Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/xqY3RtKWZFJMXEjgvJnGFaSlu5M.roa
File: xqY3RtKWZFJMXEjgvJnGFaSlu5M.roa (raw, json)
Hash identifier: qTWeGHggnJxcu4k7RtTZu6oOvgnr9Oj5VqfFgalp1Vg=
Subject key identifier: C6:A6:37:46:D2:96:64:52:4C:5C:48:E0:BC:99:C6:15:A4:A5:BB:93
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369F13CBAB808829F4017383425B42B
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/xqY3RtKWZFJMXEjgvJnGFaSlu5M.roa
Signing time: Wed 01 Jan 2025 19:48:53 +0000
ROA not before: Wed 01 Jan 2025 19:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214549
IP address blocks: 2a0f:7805::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f1:3c:ba:b8:08:82:9f:40:17:38:34:25:b4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6a63746d29664524c5c48e0bc99c615a4a5bb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:88:07:30:03:19:91:04:52:94:a1:a5:5b:
57:7a:5f:82:c7:ee:ea:3a:5b:8c:3c:b6:30:94:37:
a1:2b:f7:2d:f7:59:87:0a:2c:fe:c5:56:93:dc:4a:
a4:68:b3:1f:08:f9:17:af:28:6b:d3:3c:69:62:03:
24:03:e7:ca:eb:bd:be:f3:ff:59:ec:b1:41:4b:e1:
4c:03:cd:a2:42:16:c3:36:f2:33:da:96:a4:e6:49:
66:26:1b:81:ab:ca:51:c9:23:c7:69:dd:91:c7:fd:
00:99:44:4b:75:83:0b:2d:90:61:60:91:d5:d0:8a:
5c:19:00:58:8f:a8:53:37:62:62:20:c9:67:12:80:
26:08:a5:c4:1e:4d:af:0d:74:68:a7:55:da:e0:8f:
fb:ea:1e:ff:e9:56:9e:75:0f:48:e0:9e:18:de:b2:
cc:2a:10:46:36:0d:c3:e0:25:2e:8c:b9:1d:e8:0f:
bb:f5:6a:4f:67:f2:0d:90:7c:1a:17:4c:94:56:1f:
3b:b8:c4:99:49:8b:a2:87:f9:9c:28:b6:a5:0c:fd:
59:6c:1c:a7:ba:c7:14:65:59:ba:4b:1a:82:12:35:
2f:54:0c:95:50:32:c4:7b:54:86:1e:cc:0b:fc:bd:
a1:4b:0a:86:7e:e0:db:3f:e3:06:4c:ac:c9:f6:34:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A6:37:46:D2:96:64:52:4C:5C:48:E0:BC:99:C6:15:A4:A5:BB:93
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/xqY3RtKWZFJMXEjgvJnGFaSlu5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7805::/32
Signature Algorithm: sha256WithRSAEncryption
44:0b:98:48:6a:22:2b:a3:05:cc:e1:77:7f:23:e3:82:a0:59:
c2:de:92:74:0a:f6:a8:0b:21:15:88:00:8b:ed:ae:35:d1:bb:
de:a7:f3:16:0f:bf:23:61:1d:7f:18:9e:e5:c1:ae:2a:b8:43:
63:e0:58:4d:fa:c8:39:0c:ec:84:d4:2f:7f:61:e4:0f:14:ea:
81:d4:d5:14:8c:1d:09:40:a5:d8:42:ad:62:cc:f3:49:77:29:
43:1a:11:43:3b:4e:65:2f:b4:80:cb:cc:cf:c2:fd:a3:b9:09:
79:0b:82:a0:a0:d2:d2:6a:68:91:8c:03:ea:37:fe:62:17:e6:
23:8c:9c:e7:e5:76:5c:56:e5:b1:ca:6c:80:a4:79:e7:c9:2d:
8e:d7:89:12:03:67:95:79:a6:54:be:1e:dd:f2:bd:45:a2:b8:
ae:c1:65:36:8e:7f:6e:d9:78:8d:4f:96:cc:41:40:ad:f4:b4:
e4:b3:cc:97:86:5e:20:eb:df:74:f8:90:73:e4:af:00:00:77:
32:99:07:9a:64:93:18:14:f9:06:fc:4a:87:e0:c5:c7:7e:d4:
52:be:b9:cc:d4:52:4a:2b:21:a2:1d:48:4d:b5:7d:3c:0f:07:
da:6c:55:9f:9d:a0:d7:ed:88:14:34:61:d6:9c:26:f0:04:9c:
c4:b1:b6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:11 2025 by rpki-client