Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/XgJMBh2hNxFsZKvQI54PTTXI760.roa
File: XgJMBh2hNxFsZKvQI54PTTXI760.roa (raw, json)
Hash identifier: UdEfAkLTD+qMIgaGI74a4ajbejj1YgoNe9s0PRF/Uus=
Subject key identifier: 5E:02:4C:06:1D:A1:37:11:6C:64:AB:D0:23:9E:0F:4D:35:C8:EF:AD
Certificate issuer: /CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
Certificate serial: 01941F8C907ECD37867613D209B724BB5845
Authority key identifier: A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/XgJMBh2hNxFsZKvQI54PTTXI760.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:5a47::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:90:7e:cd:37:86:76:13:d2:09:b7:24:bb:58:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e024c061da137116c64abd0239e0f4d35c8efad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:44:b9:e1:2c:b1:d9:5a:74:6e:ed:97:91:
f7:f8:11:80:6d:60:77:5d:ab:ee:05:9b:10:ed:05:
6f:80:5a:9a:c7:32:1a:26:27:92:bb:29:25:f3:e0:
2c:ef:83:4e:02:28:57:92:0e:bf:3e:60:eb:c4:f3:
0a:5f:ea:0e:e4:c8:3d:ff:0c:c5:41:1e:bc:49:90:
8e:38:3d:8b:c9:6a:09:e7:7f:02:81:14:28:f4:da:
e8:bb:a3:7c:43:54:a4:73:19:7c:10:6e:36:90:6d:
fc:85:b2:9b:2c:36:a3:b5:72:26:82:d2:04:14:50:
59:73:06:3e:81:d2:4c:5e:49:04:23:ca:ff:6b:35:
be:09:1f:da:2b:aa:72:17:49:a1:ac:b5:c1:66:b2:
a2:05:a2:8a:59:b8:c1:93:b8:4f:e3:9f:2f:58:f5:
cc:5b:5e:92:47:aa:d3:2e:40:fc:b9:28:5c:0d:cc:
73:bd:29:3e:4a:08:8f:b3:34:1c:34:22:ea:9a:77:
49:80:e5:5d:97:96:a1:07:28:31:c7:10:66:46:6c:
00:c2:34:4b:6e:87:5d:61:1d:37:0a:e6:4e:8b:15:
78:53:df:b2:b7:14:da:7b:ae:6e:50:5d:7a:02:7f:
a6:f9:65:9d:d2:8f:9e:d0:cc:7e:d3:78:6c:67:d7:
15:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:02:4C:06:1D:A1:37:11:6C:64:AB:D0:23:9E:0F:4D:35:C8:EF:AD
X509v3 Authority Key Identifier:
keyid:A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/XgJMBh2hNxFsZKvQI54PTTXI760.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5a47::/32
Signature Algorithm: sha256WithRSAEncryption
1b:84:92:66:bf:66:15:e8:14:9c:e0:a7:3b:0e:ed:1d:9f:f3:
27:b9:a1:d1:43:aa:35:aa:a9:e2:15:dd:1a:cc:bb:40:43:af:
22:6d:e7:9b:81:af:f5:9a:ad:0c:d7:42:d5:ce:24:66:3e:99:
ac:7b:f7:6b:94:a0:83:af:d1:d4:87:75:72:c0:14:01:8b:a8:
2e:9c:d2:f1:60:08:5b:7b:85:5f:12:51:be:97:50:64:f8:5e:
c7:90:8d:a1:a8:2e:a2:5f:f9:ee:d6:04:41:c3:ac:e8:78:46:
bd:e2:2a:83:96:e9:4c:6a:aa:b4:8d:fa:f4:a1:57:78:7b:bb:
59:d6:e4:81:56:25:0a:45:53:eb:ef:a7:d0:7d:e8:79:b7:55:
a9:ac:93:80:ad:4f:d3:06:be:2d:d0:07:98:d0:4a:89:12:6c:
20:28:3a:ff:d2:57:e6:94:09:d6:7e:77:c6:b3:2c:75:2a:1d:
2b:06:83:a9:fd:ae:e8:a7:38:ef:05:96:1f:93:a7:62:f0:46:
60:fe:0e:40:28:2a:5c:89:c3:e6:ef:77:7c:82:f6:55:32:f3:
1f:0e:b3:67:f1:c8:a3:23:48:0f:11:72:97:66:a7:c1:cc:a7:
1c:ca:ee:6e:b5:22:ec:c2:63:8d:1f:45:37:a4:4c:54:ab:b6:
ad:2c:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:54 2025 by rpki-client