Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/xkRsFChgw8FgF1z4ealSBYfjSiw.roa
File: xkRsFChgw8FgF1z4ealSBYfjSiw.roa (raw, json)
Hash identifier: c2XTA6ndUBR9DMhPW66OSPqlDjn7RwF/yQC+0Ynbm/Y=
Subject key identifier: C6:44:6C:14:28:60:C3:C1:60:17:5C:F8:79:A9:52:05:87:E3:4A:2C
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 019421B1C5711269CB11DA550683EFF00DE5
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/xkRsFChgw8FgF1z4ealSBYfjSiw.roa
Signing time: Wed 01 Jan 2025 11:48:05 +0000
ROA not before: Wed 01 Jan 2025 11:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39870
IP address blocks: 2001:67c:2550::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c5:71:12:69:cb:11:da:55:06:83:ef:f0:0d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Jan 1 11:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6446c142860c3c160175cf879a9520587e34a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:25:86:8f:65:d7:7a:94:f4:c9:f1:06:9f:
79:a4:7f:78:fd:6b:3b:9d:2f:86:c5:42:ce:ee:58:
69:e6:f2:f9:f3:f7:82:bc:cd:6f:89:f6:6b:67:5d:
2a:3f:5e:10:fd:59:26:9a:b5:14:e1:d2:b8:6a:51:
28:57:2c:35:08:47:13:ee:08:2c:e2:71:c4:cb:98:
4f:83:ae:60:37:dd:ac:b9:21:b6:24:4b:c1:0a:4f:
3f:1c:9b:60:b9:be:4a:70:c6:e9:e8:ce:14:bb:ac:
05:49:fc:49:ca:b9:fd:98:77:03:f0:44:6d:28:af:
b6:73:c9:fe:ce:77:cc:f6:b6:96:49:4f:91:43:21:
45:0c:43:e9:80:05:f1:02:df:68:b0:d8:76:c4:30:
45:a0:3e:3c:97:3f:43:db:aa:85:13:ed:41:43:82:
4b:fb:80:6f:c8:5f:1d:12:ba:88:a7:8c:56:cf:25:
7d:59:34:fe:16:8f:45:9e:85:41:df:0a:af:6a:a3:
58:33:e8:d6:36:9e:46:08:03:e1:50:b9:09:85:e4:
9f:17:f8:67:33:23:57:51:45:40:98:0a:8e:7b:48:
e1:33:ae:5f:da:2b:fa:3c:f5:e2:bc:91:a6:da:18:
b5:f1:97:3a:0f:00:93:eb:5f:6f:11:47:33:85:8a:
60:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:44:6C:14:28:60:C3:C1:60:17:5C:F8:79:A9:52:05:87:E3:4A:2C
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/xkRsFChgw8FgF1z4ealSBYfjSiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2550::/48
Signature Algorithm: sha256WithRSAEncryption
59:02:d9:02:91:a3:29:81:06:58:5a:cd:e0:14:3d:5e:b1:da:
3c:1f:ce:97:78:e1:b7:f9:58:86:58:44:a8:8f:aa:ff:fd:26:
fe:c6:a4:69:1e:d5:55:31:06:44:c6:86:8c:7b:82:63:23:02:
56:9d:f2:93:6a:a7:1e:ce:4c:50:32:85:55:07:b0:f9:93:44:
c5:a6:3f:bf:45:fc:2d:7e:12:2a:97:2d:77:84:7f:95:fd:fc:
9d:e3:93:6a:56:23:a4:72:3e:0e:7b:c1:ea:0c:d4:e3:d2:2e:
a0:e1:37:98:ed:6a:f6:22:7e:36:f4:f0:e4:40:e1:88:3f:f6:
75:f4:40:3c:0b:ab:c8:1e:74:2f:7c:ab:57:dd:96:e2:80:79:
ea:32:a8:97:6e:aa:c3:7d:b7:bc:56:31:0b:08:e7:c5:18:76:
cf:0a:1f:e4:e4:0f:24:2b:85:38:ee:ea:a8:14:f9:f7:28:bc:
4e:23:fb:92:68:89:b1:5e:5d:db:0b:58:9e:0e:c6:fe:47:85:
ac:49:c9:3b:e1:56:fe:ed:15:82:68:12:0c:27:30:5a:ff:a5:
11:d2:cc:c1:e2:f9:b5:c1:1b:98:83:8d:05:8e:29:90:12:a0:
01:34:68:04:09:1d:e6:c5:a0:41:77:92:da:56:aa:08:7c:7b:
06:4a:c0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:35:23 2025 by rpki-client