Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/xAMpMh4nbO4LyB6Qja6DFe_88jA.roa
File: xAMpMh4nbO4LyB6Qja6DFe_88jA.roa (raw, json)
Hash identifier: ue80NNFiLfpsrkKjl+M4mLElo07egwD3NcN+sAuZBTc=
Subject key identifier: C4:03:29:32:1E:27:6C:EE:0B:C8:1E:90:8D:AE:83:15:EF:FC:F2:30
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 019421B1E6C0D85D14C2E794B6CB3D9F3F85
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/xAMpMh4nbO4LyB6Qja6DFe_88jA.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52016
IP address blocks: 2001:6d0:4001::/48 maxlen: 48
2001:6d0:4002::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e6:c0:d8:5d:14:c2:e7:94:b6:cb:3d:9f:3f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c40329321e276cee0bc81e908dae8315effcf230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:84:e7:01:87:c9:26:26:54:18:c4:9c:ee:
54:85:e9:23:e4:21:10:c8:46:f1:ec:94:20:b7:a9:
06:e3:c0:d6:f7:4c:ff:c2:d5:0b:38:bd:2c:11:5a:
77:f6:66:5c:38:98:5a:64:6c:59:70:67:88:1f:59:
60:78:5e:2a:58:be:c0:f7:5b:7d:18:14:f1:fa:23:
1c:65:af:48:72:d3:4c:56:78:77:36:dc:8f:2b:e4:
13:02:f2:9f:ea:02:e5:bf:6f:c2:e3:58:3d:cb:44:
67:5f:fe:c3:ee:00:22:2b:f1:f2:a0:5c:b5:2e:e3:
d6:bd:d2:90:90:6c:b1:cb:de:e6:8c:e4:d2:95:4f:
a8:7e:f4:48:e4:da:7f:92:3b:59:07:ff:bb:32:32:
c5:b4:7f:22:92:63:fe:41:8c:a0:dd:ea:e2:f3:a7:
33:be:86:e6:97:0e:21:8b:be:dc:4b:54:27:65:2d:
bd:0e:8c:58:d3:3b:37:d4:87:d5:b7:fc:b6:70:bb:
c2:2c:14:d7:f7:46:0b:29:87:dc:b5:41:f8:5c:68:
fc:42:e4:6b:f9:26:ca:a3:9c:fa:72:0b:27:5e:54:
95:27:4b:aa:35:3c:63:b2:f8:f3:a0:32:4b:ea:2c:
43:3f:83:1e:61:59:2e:72:0e:17:d5:bd:a6:f2:a2:
1e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:03:29:32:1E:27:6C:EE:0B:C8:1E:90:8D:AE:83:15:EF:FC:F2:30
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/xAMpMh4nbO4LyB6Qja6DFe_88jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:6d0:4001::-2001:6d0:4002:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
af:61:05:11:78:d9:52:79:2f:fd:a6:e1:69:76:0d:42:ec:78:
4d:b8:7f:48:f2:1c:6f:ed:2d:3e:45:ec:65:6f:df:41:46:9a:
22:21:3b:47:c0:e9:9a:c1:fe:d1:22:bb:b5:ca:bf:75:ae:bb:
72:c0:d5:2e:43:bc:8d:aa:7c:33:2e:92:95:76:99:9c:78:1a:
f4:b0:a5:28:72:dc:65:43:ed:91:c9:9f:5d:b8:b5:3d:bb:40:
e8:00:e3:d4:c4:d5:8c:38:f6:17:27:1c:09:06:d8:76:65:14:
b7:7b:8a:99:f7:ed:7f:69:05:76:23:d3:32:4a:1c:41:01:c5:
30:3a:65:2d:b2:65:7f:de:42:c9:5d:55:47:3c:b4:1a:f7:bf:
43:30:41:1a:ec:99:11:a5:cb:68:66:f5:89:d3:a2:97:7d:e0:
70:c8:66:48:4f:9f:65:d8:d3:ca:95:1a:a5:5e:aa:10:c2:50:
b1:fe:b9:3a:92:a2:3f:2a:83:f1:72:09:2a:59:a2:45:54:72:
ad:47:85:6f:6c:ba:d9:14:d7:b5:7b:06:d9:1b:cf:38:49:86:
ec:cb:0d:5b:4b:48:37:07:61:cf:ca:db:7b:19:a3:f2:f8:9e:
56:68:88:35:79:c3:b7:bb:4b:e2:55:ac:3c:9e:f4:ae:64:05:
fd:d5:4d:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:45 2025 by rpki-client