Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa
File: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (raw, json)
Hash identifier: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=
Subject key identifier: 8B:EB:FA:77:7C:1C:FA:C7:54:90:7F:6B:EA:A9:64:38:57:2A:0D:FD
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 01942143AE30AD9136CB2790A7F3E2260426
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa
Signing time: Wed 01 Jan 2025 09:47:51 +0000
ROA not before: Wed 01 Jan 2025 09:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204677
IP address blocks: 2a13:2200::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ae:30:ad:91:36:cb:27:90:a7:f3:e2:26:04:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bebfa777c1cfac754907f6beaa96438572a0dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d8:80:7e:05:8e:b0:90:ec:33:75:7a:f4:ab:
96:0d:4b:5b:e1:45:0d:08:74:f3:89:a4:96:bf:d6:
a2:d0:b0:08:a3:d2:c2:63:b8:ee:ac:1a:a3:e4:1f:
53:27:ff:0d:32:99:eb:f3:de:ff:07:b8:a7:22:c9:
ad:4f:87:3c:23:62:ab:52:d8:55:82:cd:0c:ea:3a:
32:8d:04:fb:09:f6:51:ae:c9:2b:3e:1b:99:37:ad:
6e:28:7e:24:71:ec:09:95:23:4f:01:fb:97:48:8c:
df:7e:b4:eb:8c:3e:5e:c5:85:80:11:fa:21:ea:d5:
4b:ce:9b:52:fd:56:63:ab:c8:d4:da:38:84:71:d1:
71:7d:c0:c9:36:93:12:79:63:21:e6:60:d9:36:d0:
8b:73:22:d8:fb:f5:c4:b3:62:18:d8:bb:1e:ad:6d:
77:d3:4f:8b:64:1d:dc:f4:04:6c:2a:2a:7b:2f:f8:
52:65:c4:c4:82:7f:ad:12:f2:8c:3f:a7:57:65:e7:
92:e0:89:b1:38:c0:83:f3:30:b4:79:34:cc:3b:e9:
93:fb:96:5e:31:bb:b7:54:4e:11:1a:3c:36:ec:f6:
82:f9:59:bd:88:5b:d6:a1:5f:e1:ff:a7:ec:a2:6c:
4f:8e:22:f2:a3:6b:bc:bf:7a:dd:d3:92:40:72:95:
1a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EB:FA:77:7C:1C:FA:C7:54:90:7F:6B:EA:A9:64:38:57:2A:0D:FD
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2200::/29
Signature Algorithm: sha256WithRSAEncryption
33:99:2f:91:2f:e6:75:97:74:35:a6:fa:d4:c5:27:07:fd:e5:
3d:cd:de:56:a7:03:dd:4d:6a:f6:9d:97:25:96:c7:58:59:43:
c3:01:5d:71:c1:2d:33:24:59:de:02:70:56:ab:b5:33:35:9e:
30:68:51:60:a8:50:4d:38:0b:1f:d1:14:86:6a:95:9c:86:ee:
62:c1:b7:c7:7c:eb:66:81:b3:73:75:00:23:e5:73:9a:b6:27:
7f:6d:ee:8c:31:66:80:72:2d:da:db:7e:50:ab:df:e1:0e:2e:
b6:20:d0:d0:8d:47:d5:49:b8:02:19:c2:c0:5f:54:56:29:81:
19:8d:09:2e:de:d7:3c:3b:8a:3f:e4:cb:ea:7d:45:3f:70:63:
e4:8f:aa:51:84:ac:f5:08:50:38:24:8a:75:10:49:69:dc:4e:
84:31:36:c6:12:cb:2a:0f:19:43:ab:cd:50:09:1c:e6:32:0c:
58:b9:5b:de:75:97:46:d9:4d:08:22:7a:02:bb:f5:d4:1f:7e:
1a:a2:40:54:0a:e1:95:40:58:25:c2:b9:d1:15:8f:7b:10:6b:
08:93:5b:35:5e:8c:1d:e3:59:7c:be:76:93:c6:53:15:5b:39:
29:e6:44:8e:c1:7c:2e:24:7b:5e:1f:09:ec:9d:8b:bb:11:d4:
49:fd:87:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:28:01 2025 by rpki-client