Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/3X5B_z_CHT9YiArtKHYnEy7SS1U.roa
File: 3X5B_z_CHT9YiArtKHYnEy7SS1U.roa (raw, json)
Hash identifier: tIWfVACal3ac9CgPfVZfL2hoiDFlKQiV1Zl+vw5e/Tk=
Subject key identifier: DD:7E:41:FF:3F:C2:1D:3F:58:88:0A:ED:28:76:27:13:2E:D2:4B:55
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 01942068373D0A62C03F200BCBFC182ED29D
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/3X5B_z_CHT9YiArtKHYnEy7SS1U.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213220
IP address blocks: 2a11:645::/32 maxlen: 32
2a11:b683::/32 maxlen: 32
2a11:b684::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:37:3d:0a:62:c0:3f:20:0b:cb:fc:18:2e:d2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd7e41ff3fc21d3f58880aed287627132ed24b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:e0:6a:13:43:23:44:0a:78:8f:2a:d3:18:
48:85:f8:c5:6c:ed:46:3b:95:db:ac:47:cd:3f:f9:
ff:ac:cc:ea:33:69:66:86:21:9e:4f:ef:e5:7d:46:
08:94:52:7d:94:38:56:51:af:18:fd:5c:30:1c:d4:
ab:bb:2a:99:a9:a1:d7:e2:a9:db:da:7d:fd:a7:24:
c5:53:0e:2a:72:a5:ed:b6:4e:c1:49:48:a0:e5:28:
80:86:2b:6d:19:18:0e:8a:d3:9a:68:7f:7f:38:a9:
af:02:2d:d1:02:88:b2:1d:11:0d:3c:c7:76:19:c5:
7a:67:c5:6e:22:fb:cf:1c:28:cf:45:37:ea:2d:d5:
16:86:ab:b3:54:b0:a5:3c:69:87:50:30:5b:47:94:
96:41:fa:69:77:9b:87:47:a0:2c:7c:32:56:b8:32:
b2:0f:88:df:04:df:8f:ad:d3:5e:16:d5:d5:22:9f:
fa:82:55:ce:32:6d:50:d8:f4:54:ed:3d:b3:d7:44:
f4:2d:bc:f6:f8:3a:db:96:63:41:2f:bc:8a:d8:34:
be:c5:cd:fd:7b:3d:22:72:a2:6e:b1:81:6a:f0:ed:
74:86:64:c7:ab:24:0a:1a:d2:46:17:1f:e7:1a:b9:
d0:aa:3e:0f:91:45:ce:4f:56:d1:d2:3f:43:e1:70:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7E:41:FF:3F:C2:1D:3F:58:88:0A:ED:28:76:27:13:2E:D2:4B:55
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/3X5B_z_CHT9YiArtKHYnEy7SS1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:645::/32
2a11:b683::-2a11:b684:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
11:a4:cc:f4:93:ab:b3:fa:95:da:7f:56:3c:d6:9c:54:97:02:
b2:6d:11:49:f0:90:e6:2d:c4:f5:11:e0:55:3c:f6:d9:8a:e8:
e0:41:b8:6b:25:0c:16:33:88:bf:59:aa:ba:a9:e7:f7:5e:23:
b6:15:7e:9f:82:89:54:a8:3a:91:00:52:29:ca:c5:97:d4:d0:
bd:4c:a6:cf:46:ef:a4:87:25:3c:b1:3a:eb:18:92:34:47:96:
5a:17:3c:71:8c:38:e2:d9:74:d0:bc:1f:ee:8e:18:be:8b:1f:
7b:e9:7a:43:ec:14:ae:34:73:32:28:c7:df:e6:b3:99:f1:19:
bc:57:48:26:e3:db:30:df:01:c7:2d:01:99:a1:eb:1c:84:0a:
ef:8f:6f:23:19:df:4b:f3:cc:c8:e6:be:49:18:58:eb:30:c7:
48:56:8b:ab:55:0a:d1:26:af:f4:e0:42:81:65:a8:45:79:0b:
6f:da:2a:10:0b:fb:4c:c0:bf:86:2d:02:4c:a5:41:3c:00:df:
60:7b:6a:e9:a9:67:b2:86:11:c2:24:67:15:98:ef:93:0a:34:
54:af:a5:2d:55:89:5d:7d:a9:15:c1:4c:f2:06:81:76:db:63:
f0:dc:5a:1b:74:9f:e0:52:9c:af:d5:a8:17:26:b3:25:99:ba:
9f:fd:e2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:58:02 2025 by rpki-client