Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/XtH0htLAKG6Q5dcfnWZEaEHDokg.roa
File: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (raw, json)
Hash identifier: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=
Subject key identifier: 5E:D1:F4:86:D2:C0:28:6E:90:E5:D7:1F:9D:66:44:68:41:C3:A2:48
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 01942745C66E5144419A81F7B73713A0B395
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/XtH0htLAKG6Q5dcfnWZEaEHDokg.roa
Signing time: Thu 02 Jan 2025 13:47:51 +0000
ROA not before: Thu 02 Jan 2025 13:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215568
IP address blocks: 2a10:3580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:c6:6e:51:44:41:9a:81:f7:b7:37:13:a0:b3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Jan 2 13:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ed1f486d2c0286e90e5d71f9d66446841c3a248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:f8:4c:83:a6:f7:5a:87:ef:38:82:04:0c:
aa:29:31:59:f9:24:33:c4:f7:16:ec:a4:04:79:07:
dd:41:e7:7c:d6:7a:05:b2:31:5e:45:61:8c:72:3d:
ec:60:ff:c5:d8:e6:1d:6c:a0:74:dd:30:4d:00:85:
24:fb:6e:57:1b:d6:eb:ee:5a:ec:79:24:58:02:f5:
9d:7b:5e:9c:66:c3:55:8d:37:ae:3b:61:75:35:61:
b2:1b:4e:52:09:7e:5f:bd:a8:49:85:7d:2e:9f:7a:
71:07:cb:78:62:ff:66:6e:b6:7f:37:29:e7:d9:7e:
b3:7f:81:91:19:62:5d:13:dc:52:4b:cb:ab:0c:56:
d9:58:bd:90:37:b2:ec:d6:ea:bb:10:40:07:a1:71:
21:8a:51:b8:b6:db:e6:44:bd:cc:7b:cb:a6:93:eb:
ad:fd:80:87:35:d2:9d:f9:42:b9:ed:2a:3d:36:3d:
2e:a9:b5:57:5a:eb:cc:cc:c0:e5:42:f9:04:b4:a8:
21:fc:55:c9:0a:59:f7:ec:45:0d:fb:82:ff:27:a0:
2d:5e:72:ed:b2:4b:33:67:4d:39:d5:2f:9f:f5:36:
10:5d:e9:fc:f2:55:b9:62:81:4e:a7:5f:05:88:54:
a6:97:fa:29:37:ea:9a:ba:1e:db:69:d5:c8:5f:42:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D1:F4:86:D2:C0:28:6E:90:E5:D7:1F:9D:66:44:68:41:C3:A2:48
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/XtH0htLAKG6Q5dcfnWZEaEHDokg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3580::/29
Signature Algorithm: sha256WithRSAEncryption
5a:e2:36:ba:4c:30:79:6f:cd:3f:7d:8e:1f:c4:96:90:40:11:
7c:b7:be:cd:bb:9d:b9:5c:29:0d:49:ce:76:dd:34:11:9a:16:
e4:dd:f5:df:cf:59:b2:cf:c0:ea:4f:9b:8d:9f:06:ab:9b:a8:
ae:02:18:88:60:69:12:66:18:45:65:3a:3d:56:ec:69:2d:db:
ba:d8:91:8e:5d:0a:05:56:ba:31:1c:6f:b8:ef:43:5d:e2:1e:
c6:31:f0:1a:39:2e:bb:f0:a5:9f:e5:cd:17:c8:09:3d:b6:b5:
6c:81:b5:93:ff:2c:37:4f:96:98:9b:a0:19:46:25:08:a6:68:
a5:e2:d3:1d:42:43:8a:83:1c:3d:c1:af:57:bc:fa:cf:4f:1b:
d6:d5:22:a3:24:36:ca:45:ac:64:d2:b7:51:b3:d4:e3:22:d8:
f5:09:b1:c4:c9:0b:a6:42:01:e8:ab:26:0d:84:aa:47:26:40:
31:ad:d3:65:20:26:70:e9:45:02:38:83:9b:e5:3b:d3:54:0b:
82:65:0d:fa:64:c7:5b:2d:b3:a0:d2:05:65:35:dd:91:8b:29:
dd:dd:e8:d4:1f:c7:4e:cd:04:19:8f:c1:72:60:e8:34:80:63:
b0:35:e8:83:82:70:10:df:b6:74:e5:ef:51:4a:af:92:18:e7:
40:00:26:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:58 2025 by rpki-client