE1ZjDOli26gf0rA=
Subject key identifier: 5D:EF:EC:19:12:6B:CB:E4:CB:C5:AA:61:66:D5:50:5E:61:38:C8:35
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018571D7BF2B4045294741A8E2935281F74F
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Xe_sGRJry-TLxaphZtVQXmE4yDU.roa
Signing time: Mon 02 Jan 2023 09:37:22 +0000
ROA not before: Mon 02 Jan 2023 09:37:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39686
IP address blocks: 2a07:3500:11e0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:bf:2b:40:45:29:47:41:a8:e2:93:52:81:f7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jan 2 09:37:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5defec19126bcbe4cbc5aa6166d5505e6138c835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:98:af:4b:5f:9f:db:ea:4c:9b:29:92:28:
96:a9:f2:74:d9:3c:a0:34:30:e6:87:ad:3a:9e:23:
93:75:d6:bc:5e:c0:b6:af:4f:a2:6a:d6:b4:0f:98:
d4:f4:78:1c:8d:5b:60:a5:08:b9:cb:c1:c6:51:95:
0d:b7:e3:68:1a:21:d0:da:70:39:01:7e:e6:71:01:
d9:03:e8:15:4d:5e:31:59:52:ea:49:45:9c:2a:5f:
3e:ef:6a:bb:3e:a3:1c:10:33:85:28:0d:5c:d1:95:
de:2e:5c:c2:67:69:ce:43:1a:52:9b:7b:72:23:78:
6c:23:79:39:f2:2e:28:c2:48:e7:4b:dd:55:a9:49:
14:34:4a:39:86:2b:27:d0:67:c2:22:50:f9:b3:56:
e1:8c:ae:03:64:03:3d:0e:7e:ce:ac:3b:75:57:49:
49:50:9e:89:34:2f:63:60:3f:52:e1:04:31:ba:05:
06:3e:7c:b9:27:42:71:e8:c5:fd:ff:f4:fe:ac:fd:
f4:68:89:13:56:c3:19:be:a4:7d:10:7c:35:0c:7c:
78:a7:8b:88:7d:63:cb:ba:ab:c2:61:5f:ba:3d:6d:
9e:9e:b1:f0:0b:30:c2:0b:37:4f:d7:10:15:2b:7a:
7a:e0:58:37:15:23:3f:f2:3b:9f:dc:1e:b2:59:3a:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EF:EC:19:12:6B:CB:E4:CB:C5:AA:61:66:D5:50:5E:61:38:C8:35
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/Xe_sGRJry-TLxaphZtVQXmE4yDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:11e0::/48
Signature Algorithm: sha256WithRSAEncryption
2e:3c:fc:05:e2:a8:77:7a:16:91:b4:44:bc:1f:39:e7:9c:d1:
4c:50:68:6f:ca:61:6b:43:ff:c7:38:05:a2:0a:d2:be:2d:b5:
a0:52:0b:1f:bd:c2:7a:84:17:0e:32:2a:a7:c2:d8:91:53:1c:
3d:c7:38:b0:d2:8f:cb:cd:e2:b6:c2:f3:e0:f8:8e:d9:c5:72:
dc:df:d6:35:e8:d3:4d:b4:84:cf:a4:4b:3a:7e:67:37:d0:b3:
8d:3e:8d:c8:ae:c3:75:36:b0:d5:52:1d:dc:ef:da:6f:ba:78:
36:27:f8:00:a5:f4:18:3b:2b:e7:ad:34:9b:9f:08:19:64:af:
59:9a:65:28:9d:04:54:9b:8a:a6:ce:45:bd:aa:3a:68:8a:9f:
da:cd:8b:50:5b:cd:d8:ac:ef:ac:1c:03:c2:d1:3c:a3:43:33:
0b:c8:3e:09:0d:d4:a5:ec:9d:43:40:82:99:46:f5:36:05:8d:
13:7b:80:f6:bb:c8:ac:2a:17:68:65:cb:b4:6b:be:83:3e:f5:
f6:bf:40:99:ac:e1:7a:4b:0a:31:e6:59:32:24:1f:76:c4:d2:
35:34:dc:f9:04:2d:9a:8c:0f:1a:df:46:df:82:23:dd:f1:75:
2f:c4:3e:55:77:35:2d:8e:17:cc:e0:1f:bd:1d:8e:23:bd:c9:
c2:0d:0b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:20 2025 by rpki-client