Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/nXdBKH3Z9K6uUWXu0Us2PpwsLtc.roa
File: nXdBKH3Z9K6uUWXu0Us2PpwsLtc.roa (raw, json)
Hash identifier: JtGW4cz6ZMFQCBjIaYtRQaBAvmWuc7dVsXpxuLFkDfs=
Subject key identifier: 9D:77:41:28:7D:D9:F4:AE:AE:51:65:EE:D1:4B:36:3E:9C:2C:2E:D7
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018FAEC16C24C0453A8202C4CBA3E68C53FF
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/nXdBKH3Z9K6uUWXu0Us2PpwsLtc.roa
Signing time: Sat 25 May 2024 07:57:42 +0000
ROA not before: Sat 25 May 2024 07:57:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 2a04:a5c0::/32 maxlen: 32
2a04:a5c1::/32 maxlen: 32
2a04:a5c2::/32 maxlen: 32
2a04:a5c3::/32 maxlen: 32
2a04:a5c4::/32 maxlen: 32
2a04:a5c5::/32 maxlen: 32
2a04:a5c6::/32 maxlen: 32
2a04:a5c7::/32 maxlen: 32
2a0e:b140::/32 maxlen: 32
2a0e:b141::/32 maxlen: 32
2a0e:b142::/32 maxlen: 32
2a0e:b143::/32 maxlen: 32
2a0e:b144::/32 maxlen: 32
2a0e:b145::/32 maxlen: 32
2a0e:b146::/32 maxlen: 32
2a0e:b147::/32 maxlen: 32
2a0f:db80::/32 maxlen: 32
2a0f:db81::/32 maxlen: 32
2a0f:db82::/32 maxlen: 32
2a0f:db83::/32 maxlen: 32
2a0f:db84::/32 maxlen: 32
2a0f:db85::/32 maxlen: 32
2a0f:db86::/32 maxlen: 32
2a0f:db87::/32 maxlen: 32
2a10:4700::/31 maxlen: 31
2a10:4702::/31 maxlen: 31
2a10:4704::/31 maxlen: 31
2a10:4706::/31 maxlen: 31
2a11:4b41::/32 maxlen: 32
2a11:4b42::/32 maxlen: 32
2a12:4300::/31 maxlen: 31
2a12:4302::/31 maxlen: 31
2a12:4304::/31 maxlen: 31
2a12:4306::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ae:c1:6c:24:c0:45:3a:82:02:c4:cb:a3:e6:8c:53:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: May 25 07:57:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d7741287dd9f4aeae5165eed14b363e9c2c2ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:31:07:af:68:db:15:b0:35:ae:f7:89:a6:
99:52:a9:0b:80:2a:5b:58:df:57:98:cb:32:c1:bd:
1f:7b:75:af:cd:d6:58:42:a7:ab:ee:6e:35:6c:85:
26:f8:a3:3a:74:ab:b3:16:b0:a3:f7:4b:58:4f:9b:
75:65:31:27:01:ab:5d:27:26:74:87:c7:3f:5b:0a:
bc:05:76:7b:35:16:cd:00:a9:77:d0:43:38:8e:01:
70:d1:76:8d:86:a3:55:e3:ae:e1:a1:f7:e3:26:9a:
42:17:a5:49:42:2f:5d:97:14:d1:68:ff:04:a0:0f:
2b:2b:cf:a9:58:02:55:60:d4:b9:0c:ae:46:f2:6e:
43:13:6c:52:75:21:2c:e3:87:cd:94:7f:3f:68:78:
f1:35:70:a4:cb:e2:3c:56:9c:2b:60:39:34:79:5b:
63:1c:60:57:f5:b9:4d:52:1f:93:e6:f3:cc:39:33:
07:b5:84:26:b0:5b:fd:63:22:bd:0a:49:16:cb:60:
2b:13:84:ad:5f:de:6d:2e:df:41:e8:e7:3b:34:b9:
e7:88:98:20:c6:5b:07:75:1d:20:54:da:22:74:26:
c5:cd:cf:12:c9:a8:35:74:fe:70:4a:25:06:a6:b7:
20:97:91:e4:a7:cc:a6:52:bc:13:1c:14:7a:57:b9:
1f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:77:41:28:7D:D9:F4:AE:AE:51:65:EE:D1:4B:36:3E:9C:2C:2E:D7
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/nXdBKH3Z9K6uUWXu0Us2PpwsLtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:a5c0::/29
2a0e:b140::/29
2a0f:db80::/29
2a10:4700::/29
2a11:4b41::-2a11:4b42:ffff:ffff:ffff:ffff:ffff:ffff
2a12:4300::/29
Signature Algorithm: sha256WithRSAEncryption
49:2d:e1:6d:50:78:0b:c9:ef:ab:28:e6:39:27:4b:bd:e9:19:
66:4d:c9:06:e7:31:d4:ef:1d:4b:3c:1c:34:f2:36:94:0e:51:
07:63:5a:31:14:b6:74:d1:9d:70:9f:34:7c:66:bf:a1:e8:1a:
34:cf:02:9b:f6:0b:73:02:89:a4:2c:15:38:0f:2d:64:4d:0e:
70:d2:f7:cd:ea:8f:3a:80:90:2a:93:d8:ee:05:b5:bd:dd:02:
ca:7c:c8:e5:62:1b:7d:bf:b6:2c:c0:75:10:06:f0:c6:80:7b:
43:cc:14:02:6d:6e:ff:3c:74:63:43:81:ab:94:72:d2:4b:99:
f3:a2:07:b2:90:3d:e4:f0:97:40:b6:7c:a0:23:6d:e4:52:53:
77:2a:7b:e5:3b:90:af:3a:aa:13:22:16:41:65:6e:fa:94:db:
44:51:84:64:49:29:b2:0f:9a:48:3d:fd:b3:34:ec:a9:d5:b2:
84:d5:9a:88:f3:fe:70:a3:bf:21:79:2d:f7:ff:86:15:04:6a:
bf:5e:f4:92:e2:c7:fd:2c:1b:e7:e6:17:8b:87:09:32:17:56:
ae:72:f9:a2:47:47:c5:dc:06:e3:ad:5f:83:ea:f6:52:3d:56:
0c:4d:2d:ae:e4:b4:4a:81:55:c9:c1:9d:72:b3:de:f2:56:b0:
3e:9c:60:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:51 2025 by rpki-client