Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/E_vNeWHi7no6xEOD4-IFUETrmhw.roa
File: E_vNeWHi7no6xEOD4-IFUETrmhw.roa (raw, json)
Hash identifier: XXuZ/UPoimaJVHIFLTndlenANUDBTB2Jl0fZ7dp7Ri0=
Subject key identifier: 13:FB:CD:79:61:E2:EE:7A:3A:C4:43:83:E3:E2:05:50:44:EB:9A:1C
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D60E5C7648624CA69D16097C765371
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/E_vNeWHi7no6xEOD4-IFUETrmhw.roa
Signing time: Wed 01 Jan 2025 07:48:06 +0000
ROA not before: Wed 01 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33823
IP address blocks: 2a05:b680::/48 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0e:5c:76:48:62:4c:a6:9d:16:09:7c:76:53:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13fbcd7961e2ee7a3ac44383e3e2055044eb9a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:c3:aa:91:7b:82:9e:53:fb:40:28:74:93:
0c:84:be:06:ef:59:bb:19:f8:19:bc:ef:2b:69:01:
12:59:1c:57:c5:6c:43:aa:c2:84:60:67:4b:1d:87:
d8:7d:e6:b9:4c:41:8b:c6:47:62:bc:d5:30:a2:6e:
e1:e9:72:82:65:27:12:53:15:94:e8:f9:20:88:2a:
7a:a1:a6:c9:6f:18:a6:db:9e:f0:f1:87:27:21:b6:
a4:2f:ac:6b:6c:70:c9:ce:5c:00:0b:8e:43:35:f3:
68:49:3f:ca:bb:fd:ef:73:f1:34:88:a7:08:03:fa:
31:f2:b8:b5:14:86:c0:c3:5f:ba:e8:ac:ba:72:b0:
3f:69:41:ff:90:2c:c4:fa:21:e4:17:91:b9:8e:ac:
20:1e:48:8b:86:68:20:d9:5a:90:5c:1c:69:c1:a3:
93:77:1f:dd:51:2c:b0:30:92:5f:e0:df:2d:bc:d5:
94:10:ea:9f:76:25:e8:ab:8d:18:e7:10:4c:e5:ef:
f8:bf:7d:40:a9:ab:a5:d7:24:0f:78:c7:2a:ac:4e:
37:16:b5:cf:a0:b9:5f:cf:1c:b2:58:33:0b:42:c4:
fa:c4:f1:a2:00:45:07:70:bd:ee:fe:76:08:ea:2e:
3c:fa:ea:61:d2:88:88:70:88:69:a3:d0:21:36:cc:
2d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FB:CD:79:61:E2:EE:7A:3A:C4:43:83:E3:E2:05:50:44:EB:9A:1C
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/E_vNeWHi7no6xEOD4-IFUETrmhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b680::/48
Signature Algorithm: sha256WithRSAEncryption
a0:07:04:0e:ea:5f:cc:ab:3f:6e:57:90:1f:33:be:6e:e9:04:
0b:6c:f3:87:98:05:72:a3:2a:14:df:88:26:66:08:a8:c8:14:
8c:d5:39:43:fa:4a:ef:e8:67:8a:75:20:50:1d:17:0a:1a:30:
9a:3c:96:fa:fc:2c:4d:f1:37:f5:1e:6d:16:3d:a8:dd:17:f0:
be:fe:b6:47:7f:c5:a2:fc:6f:79:1f:9c:d2:7a:c2:d5:32:41:
39:c8:54:2f:a2:e4:01:94:8a:46:c4:7b:df:1e:15:62:db:a7:
cd:49:8d:98:09:a2:63:2b:25:dc:53:12:7d:65:ba:85:cd:8f:
1a:b4:38:b1:a6:8e:8f:ed:4e:b5:36:fa:bc:b3:34:f8:83:db:
94:58:ae:93:f4:d0:82:36:66:13:6d:ee:81:0c:be:8c:08:a7:
b2:14:18:ae:24:a8:42:f9:a3:37:ed:88:75:ac:10:93:a1:02:
0a:6f:ba:52:fb:8f:3a:a7:27:3e:5d:07:c0:fd:cc:fb:c8:24:
11:07:b2:cc:49:b0:77:b9:d4:a8:c1:b7:84:65:df:13:72:62:
af:9c:d9:b7:d1:18:6f:f7:ba:89:f2:33:8e:51:2a:b3:2b:57:
00:39:21:d9:6f:9d:5a:e4:96:cc:a3:e0:a3:54:8b:7c:5c:12:
7a:db:24:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:53 2025 by rpki-client