Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/XMirD3qG50TrikmGR0PujWf3jjs.roa
File: XMirD3qG50TrikmGR0PujWf3jjs.roa (raw, json)
Hash identifier: iR/AZzWdddK7a5E0N2BfP3yz4LyY5Uji67zQAihWnBU=
Subject key identifier: 5C:C8:AB:0F:7A:86:E7:44:EB:8A:49:86:47:43:EE:8D:67:F7:8E:3B
Certificate issuer: /CN=4457373e1a686d6b59ee85dc37899d06531386e5
Certificate serial: 0194B91063B663BBE5726DC60E1E82840D97
Authority key identifier: 44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/XMirD3qG50TrikmGR0PujWf3jjs.roa
Signing time: Thu 30 Jan 2025 21:14:06 +0000
ROA not before: Thu 30 Jan 2025 21:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214307
IP address blocks: 2001:678:1018::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:10:63:b6:63:bb:e5:72:6d:c6:0e:1e:82:84:0d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4457373e1a686d6b59ee85dc37899d06531386e5
Validity
Not Before: Jan 30 21:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cc8ab0f7a86e744eb8a49864743ee8d67f78e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:60:5d:69:49:e5:d5:89:31:d3:85:f3:57:
78:ba:31:c2:7f:21:82:02:c6:c3:ab:c8:f4:94:22:
58:b9:36:b1:54:c5:9e:22:ca:d9:0b:da:ce:6f:7e:
f2:e7:22:6d:44:97:4e:04:3c:e2:6c:be:5c:39:47:
af:0d:8c:09:92:50:ee:d1:d2:b3:ec:b0:11:39:94:
7b:8c:df:e1:70:66:cc:6f:2c:76:03:bb:ce:05:11:
4c:6e:39:95:0e:ae:cc:06:bd:0c:6a:c3:c3:3e:e3:
5a:64:95:85:38:c5:c8:24:33:7e:21:8b:c4:c0:1c:
3b:f3:49:ed:bc:ce:b5:24:be:92:15:8d:a6:56:77:
cb:57:11:d8:d2:97:0d:e8:62:58:e3:35:4e:c3:22:
0b:69:64:1f:f6:87:65:a9:a8:20:57:7b:b4:51:90:
e6:c8:e4:72:51:63:f1:83:60:11:2d:78:9a:4f:42:
0f:e0:51:64:74:e1:03:66:eb:53:56:f1:d2:f9:7e:
17:35:b7:6b:1b:9b:1c:aa:da:af:b1:a0:06:54:0d:
42:68:dc:35:00:2b:9d:35:d1:f6:2c:b1:49:2d:70:
b6:5d:a7:0b:8b:56:31:c4:9d:00:c1:48:72:23:f2:
59:e3:be:d9:a1:13:8e:77:f0:71:56:f9:8b:23:f6:
8e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C8:AB:0F:7A:86:E7:44:EB:8A:49:86:47:43:EE:8D:67:F7:8E:3B
X509v3 Authority Key Identifier:
keyid:44:57:37:3E:1A:68:6D:6B:59:EE:85:DC:37:89:9D:06:53:13:86:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFc3PhpobWtZ7oXcN4mdBlMThuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/XMirD3qG50TrikmGR0PujWf3jjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/886253-8417-4e45-8e26-9e8643685133/1/RFc3PhpobWtZ7oXcN4mdBlMThuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1018::/48
Signature Algorithm: sha256WithRSAEncryption
65:c7:02:5d:3e:15:1d:42:0d:df:f4:bd:75:78:95:cf:58:0e:
