Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/xb_V8FoCziLwhsNf2nDbMavL4CE.roa
File: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (raw, json)
Hash identifier: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=
Subject key identifier: C5:BF:D5:F0:5A:02:CE:22:F0:86:C3:5F:DA:70:DB:31:AB:CB:E0:21
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 01941FFA74909B1C4464DF5296AB4C01593E
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/xb_V8FoCziLwhsNf2nDbMavL4CE.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59542
IP address blocks: 2a02:a43f:9000::/36 maxlen: 36
2a02:a43f:9000::/37 maxlen: 37
2a02:a43f:9800::/37 maxlen: 37
2a02:a43f:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:74:90:9b:1c:44:64:df:52:96:ab:4c:01:59:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5bfd5f05a02ce22f086c35fda70db31abcbe021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:a3:1a:22:ff:65:dc:f2:bb:f1:09:4c:19:
00:41:65:90:ad:09:fc:fd:f0:de:bf:5c:41:39:9a:
4d:ca:19:89:a1:92:28:f5:77:d3:a1:46:3d:27:c2:
73:18:9e:bd:de:2e:e1:ba:ca:71:1d:91:ff:46:53:
43:95:96:fd:d9:b1:25:7d:00:72:a2:d0:ad:68:26:
36:34:6c:7c:8f:2f:05:0e:1d:23:81:44:ab:15:38:
d5:ac:f8:89:ec:a4:61:62:c2:fc:5d:18:d1:43:93:
20:2c:64:88:b3:8c:47:fd:cb:b8:af:76:c9:02:72:
bb:55:72:c3:dd:7a:0d:9f:11:ef:13:39:74:b2:7e:
91:36:bd:60:f7:66:34:39:50:d8:1c:37:0a:8a:90:
08:04:82:d0:99:72:bc:11:f0:14:bd:2c:99:c1:6a:
0c:ce:f9:25:61:7d:f0:5b:a9:09:e0:e8:3b:3b:31:
15:41:8e:f3:e7:7d:21:08:d9:cf:75:86:49:e3:c5:
36:48:cf:e8:20:19:aa:f6:2c:15:4c:42:3b:ba:06:
27:9b:11:ce:a7:33:35:cc:50:fc:9f:c5:47:97:30:
da:0d:82:ee:02:2d:5c:cd:c7:6c:dc:76:16:45:f3:
26:aa:09:3d:03:54:c1:e4:b2:f3:43:1c:b1:eb:f6:
18:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BF:D5:F0:5A:02:CE:22:F0:86:C3:5F:DA:70:DB:31:AB:CB:E0:21
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/xb_V8FoCziLwhsNf2nDbMavL4CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:a43f:9000::/36
2a02:a43f:f000::/36
Signature Algorithm: sha256WithRSAEncryption
97:0c:75:5b:b6:84:56:c9:e1:20:65:f9:08:b9:f9:37:bb:f0:
99:47:5c:62:12:8d:06:5d:95:15:6d:ca:27:ab:29:39:3f:52:
e0:54:9b:85:69:96:35:00:58:10:05:32:54:37:25:9b:49:e1:
3b:b0:13:9a:d0:46:85:d9:b8:7f:de:0f:13:01:15:b1:af:63:
69:7f:ea:11:32:f6:2f:56:50:07:c7:f0:a6:20:f5:b8:93:f9:
9d:41:b3:af:f4:e0:a6:8b:17:64:7d:ca:f8:68:18:47:c4:32:
2b:c7:42:d2:15:4d:29:89:e4:ea:21:61:b5:ce:a9:96:6d:dd:
10:8a:f8:ac:da:90:75:1b:a8:dc:e0:fa:2c:6e:2c:5b:e8:5d:
56:68:e5:f8:44:87:92:e1:3d:ea:e8:58:db:da:b4:a3:b2:82:
ee:3c:8a:f5:5f:05:c5:47:c9:d4:51:44:56:59:1f:94:c7:0b:
fd:46:e7:99:8a:9e:92:bc:c8:bb:ca:70:9b:f3:5b:d6:89:21:
71:a4:76:13:98:e5:db:82:71:ad:28:31:68:f6:68:00:14:06:
0b:20:3c:28:e2:5a:99:ed:ab:df:79:74:91:42:f6:8a:e6:0c:
b1:71:72:81:59:f9:d2:01:6a:61:77:1b:a4:08:f5:16:a2:35:
e8:21:8c:50
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAZQf+nSQmxxEZN9SlqtMAVk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk
Y2UyMDUwHhcNMjUwMTAxMDM0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWJmZDVmMDVhMDJjZTIyZjA4NmMzNWZkYTcwZGIzMWFiY2JlMDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZOjGiL/Zdzyu/EJTBkAQWWQrQn8
/fDev1xBOZpNyhmJoZIo9XfToUY9J8JzGJ693i7huspxHZH/RlNDlZb92bElfQBy
otCtaCY2NGx8jy8FDh0jgUSrFTjVrPiJ7KRhYsL8XRjRQ5MgLGSIs4xH/cu4r3bJ
AnK7VXLD3XoNnxHvEzl0sn6RNr1g92Y0OVDYHDcKipAIBILQmXK8EfAUvSyZwWoM
zvklYX3wW6kJ4Og7OzEVQY7z530hCNnPdYZJ48U2SM/oIBmq9iwVTEI7ugYnmxHO
pzM1zFD8n8VHlzDaDYLuAi1czcds3HYWRfMmqgk9A1TB5LLzQxyx6/YY5wIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFMW/1fBaAs4i8IbDX9pw2zGry+AhMB8GA1UdIwQY
MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et
ODcyYjM3MTBjMmExLzEveGJfVjhGb0N6aUx3aHNOZjJuRGJNYXZMNENFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx
LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYEKgKkP5AD
BgQqAqQ/8DANBgkqhkiG9w0BAQsFAAOCAQEAlwx1W7aEVsnhIGX5CLn5N7vwmUdc
YhKNBl2VFW3KJ6spOT9S4FSbhWmWNQBYEAUyVDclm0nhO7ATmtBGhdm4f94PEwEV
sa9jaX/qETL2L1ZQB8fwpiD1uJP5nUGzr/TgposXZH3K+GgYR8QyK8dC0hVNKYnk
6iFhtc6plm3dEIr4rNqQdRuo3OD6LG4sW+hdVmjl+ESHkuE96uhY29q0o7KC7jyK
9V8FxUfJ1FFEVlkflMcL/UbnmYqekrzIu8pwm/Nb1okhcaR2E5jl24JxrSgxaPZo
ABQGCyA8KOJame2r33l0kUL2iuYMsXFygVn50gFqYXcbpAj1FqI16CGMUA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:09 2025 by rpki-client