Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/xDf42bpWqRCsDPxTubWSXNuBqFg.roa
File: xDf42bpWqRCsDPxTubWSXNuBqFg.roa (raw, json)
Hash identifier: YkhsAjaT83vQpIvIVaLxfqKkzhztD+nQzU/2yzJtmvM=
Subject key identifier: C4:37:F8:D9:BA:56:A9:10:AC:0C:FC:53:B9:B5:92:5C:DB:81:A8:58
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 019426D90022B21EEF625F3E9ACD17DC2943
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/xDf42bpWqRCsDPxTubWSXNuBqFg.roa
Signing time: Thu 02 Jan 2025 11:49:03 +0000
ROA not before: Thu 02 Jan 2025 11:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205154
IP address blocks: 2a12:efc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:00:22:b2:1e:ef:62:5f:3e:9a:cd:17:dc:29:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Jan 2 11:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c437f8d9ba56a910ac0cfc53b9b5925cdb81a858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e9:6e:6b:70:29:f7:c9:59:71:e3:b2:de:14:
b5:0d:3f:2d:6b:39:77:72:6b:63:f5:d3:84:c8:59:
dd:43:fb:d9:00:77:a3:ca:18:d6:bf:79:96:b5:64:
ae:06:8f:fe:b6:6b:72:bf:75:01:1a:99:2e:ad:ec:
fd:10:b5:78:da:7b:74:31:61:3b:4a:9a:8c:ec:79:
90:13:ce:52:d9:35:2e:80:94:9a:be:76:fb:12:dc:
84:31:00:4c:c7:dd:1e:d8:27:67:00:89:c9:bc:58:
d4:a0:46:d1:56:50:76:e6:74:68:84:dc:8d:4e:ef:
65:6c:30:ae:f0:12:54:73:af:d8:f9:84:92:bc:34:
1e:22:5a:0b:fa:e9:ea:18:73:8c:47:cc:be:4d:6b:
96:5a:7e:34:bb:20:69:ff:10:73:06:b8:e0:b4:e5:
b2:c3:d8:b2:e5:7a:3f:bf:8a:fd:d7:e6:e9:6f:f7:
1c:63:10:a6:01:a2:dc:e7:c9:4f:b1:92:37:dd:c0:
23:71:ca:41:6a:df:90:c9:58:1d:96:03:a3:f2:53:
1f:31:22:5f:a5:72:36:d1:38:42:b5:a0:12:b3:fd:
71:f6:33:28:96:d2:e4:1a:cf:1f:14:aa:a0:45:0a:
3c:45:18:41:6f:ec:2c:65:03:db:85:99:6a:c8:c2:
da:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:37:F8:D9:BA:56:A9:10:AC:0C:FC:53:B9:B5:92:5C:DB:81:A8:58
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/xDf42bpWqRCsDPxTubWSXNuBqFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:efc0::/29
Signature Algorithm: sha256WithRSAEncryption
24:e6:f0:97:d6:83:fa:28:b2:b3:1c:7a:e8:9a:c2:22:fd:47:
b2:21:8f:fa:6c:d4:bf:ea:78:7e:c5:ea:72:0a:a6:37:d3:e9:
dd:85:51:5f:b3:95:b9:c0:93:00:20:d8:60:8a:f3:15:e2:98:
c0:24:2c:d4:59:0b:fd:86:60:9c:12:80:f7:c9:a1:d3:40:be:
50:1d:c1:af:4c:4c:89:59:18:1a:9d:1b:b3:b5:83:fb:b5:c6:
dd:74:e2:25:d5:2c:b8:7d:9f:a5:cc:a7:0f:df:6c:1a:c3:73:
21:70:3d:53:71:97:9f:70:54:07:6b:f2:62:7d:0f:67:15:a2:
90:92:77:cd:31:3b:d3:77:fe:d1:d3:02:7e:32:4c:31:de:a6:
fe:28:06:40:6c:b7:37:ac:e0:71:03:93:a9:3c:b3:69:d8:51:
b3:9b:f6:12:ec:57:50:53:07:48:b8:4e:5c:36:70:fb:c0:85:
fb:59:e0:64:e4:55:5c:77:29:0e:dd:dc:17:a7:17:7b:81:af:
95:a2:87:17:49:ac:dd:a8:3e:a5:18:34:24:da:b4:e0:7b:fa:
b2:1c:21:79:37:c5:8a:09:32:99:25:6b:01:7e:a6:1d:3c:1d:
4b:35:19:ec:d9:96:b6:31:ed:e3:46:64:e7:ca:87:d4:b0:9a:
75:58:57:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:15:47 2025 by rpki-client