Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/D-RIX_FD-SN5SshOisKYwCgAV_I.roa
File: D-RIX_FD-SN5SshOisKYwCgAV_I.roa (raw, json)
Hash identifier: x033PUL0ZGG5mDhT/he8/ieNNlTHX9WAHAFDtaJQ278=
Subject key identifier: 0F:E4:48:5F:F1:43:F9:23:79:4A:C8:4E:8A:C2:98:C0:28:00:57:F2
Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial: 0194206853CB9D2ACCB517FF5BED8B1124E5
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/D-RIX_FD-SN5SshOisKYwCgAV_I.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11588
IP address blocks: 2001:4de0:2400::/40 maxlen: 40
2001:4de0:4202::/47 maxlen: 47
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:53:cb:9d:2a:cc:b5:17:ff:5b:ed:8b:11:24:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fe4485ff143f923794ac84e8ac298c0280057f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:95:42:7f:99:e5:67:bf:71:26:21:13:10:
9d:99:66:96:9b:cd:0e:46:bb:d2:dd:7f:35:34:5b:
07:53:57:ed:b3:63:46:11:8e:88:80:e1:bd:52:2e:
95:7e:db:39:8e:7d:91:1a:87:4d:8c:eb:80:e1:15:
2f:3a:ca:37:98:fd:2f:f0:7a:90:9b:c2:f2:7d:58:
e2:e3:22:5e:33:e0:72:8d:cc:77:c4:4e:2c:cf:01:
e4:5c:14:b0:3d:ab:29:1b:cb:fa:a3:53:ee:08:b0:
d7:80:cc:ac:8b:4f:e7:4c:59:de:bf:7a:0b:86:3b:
17:7f:75:18:31:6b:4b:ca:76:f2:6a:38:36:10:ce:
18:d4:59:00:b2:96:11:d0:49:5a:57:15:ea:7e:24:
5c:83:96:fa:69:98:02:ba:56:b4:d6:a9:cf:32:b3:
0c:8d:4c:10:79:91:71:0f:15:96:a7:97:e5:1d:7a:
16:4a:b1:26:15:d0:2f:d6:6d:99:d3:65:5f:98:77:
36:fd:1f:3e:09:54:cc:06:35:45:78:ac:80:6d:9b:
3a:1d:75:6c:c9:31:bc:6a:21:e8:21:e7:2b:8f:bc:
1d:8a:44:90:4a:46:82:b0:c8:c9:5a:92:b5:f0:5c:
97:f4:6d:72:81:2b:1a:b6:12:c3:a2:a8:d0:0f:76:
80:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E4:48:5F:F1:43:F9:23:79:4A:C8:4E:8A:C2:98:C0:28:00:57:F2
X509v3 Authority Key Identifier:
keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/D-RIX_FD-SN5SshOisKYwCgAV_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4de0:2400::/40
2001:4de0:4202::/47
Signature Algorithm: sha256WithRSAEncryption
42:6b:6c:99:55:1c:8f:2e:ff:8b:67:5d:e3:fb:8e:84:26:58:
e4:c6:2e:87:5b:26:5a:8a:e0:20:5d:a1:6b:91:74:e0:30:be:
ac:bc:e6:60:91:cc:d3:4e:9a:a8:bf:68:f1:21:a0:82:85:18:
d7:aa:d3:5f:d2:53:9a:a2:e4:52:3c:34:3c:32:46:3d:1f:08:
50:e3:5c:92:56:db:3b:cb:f5:8b:39:af:5d:6c:e7:3d:32:7d:
6d:65:0d:90:dd:5d:e4:7b:dc:4d:a2:93:44:d6:85:16:3a:19:
16:43:d2:d0:40:4e:bb:a4:9f:16:dd:32:34:20:3e:3d:c1:15:
a1:c4:b9:41:71:f4:84:6f:72:ec:82:87:60:c8:8b:cd:26:99:
e5:7c:72:1e:0b:e3:12:a1:da:b5:bd:ca:39:d3:fd:9a:ee:0b:
a7:1c:48:6c:f5:44:05:d2:9b:3b:54:80:ad:d5:c6:9b:0c:0b:
e3:d4:b0:51:c1:19:5b:de:8a:53:c5:bd:13:6b:ee:6a:b5:26:
12:cc:54:ea:80:3b:95:52:67:b2:7f:8d:09:7f:4a:15:57:a5:
73:76:98:1b:14:54:d8:57:c4:6c:88:cd:bd:ae:b9:33:5f:19:
4c:78:81:8f:d4:5a:47:61:9c:0a:de:3f:ba:e2:40:38:60:0f:
fa:47:3f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:01:59 2025 by rpki-client