Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/27IpBxR2D8_iRTp1ZebUJjNMQ7E.roa
File: 27IpBxR2D8_iRTp1ZebUJjNMQ7E.roa (raw, json)
Hash identifier: M2K4hgMgo9+z2THk8cplkT7mnkDeMqyV1xRhBWixRg4=
Subject key identifier: DB:B2:29:07:14:76:0F:CF:E2:45:3A:75:65:E6:D4:26:33:4C:43:B1
Certificate issuer: /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial: 0194221F9D6D718B18EAB5F1492F9D331EBB
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/27IpBxR2D8_iRTp1ZebUJjNMQ7E.roa
Signing time: Wed 01 Jan 2025 13:48:04 +0000
ROA not before: Wed 01 Jan 2025 13:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134450
IP address blocks: 2a13:c44::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9d:6d:71:8b:18:ea:b5:f1:49:2f:9d:33:1e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
Validity
Not Before: Jan 1 13:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbb2290714760fcfe2453a7565e6d426334c43b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:c6:dc:69:05:7e:20:70:02:ba:62:22:51:
e5:77:5f:a5:45:5b:28:cd:f0:5b:eb:0e:42:7f:c8:
8a:12:72:a1:3e:a7:5c:94:51:ec:e4:40:04:5b:44:
58:c4:2c:01:13:0b:11:5d:10:94:2d:73:31:26:86:
47:ce:1e:77:63:e3:b6:a6:41:2a:69:be:b8:17:39:
9b:16:11:97:2a:73:35:cc:4c:1f:2d:a1:f1:6e:90:
be:39:a7:d1:a1:53:81:a7:ed:1e:5b:98:d5:4f:3e:
af:9b:51:4b:b9:ab:c0:2d:29:b1:78:3c:99:f1:5c:
2a:3b:f0:3f:60:9a:8b:fb:3c:26:9f:d3:d2:30:cc:
f9:43:5c:f5:a6:54:ce:8f:9c:51:9c:57:ba:65:ab:
c4:ef:3a:99:00:9d:89:d5:08:a6:e4:6f:12:70:b5:
ff:a9:ee:08:da:c6:e3:07:55:8f:22:d9:69:e0:88:
16:62:98:6b:6b:af:a3:63:b4:2c:1d:5c:67:54:18:
90:ae:d9:ed:c4:11:af:d2:fc:78:97:3f:8a:8a:db:
55:52:8c:74:8a:32:2c:51:ec:d4:63:53:c9:a9:43:
5d:1f:91:bf:40:8d:76:db:2c:1a:eb:bf:d7:9c:11:
ab:d0:8a:b8:93:08:9f:00:fa:b4:37:45:50:7a:1f:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B2:29:07:14:76:0F:CF:E2:45:3A:75:65:E6:D4:26:33:4C:43:B1
X509v3 Authority Key Identifier:
keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/27IpBxR2D8_iRTp1ZebUJjNMQ7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c44::/30
Signature Algorithm: sha256WithRSAEncryption
bc:b0:41:95:7c:84:fa:5f:3f:8d:75:48:06:c7:48:a2:80:72:
18:8b:4b:a0:30:65:e3:a6:3e:a7:6e:20:37:a3:67:cc:f0:48:
3b:2a:b8:92:3d:c7:97:a8:98:74:e9:20:68:30:20:b4:66:aa:
46:42:c0:02:72:19:db:bd:27:58:c7:cf:28:65:47:4c:17:b4:
72:fc:94:67:3d:da:ee:9d:66:08:24:a7:1b:6c:6b:6c:af:c8:
05:40:ac:2a:62:e0:38:24:f0:d0:a4:99:04:8e:a6:6c:52:5a:
6b:3f:19:d6:e8:66:d9:fd:71:2b:0d:47:04:73:e8:9a:1d:07:
f4:6d:95:37:93:e3:28:66:2a:86:07:23:c8:39:2e:5f:48:c4:
5d:29:99:3a:14:28:20:a9:1f:de:f5:0c:16:3d:77:70:e6:ef:
4a:0c:ae:95:b2:ba:96:e9:db:b3:96:7c:7e:4f:3d:ca:8d:3c:
b0:58:9e:0b:eb:6f:a5:92:6f:6f:b7:20:f9:0b:a5:34:0e:0e:
1e:fa:73:ad:38:36:3c:92:6a:95:7a:2e:24:69:54:1b:5a:3f:
70:1d:cc:27:15:1d:31:64:50:04:52:d2:65:85:eb:4e:dd:b7:
f2:f0:7b:f6:8d:7e:04:08:95:af:40:75:a7:8f:ae:88:1c:4c:
01:7c:4c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:33:50 2025 by rpki-client