Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/aXl3woCDTFV8KOUCaI37GD38yqY.roa
File: aXl3woCDTFV8KOUCaI37GD38yqY.roa (raw, json)
Hash identifier: j3sOWjoASI5TGptHDgux4OEToltLJUpmg1hcSPVVS80=
Subject key identifier: 69:79:77:C2:80:83:4C:55:7C:28:E5:02:68:8D:FB:18:3D:FC:CA:A6
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 019424459C000DCC58A2402389106CCC8416
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/aXl3woCDTFV8KOUCaI37GD38yqY.roa
Signing time: Wed 01 Jan 2025 23:48:49 +0000
ROA not before: Wed 01 Jan 2025 23:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216395
IP address blocks: 2a05:4140:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9c:00:0d:cc:58:a2:40:23:89:10:6c:cc:84:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 23:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=697977c280834c557c28e502688dfb183dfccaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:0d:de:d8:6c:b7:89:c0:db:c3:97:81:53:
e6:cd:d6:a4:4b:bd:42:c0:71:0c:d0:33:6f:09:e3:
23:56:17:c8:c0:90:cc:50:90:2e:f8:6c:b9:b9:81:
7f:30:ba:45:8e:2e:2d:a3:e0:e1:dd:c3:02:67:47:
29:6a:c1:3e:44:29:6c:ef:83:8a:df:9b:56:99:d5:
cc:e6:26:e1:9a:8a:b8:ee:ab:b8:da:d6:83:be:e3:
ed:30:2d:7d:c9:ea:c6:81:0d:1d:e3:1a:f0:4d:85:
3e:e4:13:24:21:30:e5:ba:9d:d5:a3:d3:80:e5:9b:
b9:bd:76:95:2b:d4:68:ee:de:df:3e:6b:6a:5a:86:
f5:3e:ee:da:51:d6:85:8f:27:50:f3:14:0c:76:19:
8b:dc:27:d9:08:e2:be:04:08:2e:d2:b5:41:fe:51:
4c:52:5b:15:aa:2f:a3:fc:f2:1c:78:b7:a1:a4:f7:
27:de:d9:62:78:81:9c:41:a9:76:e0:85:20:37:59:
bb:5f:f7:3a:f7:79:31:67:e9:fa:29:58:8a:82:34:
54:41:1c:39:a8:bb:22:f7:ce:81:a4:69:59:5d:e1:
1f:e8:3b:dc:48:a1:98:8a:dd:6e:a8:03:37:1a:a1:
ee:ae:de:5d:4c:55:25:37:2d:db:13:12:c9:9f:c6:
68:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:79:77:C2:80:83:4C:55:7C:28:E5:02:68:8D:FB:18:3D:FC:CA:A6
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/aXl3woCDTFV8KOUCaI37GD38yqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:7::/48
Signature Algorithm: sha256WithRSAEncryption
74:9f:33:c1:c1:b3:6f:1a:b2:c5:2b:48:29:3e:4d:eb:6c:1f:
31:c7:9a:15:22:ab:9b:b6:c4:81:b1:29:ef:60:48:85:e2:c2:
a3:ed:6e:be:ba:8e:c3:28:a6:70:a6:2b:fd:14:85:61:ea:ee:
99:24:96:c1:86:38:97:ba:92:36:38:8b:a5:f7:b2:af:4a:ee:
a8:a1:b7:b2:3e:70:8c:00:27:d3:14:7b:36:b2:6b:44:43:0f:
66:9a:47:d8:46:92:37:1f:17:bf:4a:ed:3c:20:c6:70:3e:e9:
b0:fc:dc:68:7a:11:73:ba:83:de:74:13:be:cd:00:40:b1:9e:
a3:35:fa:11:0a:33:a0:07:26:e0:21:2f:b3:de:cc:b3:cc:11:
7a:52:af:b5:0f:2a:0b:de:a6:68:63:51:91:07:05:56:90:f5:
49:cb:a9:4f:da:71:92:4f:04:38:1c:70:dc:b4:b1:78:0d:d2:
8a:09:dc:a0:d3:23:2b:f8:48:9e:25:d7:89:b9:28:f3:5a:15:
8f:0f:44:7e:da:48:a3:22:93:ae:f1:ac:ab:e2:10:83:31:db:
dc:8f:35:50:a6:b1:8f:14:5a:73:f8:cb:d7:da:8c:0a:6b:81:
48:c7:75:fe:f4:d9:ed:59:7a:54:39:1a:9f:36:18:d3:fa:3f:
f1:4c:17:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:41:45 2025 by rpki-client