Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/xdJCZN2-B2T_CDkACtSXidGS3do.roa
File: xdJCZN2-B2T_CDkACtSXidGS3do.roa (raw, json)
Hash identifier: s0jqLGTlnozuwukxMNuj9trb2i8A2O+cFtDeELQzX9o=
Subject key identifier: C5:D2:42:64:DD:BE:07:64:FF:08:39:00:0A:D4:97:89:D1:92:DD:DA
Certificate issuer: /CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Certificate serial: 01941F8C21DD96CCFEDF723EF59E07611159
Authority key identifier: AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/xdJCZN2-B2T_CDkACtSXidGS3do.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210454
IP address blocks: 2001:67c:7c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:21:dd:96:cc:fe:df:72:3e:f5:9e:07:61:11:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5d24264ddbe0764ff0839000ad49789d192ddda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ef:d7:a7:13:01:c6:3d:42:3e:c4:e0:98:5d:
d5:54:48:4b:71:88:e9:27:7b:4e:3e:4a:da:19:aa:
33:7a:18:46:70:53:89:06:a1:06:6e:e8:d7:20:dc:
3b:4a:87:14:3e:7e:13:50:e1:bf:61:9a:93:6f:9c:
20:cf:8f:be:42:72:24:db:75:9d:b0:a5:bb:5d:b0:
8d:98:06:11:94:1e:dd:b6:e6:c1:a9:57:0e:80:5c:
0b:9f:a3:20:60:df:1c:b7:05:7c:81:49:6a:b9:51:
d8:a3:4b:1b:e8:c4:54:e0:e7:27:6f:70:6e:45:4d:
e3:98:75:f3:cf:98:2f:21:ae:03:6c:85:45:9d:35:
af:8f:07:37:53:46:32:fa:c1:bb:82:8f:54:ac:fa:
ec:74:a6:39:e3:3b:7b:a2:8f:27:86:1e:61:71:9b:
85:00:12:6f:39:5e:c9:63:81:00:66:a6:18:63:1a:
7c:70:88:8a:ff:90:79:1e:21:e6:08:a6:62:bb:30:
f6:f0:2f:68:a2:8e:e8:ac:b9:35:d1:9e:01:d5:c4:
2e:1a:06:5f:bf:f5:d0:7b:a3:a7:26:c8:ac:4f:3c:
6e:b8:3d:88:db:87:ec:9c:2a:4a:d6:c4:5f:61:db:
ad:9a:24:8f:0b:5e:9c:8c:39:05:36:8f:17:65:d7:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D2:42:64:DD:BE:07:64:FF:08:39:00:0A:D4:97:89:D1:92:DD:DA
X509v3 Authority Key Identifier:
keyid:AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/xdJCZN2-B2T_CDkACtSXidGS3do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:7c::/48
Signature Algorithm: sha256WithRSAEncryption
30:fc:75:ac:3c:c8:d2:46:ae:a2:04:72:74:d3:d9:c0:76:65:
95:16:c4:31:f8:26:f9:fe:e0:72:c7:fa:c2:e2:17:c5:77:7c:
5b:f1:d1:4c:6f:74:83:5c:18:36:fb:a8:d4:85:9d:ff:92:95:
71:91:6a:f4:2b:d9:c1:18:5b:08:6b:e8:0f:d0:a0:94:0e:2c:
d5:df:87:c6:89:ce:c1:55:ed:35:1a:e5:d8:bb:0c:61:47:2b:
c9:92:13:a1:8d:b7:cb:c8:80:97:ee:77:25:55:cd:26:ea:98:
44:6a:1c:cb:1c:3e:c8:95:bf:51:82:4d:ba:f7:9f:29:dd:ec:
c1:7e:2e:5c:14:47:b3:21:a7:6f:03:dd:4e:6b:c4:e1:78:59:
60:05:b4:35:e3:10:5c:7f:d2:75:b5:34:f5:ac:d4:3a:e0:14:
79:71:a2:85:80:62:3d:5f:5a:de:c7:b5:7f:40:7f:7a:64:98:
c9:ef:ee:82:ca:89:11:9b:16:72:36:79:29:68:96:d1:bd:db:
19:95:ce:02:9f:cc:58:3e:7f:ab:ea:03:17:b6:42:fb:a7:46:
28:c8:38:8c:70:48:2e:e8:df:db:76:56:d8:1f:e2:02:e9:c6:
a1:46:92:62:06:6b:b8:52:da:e6:6a:86:9e:40:b8:04:b6:c1:
c3:af:6a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:18:52 2025 by rpki-client