Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/XB2P8pqeFQE5V_wiPLEy8Uw8TL4.roa
File: XB2P8pqeFQE5V_wiPLEy8Uw8TL4.roa (raw, json)
Hash identifier: eEOspJ3pbx3Bzx3yuT7YUHqNvJo2s+nrBm58kVOY9b8=
Subject key identifier: 5C:1D:8F:F2:9A:9E:15:01:39:57:FC:22:3C:B1:32:F1:4C:3C:4C:BE
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 01941FFA6D51374DD515D6D5B6106C275B26
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/XB2P8pqeFQE5V_wiPLEy8Uw8TL4.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200718
IP address blocks: 2a13:5682::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6d:51:37:4d:d5:15:d6:d5:b6:10:6c:27:5b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c1d8ff29a9e15013957fc223cb132f14c3c4cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:39:f1:5b:df:b0:8f:27:eb:69:f5:a6:18:
ff:87:08:56:81:d4:cb:20:99:1d:f7:52:22:c1:b0:
5f:1d:15:ef:89:f1:e2:23:96:8f:c4:71:e1:1a:5c:
d7:c2:32:b8:98:2e:82:d0:d5:0f:17:fb:06:ee:dd:
eb:69:68:40:6b:ce:a8:63:f6:23:d1:79:ad:e7:0a:
32:99:93:79:55:c9:7b:ab:0f:c1:44:08:fe:34:a0:
f9:84:aa:aa:8d:24:58:da:8b:40:94:f3:59:02:09:
e9:5e:83:4f:7a:5b:ab:21:f8:08:36:aa:26:5c:d8:
48:d0:7c:6b:f3:29:17:f3:61:f1:fe:24:3e:b5:36:
6a:04:1d:f4:77:37:5b:c5:43:28:15:1f:8f:d7:5e:
48:b1:96:b7:a5:8c:da:1c:2f:a7:92:0e:ad:ad:38:
f2:c6:2d:40:b8:0e:e9:4d:87:cf:28:ac:da:fe:7b:
2c:81:ad:7e:cd:00:16:f7:d5:51:24:fe:98:3f:f7:
7a:cd:68:2a:d5:b7:d8:81:62:ca:97:51:d8:01:11:
4c:a8:1f:34:39:8a:6f:1c:04:c6:4d:d5:78:6a:0b:
f3:ea:9b:2e:36:15:cd:f3:a3:5e:c9:8c:89:f8:4b:
c1:49:06:11:c7:2d:22:0e:05:c5:6f:ec:cf:72:ce:
0f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1D:8F:F2:9A:9E:15:01:39:57:FC:22:3C:B1:32:F1:4C:3C:4C:BE
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/XB2P8pqeFQE5V_wiPLEy8Uw8TL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5682::/40
Signature Algorithm: sha256WithRSAEncryption
79:00:cf:af:db:ed:80:cb:33:2e:b9:f5:2d:56:1d:cf:da:34:
5c:a2:a6:06:68:08:19:5d:ff:d7:ea:2e:bb:6e:db:6e:ba:91:
30:4a:47:5b:7f:03:00:35:5f:ef:76:2e:38:c6:ce:a5:a6:17:
ee:5b:31:c0:02:48:1a:06:85:ed:9c:51:8a:2b:d8:d5:48:82:
a5:92:6a:81:50:a8:05:4f:c4:a3:ce:83:40:70:96:71:83:3d:
b2:6a:67:bb:fc:53:f4:03:81:5a:b4:ae:93:6e:9d:2d:cf:c4:
38:2f:a5:e9:2b:f8:07:0b:f7:73:ad:db:55:90:08:ac:10:eb:
47:41:47:8c:01:40:68:89:ec:73:12:c4:39:b3:01:b9:01:50:
08:bf:09:46:d6:1a:d2:73:cf:26:cf:07:e1:27:44:ae:2c:06:
ac:d3:56:80:bf:f1:5b:9a:ff:76:51:eb:70:dc:14:58:ef:fa:
d8:f2:b6:25:39:b9:aa:28:7f:0e:e2:c6:ef:c8:ba:c5:9e:20:
04:61:95:bb:fc:38:af:bc:b5:87:11:b5:c4:c8:cd:78:0e:4f:
d3:4b:37:d0:07:b0:33:cb:8f:0c:69:47:fa:ed:a9:69:e2:fe:
3b:c9:2c:3c:f8:6c:fa:3c:25:bf:9c:55:78:df:98:f1:a0:87:
8c:9a:6d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:13 2025 by rpki-client