Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa
File: 2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa (raw, json)
Hash identifier: 1rGV+fsNs0SO2Zvvg0olbcFYooCwn1FYxZF5w23Xb0A=
Subject key identifier: D9:74:B6:A8:AB:B5:A0:BF:C3:B2:E2:37:39:25:C0:C8:F3:E6:5D:A3
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 019425FC37F3E0B36B9892CF6674A6B1169E
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa
Signing time: Thu 02 Jan 2025 07:47:53 +0000
ROA not before: Thu 02 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206885
IP address blocks: 2001:678:284::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:37:f3:e0:b3:6b:98:92:cf:66:74:a6:b1:16:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Jan 2 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d974b6a8abb5a0bfc3b2e2373925c0c8f3e65da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:70:a2:ba:77:63:77:a1:a0:49:4c:3d:c0:
0d:d3:1d:b9:df:3a:6e:76:78:3c:f9:2a:70:d2:f5:
ab:f9:5c:57:29:7b:91:c6:a7:53:75:72:7e:d1:4f:
58:99:44:3f:39:45:08:e4:3f:9e:15:01:6b:08:6a:
29:5a:f6:ef:79:85:46:44:e9:27:43:39:eb:2e:a1:
88:27:c9:de:6a:fe:58:91:6b:3f:cd:e9:5f:7d:20:
32:e7:c4:18:7b:1d:0c:40:24:df:e5:6c:bc:4e:43:
3b:28:22:77:5d:2f:6b:16:ef:72:87:48:af:75:0d:
cc:14:29:59:31:8f:9d:1f:32:e5:48:24:39:e4:51:
b6:2a:0f:68:ec:1a:0f:e1:c9:00:d1:53:99:27:af:
c8:5f:7b:05:02:26:a3:7d:3e:d6:25:43:61:89:6a:
eb:71:59:d9:e3:dc:49:f6:d1:6e:e4:46:57:c8:ff:
60:69:98:3a:b3:76:ab:c8:08:9f:19:dc:02:99:35:
57:aa:7d:a6:8b:09:f5:8b:79:e6:52:1c:89:55:b8:
4c:d1:63:fb:2d:a9:62:ce:2c:e0:77:01:32:6d:e4:
16:19:a3:a0:5f:f1:ba:c9:87:0b:65:d4:a8:5f:4c:
76:57:3f:68:4f:97:4f:51:00:50:af:a3:99:5e:29:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:74:B6:A8:AB:B5:A0:BF:C3:B2:E2:37:39:25:C0:C8:F3:E6:5D:A3
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:284::/48
Signature Algorithm: sha256WithRSAEncryption
30:b4:cb:67:e4:73:22:df:be:2d:b5:34:17:c3:51:ed:31:d7:
52:b3:e3:84:9d:58:83:ad:47:1f:14:e4:b3:8f:61:cb:7d:c5:
f2:15:21:66:a0:d9:92:2b:ca:53:e9:b2:05:fa:0d:e0:7b:bc:
9e:89:cd:c2:d8:85:da:15:83:da:eb:c5:ef:6b:4c:34:c6:5b:
c6:f0:6a:df:46:56:6b:96:d3:94:40:3c:35:71:ea:32:02:37:
ca:2c:34:33:d6:f2:d9:59:8e:33:ca:62:33:99:14:2f:29:89:
6e:da:35:50:a2:36:2f:70:f2:cf:fc:ac:16:4b:42:81:7c:92:
6d:fd:13:ae:30:fe:df:c1:e7:36:63:20:61:21:45:38:1b:2a:
0d:8e:6a:d5:c7:9c:b3:42:d2:79:31:9d:fd:c2:14:8e:8d:84:
c3:b0:bf:f4:f4:23:c0:4a:95:d0:c9:a6:c5:92:4d:0a:4f:ba:
65:6f:3f:e6:e4:9a:6d:4d:66:97:53:0b:39:d3:d7:87:54:46:
e5:8a:05:4e:84:35:80:53:08:95:da:3f:0f:6d:96:1d:90:c4:
83:15:84:af:4e:e8:ce:66:ab:eb:65:1d:83:19:65:01:0c:77:
92:33:14:7f:88:58:b4:c7:95:c9:46:fa:a9:5f:f4:b2:bc:5b:
7b:60:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:51:53 2025 by rpki-client