Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/xgQVSF4vcszXR0hRDE4DdoUivIg.roa
File: xgQVSF4vcszXR0hRDE4DdoUivIg.roa (raw, json)
Hash identifier: 1q2yXku8VDDEKp53n8QRf7O47KMiAEy5c4x21wiukQY=
Subject key identifier: C6:04:15:48:5E:2F:72:CC:D7:47:48:51:0C:4E:03:76:85:22:BC:88
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0194B335AC10231CB9060316CAEB1A716E2C
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/xgQVSF4vcszXR0hRDE4DdoUivIg.roa
Signing time: Wed 29 Jan 2025 17:57:06 +0000
ROA not before: Wed 29 Jan 2025 17:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 2a06:d645::/32 maxlen: 32
2a09:2982::/32 maxlen: 32
2a0a:b386::/32 maxlen: 32
2a0b:9002::/32 maxlen: 32
2a0d:afc3::/32 maxlen: 32
2a0e:3f42::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b3:35:ac:10:23:1c:b9:06:03:16:ca:eb:1a:71:6e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 29 17:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c60415485e2f72ccd74748510c4e03768522bc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a9:58:b0:d5:47:a2:56:3d:34:ee:ea:78:9c:
e5:51:9e:60:c0:be:02:11:ee:d1:31:78:15:e3:dc:
dc:05:d2:28:c1:06:cf:51:38:98:17:25:4b:d1:2d:
67:33:18:de:8c:21:08:8f:fe:bc:ac:5e:15:11:96:
02:a5:7f:e3:db:5e:ed:28:38:97:46:33:36:f8:c2:
ea:b5:8b:15:7d:30:b3:1e:6d:02:ae:70:c8:d0:4f:
47:53:5b:27:73:40:7c:74:a0:cb:97:06:ac:42:b0:
a6:cf:b0:54:e6:bc:f8:e6:f9:c9:ac:c4:ab:3a:c2:
cd:38:ae:7d:01:15:eb:93:66:01:57:22:65:5f:23:
2d:47:04:e3:4d:e3:c9:a4:7f:84:82:e9:67:17:51:
5f:0c:43:08:a5:a3:56:27:8d:1c:09:5f:1e:6c:42:
32:e7:9d:07:a6:49:2a:46:50:57:3b:51:3b:a1:99:
6d:4a:5a:c3:92:c9:09:7e:a1:a3:36:ef:11:18:e7:
4f:36:e7:e2:80:b5:e4:dc:30:85:22:62:39:c7:b7:
c4:3b:9d:7e:26:88:df:2d:bb:85:5f:04:8b:71:b1:
46:10:fe:d3:b8:4c:af:47:bb:76:51:8f:83:c2:33:
3b:bb:c0:a2:fe:8b:a4:22:28:57:cf:06:8a:fa:c7:
3d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:04:15:48:5E:2F:72:CC:D7:47:48:51:0C:4E:03:76:85:22:BC:88
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/xgQVSF4vcszXR0hRDE4DdoUivIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d645::/32
2a09:2982::/32
2a0a:b386::/32
2a0b:9002::/32
2a0d:afc3::/32
2a0e:3f42::/32
Signature Algorithm: sha256WithRSAEncryption
a5:67:fc:bd:89:f3:93:94:04:4b:97:a1:0d:12:27:17:84:4a:
27:81:91:24:d3:eb:5f:24:21:96:f1:6e:70:ec:4e:be:28:94:
67:38:9d:8c:53:aa:36:af:7e:44:0a:a0:22:b6:76:40:22:a9:
9c:c7:1b:b0:7b:0f:a2:87:84:92:ae:82:17:9a:56:b3:10:7d:
07:62:3d:aa:fa:78:ce:88:70:03:17:ed:04:2e:a5:c1:81:02:
99:7e:1b:82:9d:2c:bd:58:86:05:3d:3a:3a:e9:0d:e4:0d:c6:
cc:f5:02:d8:c2:df:64:70:67:a5:3c:b1:69:5f:3b:ad:0a:ad:
8b:a9:24:30:0c:d5:e4:57:62:1e:ae:a1:1c:ed:de:8c:b0:4f:
c9:61:c7:44:09:d1:d0:aa:4a:30:a8:e3:3e:02:1e:ee:53:4e:
9d:fc:70:bf:98:e2:cf:32:e9:3b:13:ef:d5:64:ef:b6:c5:7a:
d7:3b:6f:d0:a0:9a:a4:46:17:83:f2:15:4a:45:b1:87:53:74:
91:d8:ab:e1:6d:b6:22:e3:c0:6c:a8:55:9f:2b:b0:bf:af:55:
30:51:05:da:c0:39:18:c2:b6:9f:63:ba:49:e6:09:d0:a5:81:
8d:b9:d8:28:27:70:a7:08:70:2d:a2:b5:8a:6d:5e:50:65:36:
20:0f:18:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:56:45 2025 by rpki-client