Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pJINU0XxJG-sdYcPZuDl5Abqelg.roa
File: pJINU0XxJG-sdYcPZuDl5Abqelg.roa (raw, json)
Hash identifier: cHkVa1oS5wAWaiAt7Uw++JpP8PqBpvZqiR6VyfwQEo0=
Subject key identifier: A4:92:0D:53:45:F1:24:6F:AC:75:87:0F:66:E0:E5:E4:06:EA:7A:58
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01944BED6FCE7A5742A04ECA356B1F10E878
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pJINU0XxJG-sdYcPZuDl5Abqelg.roa
Signing time: Thu 09 Jan 2025 16:37:19 +0000
ROA not before: Thu 09 Jan 2025 16:37:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153330
IP address blocks: 2a13:cf00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:ed:6f:ce:7a:57:42:a0:4e:ca:35:6b:1f:10:e8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 9 16:37:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4920d5345f1246fac75870f66e0e5e406ea7a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:57:f0:21:d5:92:c7:cd:51:44:02:e1:e7:
d1:5c:54:80:f6:e2:1a:07:82:53:33:8f:76:4d:84:
2d:ed:f1:38:e4:1f:02:cb:82:a4:7f:0f:43:08:af:
7a:0d:65:92:e9:02:c1:19:b0:bd:ab:6c:3d:eb:f6:
74:01:cc:e1:e0:1f:6d:5e:1a:ac:fe:22:fb:f1:c9:
f2:b9:86:ba:0e:75:90:f2:e2:c7:7f:50:db:b9:c1:
7d:45:0c:0e:e6:0f:53:26:0f:4a:5d:11:1b:c4:45:
84:2a:e6:e1:8f:5d:cb:9f:af:0b:b9:0e:59:b3:79:
b3:3f:de:4e:4a:0f:4e:15:a1:e6:fc:5f:ff:c3:90:
80:e2:4d:de:5b:ca:32:6d:c0:27:4d:f8:a5:80:80:
a3:19:9b:13:42:b3:44:76:5f:ef:61:13:78:3d:26:
86:25:70:5b:d7:b0:39:98:60:bf:7c:82:8d:02:e6:
54:cc:bf:dd:da:b2:79:aa:99:6f:bf:49:d9:42:42:
74:9e:d7:4f:79:1d:eb:39:25:76:db:40:04:e7:c2:
4d:57:c4:5a:32:3e:aa:ca:53:36:d2:7c:3f:28:20:
45:64:44:c0:6e:61:49:85:28:ba:7a:aa:d8:ed:3f:
28:eb:e0:38:a9:43:dc:db:24:ba:d4:4f:d9:88:98:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:92:0D:53:45:F1:24:6F:AC:75:87:0F:66:E0:E5:E4:06:EA:7A:58
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pJINU0XxJG-sdYcPZuDl5Abqelg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cf00::/32
Signature Algorithm: sha256WithRSAEncryption
b1:cd:50:be:0d:ce:4c:69:bc:42:e0:97:ae:ab:8e:3d:32:23:
03:15:2e:d6:0d:ed:48:2f:48:70:39:35:cb:48:ac:f8:f4:e0:
60:a1:d2:55:17:08:a0:af:8a:83:5a:3c:40:6c:34:73:dd:68:
8d:26:c2:44:f5:05:4b:1f:08:aa:65:b3:d0:ec:db:1f:66:b6:
9c:bb:4b:69:db:74:3e:e0:fa:a4:b8:13:7f:b2:20:7e:ac:21:
c7:a7:95:ad:98:8e:88:ae:1c:9d:11:a6:d1:f4:5a:99:88:11:
4c:94:81:e6:64:a4:88:53:65:0e:bd:f9:0d:fb:46:57:ec:04:
3f:9d:81:98:b6:c1:8b:39:96:02:23:a4:da:27:6e:f2:30:f5:
d2:29:17:69:14:b4:a0:41:15:d0:64:41:d9:3c:f3:48:86:22:
2e:9b:43:83:b1:ff:de:fa:e8:61:31:d2:c4:02:a2:b2:fd:60:
ce:a5:ff:81:71:51:ea:53:59:20:c5:e7:09:30:1a:84:50:5a:
7c:32:03:60:f4:c5:b2:b3:cc:aa:c7:fc:56:b8:b6:90:5d:93:
63:b3:a5:f1:c2:8c:80:db:4b:26:f1:66:f9:6a:ed:d0:5d:8f:
3d:c7:6b:9a:81:87:88:66:0a:65:a7:51:dc:c0:4e:3d:57:6a:
78:c1:b7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:27:38 2025 by rpki-client