83:f1:5c:80:e3:4a:fe:83:f1:86:40:f7:d1:b8:ed:78:07:5b:
bd:3b:c9:37:c1:bd:b7:64:31:52:17:f8:c9:1b:3b:2a:d2:58:
be:97:27:2c:fa:d7:6e:1e:7f:1e:13:dd:5f:81:c9:13:40:81:
c8:dc:c7:11:4c:75:b6:96:a5:01:0f:a1:bd:db:71:8e:e4:3f:
25:4e:11:ee:ae:24:a2:5a:66:b7:48:92:3c:79:64:c5:e8:87:
32:cd:bb:e1:72:9d:8c:82:f2:d3:2e:7e:28:8b:8c:0a:c2:f0:
5f:90:ab:6a:fe:8c:66:ba:2c:8e:a4:35:bf:0a:59:5e:62:e1:
40:d5:6f:99:d5:c9:8e:23:8c:2a:bb:0f:3b:e7:38:c8:e6:82:
f8:65:64:21:68:60:c7:b8:b8:99:b9:91:6b:8f:12:a7:68:95:
aa:5c:6b:f0:4b:4d:86:d0:bc:f2:95:ac:45:ed:03:b8:e6:d3:
ca:fb:2b:a9:6c:2a:b0:8c:d2:73:2b:0c:9b:38:fd:ee:df:04:
ac:bb:53:82:41:7d:9d:ee:91:4a:3f:56:5d:88:66:43:95:3f:
a0:2e:5d:b4:8b:3e:b6:4e:12:12:c6:4b:b5:91:5f:ac:6e:0c:
82:69:31:43
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZS5EGO2Y7vlcm3GDh6ChA2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTczNzNlMWE2ODZkNmI1OWVlODVkYzM3ODk5ZDA2NTMx
Mzg2ZTUwHhcNMjUwMTMwMjExNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2M4YWIwZjdhODZlNzQ0ZWI4YTQ5ODY0NzQzZWU4ZDY3Zjc4ZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzRgXWlJ5dWJMdOF81d4ujHCfyGC
AsbDq8j0lCJYuTaxVMWeIsrZC9rOb37y5yJtRJdOBDzibL5cOUevDYwJklDu0dKz
7LAROZR7jN/hcGbMbyx2A7vOBRFMbjmVDq7MBr0MasPDPuNaZJWFOMXIJDN+IYvE
wBw780ntvM61JL6SFY2mVnfLVxHY0pcN6GJY4zVOwyILaWQf9odlqaggV3u0UZDm
yORyUWPxg2ARLXiaT0IP4FFkdOEDZutTVvHS+X4XNbdrG5scqtqvsaAGVA1CaNw1
ACudNdH2LLFJLXC2XacLi1YxxJ0AwUhyI/JZ477ZoROOd/BxVvmLI/aOXwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFzIqw96hudE64pJhkdD7o1n9447MB8GA1UdIwQY
MBaAFERXNz4aaG1rWe6F3DeJnQZTE4blMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZjM1BocG9iV3RaN29YY040bWRCbE1UaHVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ODYyNTMtODQxNy00ZTQ1LThlMjYt
OWU4NjQzNjg1MTMzLzEvWE1pckQzcUc1MFRyaWttR1IwUHVqV2YzampzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84ODYyNTMtODQxNy00ZTQ1LThlMjYtOWU4NjQzNjg1MTMz
LzEvUkZjM1BocG9iV3RaN29YY040bWRCbE1UaHVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBAY
MA0GCSqGSIb3DQEBCwUAA4IBAQBlxwJdPhUdQg3f9L11eJXPWA6D8VyA40r+g/GG
QPfRuO14B1u9O8k3wb23ZDFSF/jJGzsq0li+lycs+tduHn8eE91fgckTQIHI3McR
THW2lqUBD6G923GO5D8lThHuriSiWma3SJI8eWTF6Icyzbvhcp2MgvLTLn4oi4wK
wvBfkKtq/oxmuiyOpDW/ClleYuFA1W+Z1cmOI4wquw875zjI5oL4ZWQhaGDHuLiZ
uZFrjxKnaJWqXGvwS02G0LzylaxF7QO45tPK+yupbCqwjNJzKwybOP3u3wSsu1OC
QX2d7pFKP1ZdiGZDlT+gLl20iz62ThISxku1kV+sbgyCaTFD
-----END CERTIFICATE-----
Generated at Fri Apr 25 18:07:34 2025 by rpki-client