Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/3vdSYlPhYCcKWdxmctUlZz3LRrA.roa
File: 3vdSYlPhYCcKWdxmctUlZz3LRrA.roa (raw, json)
Hash identifier: JYH+c4M07iZOS3Xafi4xgQEUcEXeZVf7HAqO1Fudxb4=
Subject key identifier: DE:F7:52:62:53:E1:60:27:0A:59:DC:66:72:D5:25:67:3D:CB:46:B0
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 019421B1C83CA5D6B88B982B1C6AEA7BB563
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/3vdSYlPhYCcKWdxmctUlZz3LRrA.roa
Signing time: Wed 01 Jan 2025 11:48:06 +0000
ROA not before: Wed 01 Jan 2025 11:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:cb42:8013::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c8:3c:a5:d6:b8:8b:98:2b:1c:6a:ea:7b:b5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Jan 1 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=def7526253e160270a59dc6672d525673dcb46b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:62:17:a9:37:52:81:eb:24:0e:aa:1c:06:2b:
4b:6f:bc:8e:b6:71:9b:ef:ce:1c:c2:3b:b4:43:8b:
f8:0d:7e:df:26:1e:2e:08:6d:ca:f8:f5:76:d3:18:
ee:06:b2:e4:29:08:1f:e4:f5:46:55:bd:ec:4a:d0:
e9:59:c3:d1:06:d9:af:7e:7d:fe:ea:9f:1f:0c:0b:
27:5a:77:e0:44:c2:41:69:77:72:a9:c5:71:4e:1e:
2f:eb:1d:28:cd:6d:f6:00:9b:12:54:09:cc:19:ee:
c5:be:4b:ba:d2:b1:9c:fa:27:bd:ba:47:28:a9:60:
83:65:ca:8a:ac:7c:70:12:dc:8f:2e:d8:a2:aa:e4:
9a:2a:51:78:00:43:9d:79:a4:9a:b8:98:37:dc:4c:
26:06:b4:c1:b8:b5:f2:2f:e1:11:d8:f2:df:4a:7a:
d7:ae:b1:2a:65:6d:68:cf:c1:1d:4e:20:b5:24:56:
48:c7:3e:f0:e0:60:1f:58:7d:e7:a0:03:0c:45:2f:
7f:ae:2f:c8:46:5d:02:3c:c9:30:bb:39:d6:2d:fe:
1d:ce:d4:96:7b:8a:95:eb:53:a1:2d:b9:f9:0b:9b:
5d:ef:63:4b:c8:e0:3d:1d:bb:33:8e:f3:1e:56:76:
8f:82:db:34:70:2a:5c:8e:4c:da:96:bf:89:49:4b:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F7:52:62:53:E1:60:27:0A:59:DC:66:72:D5:25:67:3D:CB:46:B0
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/3vdSYlPhYCcKWdxmctUlZz3LRrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cb42:8013::/48
Signature Algorithm: sha256WithRSAEncryption
05:5e:ee:6b:51:7d:d1:31:bf:56:23:66:43:aa:fb:df:44:5f:
2b:c8:d8:ca:e3:4c:72:c6:6b:57:68:24:fa:60:49:12:58:0c:
25:b9:33:25:e0:4b:e7:ca:26:c1:08:8c:8b:8b:81:da:6a:ce:
a1:c5:23:70:59:aa:3c:a6:4d:1a:e6:e9:e5:30:b9:eb:ab:40:
0a:95:6f:57:da:38:09:2e:31:71:33:dc:8b:19:17:93:9b:3a:
d5:e8:9d:da:b7:8d:3a:5b:88:f9:ad:4b:5c:bb:57:b9:21:35:
38:ff:7a:b9:50:c4:97:95:2a:a2:ba:7d:23:38:b7:cf:40:93:
2a:c3:4a:61:b7:68:2d:3e:65:7f:90:be:55:65:82:a5:cf:53:
ba:e1:c2:88:cc:13:00:85:6d:9f:2e:17:7b:bf:f7:52:0f:b7:
d6:9e:ba:a7:40:11:e8:4b:71:33:78:f7:3b:14:0b:f0:84:60:
ed:de:59:21:2a:44:e2:5d:62:87:ee:85:e7:d0:f3:d0:28:cc:
c9:b1:c5:e9:1a:8f:2a:9a:d5:f1:be:2a:19:66:6e:d9:5e:db:
1c:08:fb:bd:0e:10:46:3a:69:f7:bf:a5:52:97:8c:8e:d1:4f:
8d:40:47:9c:8c:f3:3d:06:40:00:b0:f9:65:a0:0c:f2:6f:55:
b6:2a:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:59 2025 by rpki-client