Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/XF_tELerxIJe3AvuEfzaGSpB7v0.roa
File: XF_tELerxIJe3AvuEfzaGSpB7v0.roa (raw, json)
Hash identifier: +FTMbyUWbSM8YVsBAJ6ntB4dQrz6I5oBjT55t8f8S2s=
Subject key identifier: 5C:5F:ED:10:B7:AB:C4:82:5E:DC:0B:EE:11:FC:DA:19:2A:41:EE:FD
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018A07E381F4B804E13422B0251BACD9F6DD
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/XF_tELerxIJe3AvuEfzaGSpB7v0.roa
Signing time: Fri 18 Aug 2023 09:04:24 +0000
ROA not before: Fri 18 Aug 2023 09:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48261
IP address blocks: 2a12:4b40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:e3:81:f4:b8:04:e1:34:22:b0:25:1b:ac:d9:f6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Aug 18 09:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c5fed10b7abc4825edc0bee11fcda192a41eefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:f0:84:fd:b0:dc:6f:0f:02:ce:2b:bb:82:
b8:71:fc:ac:5f:f5:38:09:64:92:7d:5d:03:ac:96:
7a:c0:c4:05:b8:89:a3:f5:57:89:eb:fa:ef:d1:6e:
93:cf:e5:14:ed:46:d3:69:f3:06:c1:29:4c:fe:8f:
be:18:20:3e:21:55:83:b0:f8:a3:f0:76:9a:cf:b7:
8b:b4:a4:44:dd:43:83:c7:cb:5b:58:5a:30:d3:23:
b6:4b:fd:39:41:8c:c1:10:92:6a:74:de:67:50:9a:
1e:54:df:0c:d8:9e:98:02:8b:cf:92:ce:df:e2:60:
c0:92:5a:35:a6:63:4b:0e:f6:75:15:ed:98:26:ca:
82:5f:e0:35:69:61:86:1b:ec:47:8e:91:fb:92:7f:
96:81:43:0f:57:3e:df:b9:a6:12:50:ad:e1:1d:55:
20:f2:46:64:66:36:45:b6:04:ba:3e:fd:a8:08:83:
82:1e:08:31:b5:02:1f:99:b8:d1:6c:87:04:fc:48:
c4:5e:8b:d7:7f:b8:e7:fd:9f:c9:a9:75:ea:a5:5b:
7c:38:64:91:c7:56:39:97:00:ac:c7:81:a6:e4:09:
5e:4c:bc:22:46:2a:e3:a9:90:c9:34:e8:8c:84:d2:
2f:ee:56:9a:9e:6d:c1:5c:71:20:65:37:e7:36:19:
85:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5F:ED:10:B7:AB:C4:82:5E:DC:0B:EE:11:FC:DA:19:2A:41:EE:FD
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/XF_tELerxIJe3AvuEfzaGSpB7v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
0d:2c:ec:7d:a5:5c:8f:5e:0a:13:96:d5:eb:3e:d5:cd:47:ec:
33:73:1a:fb:80:7c:de:dc:ed:85:08:41:33:72:7b:b8:1e:f0:
d7:70:dc:16:11:2a:bf:89:cb:5a:b4:e8:14:00:fc:e7:d5:8c:
0d:ad:e5:a8:f6:c3:6a:a3:a0:2f:5f:4c:94:a3:e6:a5:80:72:
00:be:b8:e6:61:80:be:c7:7a:01:0c:dd:0d:da:f5:7e:f7:6f:
d5:57:47:cc:c5:fa:7f:0d:2e:2c:43:11:f0:bd:3a:7d:56:f1:
2a:21:5d:f4:a3:9f:45:ab:08:de:51:31:c3:f6:9d:b4:78:c8:
1b:ff:1b:de:9a:62:76:c8:5b:c6:4e:70:31:1e:a4:95:22:c8:
89:40:ae:6b:2f:dc:d0:a6:98:2b:9a:ad:d3:82:d3:bb:35:71:
44:b4:62:68:bc:81:c4:95:0a:38:c6:2c:74:63:49:29:48:97:
70:55:e4:04:3c:f5:04:96:f8:6f:c6:6e:3f:d8:2b:a0:00:0a:
a0:91:32:d7:b2:44:9d:07:10:7c:14:68:d0:28:d9:3b:d5:9d:
7a:a2:6d:c4:5f:d0:f3:78:d9:b5:3c:f5:98:08:e5:5b:1f:19:
0b:df:85:75:74:fe:ec:28:4a:b8:3b:1e:34:c4:47:83:88:70:
4d:ef:7e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:19:57 2025 by rpki-client