Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/xxpwWq99h2UC8fGaA57WvXmJQIY.roa
File: xxpwWq99h2UC8fGaA57WvXmJQIY.roa (raw, json)
Hash identifier: hB0aBJhUko4vLE69LgJZtcXWGS9cGGQQvN4ZagAecyg=
Subject key identifier: C7:1A:70:5A:AF:7D:87:65:02:F1:F1:9A:03:9E:D6:BD:79:89:40:86
Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial: 019424B31353C92B8C4EC061709DA95ED1AE
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/xxpwWq99h2UC8fGaA57WvXmJQIY.roa
Signing time: Thu 02 Jan 2025 01:48:22 +0000
ROA not before: Thu 02 Jan 2025 01:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49775
IP address blocks: 81.26.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:13:53:c9:2b:8c:4e:c0:61:70:9d:a9:5e:d1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Validity
Not Before: Jan 2 01:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c71a705aaf7d876502f1f19a039ed6bd79894086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:d5:37:2f:c3:70:a7:1a:15:a8:f0:ca:96:
90:df:08:26:ce:a8:2d:5f:81:ea:ed:fa:9d:05:0a:
34:7e:b0:1e:2c:f0:b9:47:05:28:70:8c:f5:58:c0:
1c:01:12:f1:98:56:00:96:64:e7:a3:14:1a:09:5c:
dd:c0:56:fb:d5:09:d8:64:22:a7:68:1a:b4:8e:73:
52:ee:75:ec:30:2d:fb:f4:9d:45:6d:97:6c:6f:6f:
c2:23:9d:ef:81:56:71:7e:43:68:9e:bd:a9:4b:07:
04:64:e6:8d:64:0c:ad:e5:c5:20:0f:81:1e:9e:cc:
11:5c:71:38:12:c8:39:2d:36:62:39:16:e5:95:14:
ba:cc:fa:cb:35:86:5e:88:62:86:69:02:59:f7:e9:
8d:63:28:ff:54:7c:4c:94:cd:37:c4:9e:73:5b:d3:
7f:96:43:e3:c7:5a:ba:aa:75:d0:ff:67:bb:62:3d:
2d:15:dc:ac:70:25:ac:fb:30:4a:16:df:59:a0:d5:
82:3f:a3:2d:68:b2:16:7e:fa:40:75:6e:a4:1d:cb:
45:9c:78:e4:70:d3:a2:ba:0c:1c:ca:69:87:0c:05:
8b:8d:a5:75:99:32:a0:e5:9d:be:cd:42:02:2e:a2:
6e:bf:dd:b3:09:6c:6a:b5:d6:cd:89:6f:68:55:d1:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1A:70:5A:AF:7D:87:65:02:F1:F1:9A:03:9E:D6:BD:79:89:40:86
X509v3 Authority Key Identifier:
keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/xxpwWq99h2UC8fGaA57WvXmJQIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.26.96.0/21
Signature Algorithm: sha256WithRSAEncryption
54:a3:db:98:27:d4:d4:5f:37:2b:36:ac:e3:25:ef:cd:35:f9:
ab:26:0f:cb:bd:22:07:7b:ee:c3:d9:f6:ad:70:fb:a8:6d:be:
ae:52:86:01:18:f4:79:3b:54:65:7c:6f:ed:b1:2a:4a:1d:17:
15:ba:60:55:07:53:71:22:3e:f0:9d:c4:f2:2f:ef:ba:c2:10:
03:74:fb:ed:63:3d:20:d4:0a:f2:f9:38:b7:18:c1:57:53:90:
5c:d0:68:49:a0:1c:20:0b:36:c0:64:e5:5e:ce:52:c7:8f:eb:
7f:7a:ad:ed:fb:ed:55:ee:a4:60:43:1a:af:8b:41:09:bb:e9:
13:5c:b4:06:bc:b0:71:63:28:5a:38:ee:15:dd:5c:cb:f9:5d:
11:3d:51:06:eb:2f:3d:25:3c:37:5d:53:cc:c0:d4:79:87:75:
f2:16:7a:09:9a:c5:e7:75:74:87:58:38:8f:84:58:c0:e6:35:
61:22:ad:b4:c5:06:7a:6f:81:66:95:06:2e:e4:42:8e:99:4f:
10:8c:b9:64:dc:3b:8e:0a:61:f3:91:9e:aa:b3:f2:d8:35:1b:
8f:7c:2e:7a:9a:d6:e8:e1:34:ec:92:48:28:b7:d4:0a:88:9f:
bb:8e:6b:1c:4d:97:fb:37:cd:f0:35:0e:24:4c:5c:84:80:f9:
18:8c:b2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:33 2025 by rpki-client