Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/0Xa-Nei_d95pLvklAjjCcq4wB50.roa
File: 0Xa-Nei_d95pLvklAjjCcq4wB50.roa (raw, json)
Hash identifier: IPQHZLb7lkBMMEnjRg8Zyo+jCG1PIyAJca8gIl7Nyqw=
Subject key identifier: D1:76:BE:35:E8:BF:77:DE:69:2E:F9:25:02:38:C2:72:AE:30:07:9D
Certificate issuer: /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Certificate serial: 019425FDAF8B55E1FE30686E68509A58AB30
Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/0Xa-Nei_d95pLvklAjjCcq4wB50.roa
Signing time: Thu 02 Jan 2025 07:49:29 +0000
ROA not before: Thu 02 Jan 2025 07:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216361
IP address blocks: 2a0b:6740::/48 maxlen: 48
2a0b:6740:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:af:8b:55:e1:fe:30:68:6e:68:50:9a:58:ab:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Validity
Not Before: Jan 2 07:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d176be35e8bf77de692ef9250238c272ae30079d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:77:81:93:85:12:ab:5d:14:15:5d:8e:d3:
5e:bd:8a:37:c3:5e:c1:40:c4:56:4e:3d:5a:68:93:
b8:40:9d:a5:7a:1c:ca:30:a5:de:77:d9:18:76:8d:
83:13:fc:a6:79:83:3b:5f:08:63:f1:43:66:08:bb:
28:a3:4f:f7:f0:ad:48:29:13:16:4c:a2:46:cc:10:
1a:e5:cb:6d:bc:11:19:42:1e:f1:3e:6a:4e:cf:bc:
4d:cd:43:12:e1:5a:3b:97:e3:61:dc:bb:ad:ab:bd:
f5:4c:65:23:5a:ba:29:36:70:96:69:95:69:a9:35:
43:58:17:44:af:59:ef:b0:7d:93:f5:0d:10:fe:b6:
2d:cd:26:e2:03:3b:f8:b3:72:3f:1d:0a:07:bd:52:
52:1e:32:01:fa:d7:67:d5:17:d8:ac:8a:04:d3:2b:
8f:85:a7:52:a1:f8:ba:1e:e5:97:cd:a1:47:58:d3:
be:03:03:77:53:09:d4:68:ea:e6:44:5a:c6:42:8b:
f2:44:ff:94:6b:7d:6d:7b:2e:bb:63:69:bb:0c:06:
8d:ac:80:2c:ec:80:4d:32:cb:d5:ef:51:a0:06:94:
ba:90:2d:60:12:8e:df:3a:4a:13:20:d4:42:49:48:
3f:71:fb:f4:d1:f2:3a:9b:12:35:c8:62:52:d5:9d:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:76:BE:35:E8:BF:77:DE:69:2E:F9:25:02:38:C2:72:AE:30:07:9D
X509v3 Authority Key Identifier:
keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/0Xa-Nei_d95pLvklAjjCcq4wB50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6740::/47
Signature Algorithm: sha256WithRSAEncryption
61:b6:7f:09:10:6d:92:19:d7:ad:9a:36:0f:fc:cd:c7:cc:80:
ed:70:5a:bd:2a:c2:84:87:4c:06:e2:af:98:f1:cf:ae:51:9a:
5e:69:a7:7d:73:9a:e4:e6:ad:8d:fb:f6:ac:e5:52:b0:f8:86:
b0:df:4d:ff:ad:8f:f6:cc:59:ce:37:58:8e:ac:04:4e:d8:f6:
38:ae:15:b5:b9:66:35:d5:a1:14:17:11:ec:87:91:4b:92:bf:
b3:f2:e6:9a:15:a3:57:79:18:0d:e6:63:67:c3:9c:4e:a3:28:
77:71:8d:6f:c0:36:9a:76:e3:3b:67:ed:e7:b0:61:a4:b8:99:
61:bd:89:30:d8:8e:b5:cc:62:50:22:54:c7:34:e9:fa:f0:d7:
33:0d:8f:c8:e5:6f:1f:ff:9c:2f:29:15:09:3b:1d:a9:2c:1a:
44:f0:b1:cf:04:0c:a4:43:47:32:b5:ed:74:90:82:bc:2a:fa:
5b:61:4a:2f:e0:4b:5b:c8:70:58:1f:05:93:7b:bc:61:56:b3:
0e:57:52:0a:09:32:80:8e:e6:ef:31:48:bb:d8:dd:60:13:84:
cc:9c:98:24:ac:6f:36:f4:81:78:c4:f7:8f:e4:71:8a:40:90:
6a:6c:71:a9:f0:21:57:bb:ab:02:e8:6a:db:67:85:d2:e9:1c:
18:a2:66:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:23 2025 by rpki-client