Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/XZy3ulNvIp8sqhimnzZ9N68t-r4.roa
File: XZy3ulNvIp8sqhimnzZ9N68t-r4.roa (raw, json)
Hash identifier: LwZ5OyNONDVDDu/uUaFR527Cv+78n/C+SpHHY5p0lkc=
Subject key identifier: 5D:9C:B7:BA:53:6F:22:9F:2C:AA:18:A6:9F:36:7D:37:AF:2D:FA:BE
Certificate issuer: /CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Certificate serial: 019369DECFDE34DFDB8A1FC124669A929529
Authority key identifier: C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/XZy3ulNvIp8sqhimnzZ9N68t-r4.roa
Signing time: Tue 26 Nov 2024 19:07:09 +0000
ROA not before: Tue 26 Nov 2024 19:07:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 2a05:600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:de:cf:de:34:df:db:8a:1f:c1:24:66:9a:92:95:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a9484ca708ab771eb1db90bafc8a114c2c3d79
Validity
Not Before: Nov 26 19:07:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d9cb7ba536f229f2caa18a69f367d37af2dfabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:83:a3:9f:b7:8f:58:cc:15:d2:6b:6f:20:3c:
30:ca:d3:b0:91:32:e9:e8:73:1d:39:ea:84:5e:8d:
14:7b:6b:52:b0:0b:90:97:65:51:7c:c6:50:64:9c:
f7:55:f2:01:6f:87:2b:1c:47:00:ae:a9:44:bf:98:
be:e1:d5:bc:0d:01:91:1d:00:ec:fd:51:79:00:b8:
bc:26:11:8e:8d:0d:4f:59:e8:59:e7:fc:39:21:08:
64:74:04:0e:19:ac:03:bf:90:8d:c4:b6:f5:ec:ff:
8b:52:fc:85:95:b2:3b:a0:87:19:ea:90:1f:c7:3e:
87:18:23:e3:7e:69:b6:63:7c:7d:5c:3f:5b:4d:c4:
b5:06:a6:a2:fc:98:62:5e:ab:ef:5f:60:f8:cd:e2:
a3:db:4b:5e:69:20:b2:6f:3f:a5:24:13:0f:e6:75:
89:24:cd:d5:6a:e5:50:e1:3d:5a:96:8d:d7:85:5b:
dc:f0:df:68:0b:15:d5:c6:23:6c:90:b9:f8:40:02:
c0:2a:db:6c:22:5a:fd:ae:1d:a7:32:99:7d:2b:ad:
7f:47:ed:f6:76:96:d6:d6:09:1e:e6:41:0f:f1:f4:
ef:14:89:11:ae:ff:93:33:b3:62:d9:74:e1:62:94:
ef:97:fe:96:b9:72:37:4e:29:dd:ec:21:09:b0:b3:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9C:B7:BA:53:6F:22:9F:2C:AA:18:A6:9F:36:7D:37:AF:2D:FA:BE
X509v3 Authority Key Identifier:
keyid:C9:A9:48:4C:A7:08:AB:77:1E:B1:DB:90:BA:FC:8A:11:4C:2C:3D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yalITKcIq3cesduQuvyKEUwsPXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/XZy3ulNvIp8sqhimnzZ9N68t-r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/25e660-4056-42cc-a8b0-d0517db26dad/1/yalITKcIq3cesduQuvyKEUwsPXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:600::/29
Signature Algorithm: sha256WithRSAEncryption
13:da:94:9c:c5:ab:90:5f:6f:36:11:e8:6a:a6:e5:5e:75:fc:
1c:92:b1:3d:d0:73:e8:22:05:59:26:9a:56:f4:16:f7:1b:8c:
69:6a:35:d9:c3:c5:ff:6c:c9:db:2a:6f:5c:04:57:01:fc:9d:
16:81:64:f6:41:b7:c4:9e:55:36:da:23:3f:ef:6b:1e:6f:4a:
04:b2:16:1b:2f:9d:7c:bc:b8:9b:c1:48:80:ed:23:14:05:0e:
68:0a:ce:ae:05:a1:bb:e9:05:72:05:fa:1b:68:06:f0:97:d1:
3b:de:25:38:03:5d:66:21:94:6c:d2:17:e5:c8:51:24:61:60:
ca:40:94:d1:e7:26:a0:75:0e:72:bb:bb:12:32:8a:50:32:d9:
26:07:d8:24:98:6e:e1:fb:0c:df:c1:a0:3e:c7:9b:21:b5:82:
e7:c9:5b:6e:cb:be:22:8f:ea:24:ee:f0:28:f1:16:29:be:3e:
34:38:99:ef:05:e2:bb:c5:0d:d1:9d:1e:19:b1:7f:09:f3:ac:
05:11:2b:7f:70:85:e4:c1:12:ef:e8:cf:13:6f:bb:af:af:5b:
da:62:45:43:63:6c:d1:9f:50:df:5d:da:ba:dd:3d:1a:65:77:
21:cf:6e:71:b7:47:28:fe:fe:fa:27:16:64:9f:a9:b1:39:e1:
84:11:a5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:27 2024 by rpki-client on console.sobornost.net