Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/X_pLPinuuKYz1nSSXaFR79gvuqg.roa
File: X_pLPinuuKYz1nSSXaFR79gvuqg.roa (raw, json)
Hash identifier: v+3Y8DAI9S9X+X5m/eTRDAty0hRSLMDHxuTAo0rEA+E=
Subject key identifier: 5F:FA:4B:3E:29:EE:B8:A6:33:D6:74:92:5D:A1:51:EF:D8:2F:BA:A8
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: C420F3
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/X_pLPinuuKYz1nSSXaFR79gvuqg.roa
Signing time: Sat 01 Jan 2022 13:07:39 +0000
ROA not before: Sat 01 Jan 2022 13:07:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40028
IP address blocks: 2a0e:1c80:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12853491 (0xc420f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Jan 1 13:07:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ffa4b3e29eeb8a633d674925da151efd82fbaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:95:2f:6e:4e:4b:3b:3a:32:4e:a9:0c:d2:
bc:5a:b4:94:a7:cc:fe:b9:6f:81:1d:b6:f9:7c:a0:
83:91:ce:35:36:ac:ca:1e:5e:f3:f0:0c:dd:62:d4:
3f:cb:ff:a1:b1:6e:7b:0e:a0:20:63:ac:c1:e2:0d:
0a:50:84:0d:cf:79:4a:90:72:32:70:44:0d:e5:f2:
81:35:ca:81:33:1b:04:4a:ba:28:b4:5a:72:bf:4e:
04:34:98:a1:e2:c8:48:27:5d:30:a8:ea:36:ef:0c:
c5:6a:79:c3:1c:e0:c0:f3:25:9f:6d:2f:c9:35:12:
a2:5a:f3:4b:d8:94:94:94:2d:08:ea:3f:37:29:08:
ec:c8:8e:ce:ef:27:0c:c8:b7:89:4d:b0:bb:22:4f:
24:7b:ce:17:22:ea:30:0e:37:a9:25:71:d9:e3:68:
58:90:d1:3f:89:6d:4c:1e:11:29:05:e9:e6:80:f2:
ac:6e:57:07:30:ec:ce:2c:69:69:7f:04:a7:9d:52:
0e:f3:19:d2:9d:31:66:52:13:95:e8:84:ac:0b:32:
ba:68:d1:13:0b:01:a7:ac:b7:96:b7:a7:bf:02:0f:
d2:14:93:66:6c:f1:7d:4b:53:7c:9a:75:5d:2e:50:
b5:ff:10:9e:6d:b5:dc:bd:6d:eb:ad:39:ae:6d:e3:
20:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FA:4B:3E:29:EE:B8:A6:33:D6:74:92:5D:A1:51:EF:D8:2F:BA:A8
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/X_pLPinuuKYz1nSSXaFR79gvuqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:5::/48
Signature Algorithm: sha256WithRSAEncryption
00:0d:6b:3a:d1:71:41:12:62:3e:ee:16:86:db:0d:a0:3f:8a:
74:12:cc:95:d6:71:45:63:64:c4:b2:1e:13:97:87:dc:ba:9f:
ee:59:ef:ce:33:c6:04:a7:07:ce:e9:13:61:6f:e5:38:12:a3:
07:64:73:11:75:ec:b1:4a:52:95:d4:a3:47:04:39:67:94:29:
ec:51:dc:a3:6e:d4:5b:fa:fb:ff:51:e2:94:0f:03:d5:23:68:
f2:af:f5:a2:2c:57:b4:00:b2:2b:2d:6e:5b:fa:85:e3:29:74:
b7:f0:31:5a:21:b5:64:7b:da:3a:8a:8d:78:f2:b8:68:08:75:
91:ef:db:9a:a8:e6:b1:c6:88:b0:b4:ca:84:9d:4a:e9:4f:81:
34:96:14:9d:1b:9b:cc:75:90:5e:50:99:6e:18:fb:6b:26:62:
37:25:c3:90:5b:d2:63:f7:bf:eb:33:6f:d9:85:47:41:77:19:
6a:22:7d:0c:9a:71:91:df:c9:71:c0:bb:02:db:7f:2e:d4:ce:
eb:71:ac:30:8a:4b:e1:06:66:6f:9f:16:45:46:c6:54:ab:69:
da:92:a1:a3:b8:c7:f7:02:28:45:f2:a6:35:08:36:db:21:14:
50:6b:43:8f:ff:89:5c:b3:ed:00:5c:08:92:95:ee:b0:16:37:
2a:53:da:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:19:31 2025 by rpki-client