Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/As7V6ZE1xBs1gl2SXAEbNIUHC00.roa
File: As7V6ZE1xBs1gl2SXAEbNIUHC00.roa (raw, json)
Hash identifier: kQVt6PxymkEnwafOS16jS1OEQiU/aYHOchiiJ14/rGk=
Subject key identifier: 02:CE:D5:E9:91:35:C4:1B:35:82:5D:92:5C:01:1B:34:85:07:0B:4D
Certificate issuer: /CN=d914da56e1a934649da02964ac12eba34c5cb84f
Certificate serial: 0194258E37CCFA4A7E901B44E8B1B6DD0EC4
Authority key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/As7V6ZE1xBs1gl2SXAEbNIUHC00.roa
Signing time: Thu 02 Jan 2025 05:47:44 +0000
ROA not before: Thu 02 Jan 2025 05:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48883
IP address blocks: 2a13:e3c1:9b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:37:cc:fa:4a:7e:90:1b:44:e8:b1:b6:dd:0e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d914da56e1a934649da02964ac12eba34c5cb84f
Validity
Not Before: Jan 2 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02ced5e99135c41b35825d925c011b3485070b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:52:d9:4f:35:90:f5:c7:7b:98:5d:92:88:58:
d3:60:cb:d6:4b:b7:ec:cb:59:df:13:dd:70:f9:b6:
fe:07:e5:d0:47:32:14:3f:77:e1:91:94:e3:27:92:
7e:73:4a:23:7c:72:67:0c:40:fd:db:a5:b1:7b:3c:
c0:af:9a:64:3f:3c:43:4f:dd:18:b6:04:8e:a1:89:
82:cc:09:ad:84:23:90:69:c8:d4:83:ae:d8:58:45:
0d:68:93:58:19:54:ec:e3:7e:54:29:db:82:9a:24:
c1:ae:89:21:89:56:46:53:2a:dd:3f:02:25:8a:73:
ca:d3:90:d1:0b:77:7a:22:97:a8:8c:f6:10:eb:1b:
6f:44:dc:f6:b1:4a:f9:30:06:da:7d:06:53:a1:8b:
c9:ae:39:d3:4b:9d:08:c2:39:81:e1:b7:94:ef:af:
01:27:b6:61:16:fc:92:94:e8:38:f5:3d:4a:e3:85:
fc:33:22:27:b9:64:7d:80:60:36:99:17:29:f0:09:
b8:d9:1e:21:fc:10:a1:d5:99:51:58:34:df:6e:2c:
0b:63:86:e3:90:ab:37:bd:3c:fd:59:cb:91:0f:ce:
25:19:1b:11:46:04:23:2f:77:bd:d6:ce:9f:ab:c5:
f7:21:f9:99:62:c0:6d:03:a4:2c:0e:a6:69:6f:5b:
13:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CE:D5:E9:91:35:C4:1B:35:82:5D:92:5C:01:1B:34:85:07:0B:4D
X509v3 Authority Key Identifier:
keyid:D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/As7V6ZE1xBs1gl2SXAEbNIUHC00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e3c1:9b::/48
Signature Algorithm: sha256WithRSAEncryption
86:3a:e2:ab:f7:82:ed:85:f2:d3:5c:3a:90:cc:a5:af:b9:b1:
51:d8:29:75:28:b3:33:07:0b:12:17:51:13:33:61:04:e7:a0:
e3:89:e8:f6:60:9f:3d:a9:c9:02:aa:97:e8:46:93:78:6b:bb:
4c:cc:2b:32:53:9c:6c:db:f9:3e:bf:57:19:44:40:97:a7:f5:
b5:ad:70:e7:b0:e7:54:cd:75:89:be:0f:3c:a6:bf:18:75:66:
0e:b3:4b:e1:c2:9f:84:2a:5d:29:f4:9b:cb:a6:07:b1:38:64:
86:d7:e1:c5:69:8f:87:bd:93:03:e0:d8:1a:1f:dc:45:1a:38:
e7:b9:7c:2f:52:db:08:2f:f9:60:5a:83:64:bf:c4:40:a2:13:
a4:48:bf:99:07:0e:a9:e1:e1:d4:8b:01:94:aa:9a:55:cb:e7:
45:9b:97:44:12:dd:79:60:27:47:7e:ca:4e:4a:6e:7b:56:fb:
e9:f7:f1:15:ae:9f:dd:5b:fb:bb:09:7a:43:43:a3:5c:4d:29:
93:22:b6:65:01:0f:97:f5:6b:99:2e:7d:9c:b8:9f:ee:f2:5d:
0e:e1:3d:95:13:96:05:d2:47:00:ab:7c:a3:4d:6a:32:a7:2e:
df:a9:b7:ae:d1:e4:4f:de:2a:33:9f:d6:b8:69:69:d4:8e:46:
b7:4b:6b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:42 2025 by rpki-client