Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/Rlmk26o9GGzhEHE4uLkfPoxj8_8.roa
File: Rlmk26o9GGzhEHE4uLkfPoxj8_8.roa (raw, json)
Hash identifier: T6Et59H70XVQaAtU8g2BlfoJ02hxraRdpkMNtbNaCgw=
Subject key identifier: 46:59:A4:DB:AA:3D:18:6C:E1:10:71:38:B8:B9:1F:3E:8C:63:F3:FF
Certificate issuer: /CN=42150d463c32667c6a9296c8d25bb383cf419c61
Certificate serial: 019421B24D659D16DCC098E1EB502400399B
Authority key identifier: 42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/Rlmk26o9GGzhEHE4uLkfPoxj8_8.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204174
IP address blocks: 2a13:e2c0:fd59::/48 maxlen: 48
2a13:e2c6::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4d:65:9d:16:dc:c0:98:e1:eb:50:24:00:39:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42150d463c32667c6a9296c8d25bb383cf419c61
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4659a4dbaa3d186ce1107138b8b91f3e8c63f3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:30:10:65:27:d5:ec:6d:b8:0c:7f:a3:7a:
d6:37:e6:f5:1a:e4:a5:62:20:d3:cb:45:8b:2e:2e:
cb:e9:eb:2a:6a:ec:42:0a:8d:d5:52:9a:46:b9:c2:
ce:89:65:c3:ca:67:4b:b5:b4:51:7f:03:8e:84:fa:
3f:bc:67:71:82:8b:ae:05:65:4a:ad:63:b9:1e:d1:
9a:d0:db:3d:7d:1f:4a:20:5f:f7:51:91:3b:90:a8:
64:08:28:e9:27:68:52:f9:06:5a:8c:15:96:3d:3a:
c9:b3:01:68:45:95:21:a2:de:b6:ac:66:41:e2:01:
77:28:f0:56:b3:69:d7:21:92:59:55:64:69:e9:78:
ad:a3:32:98:ad:03:38:02:32:50:6d:d6:11:5f:cc:
ef:5d:a3:c8:21:5e:d6:25:0d:19:53:4b:f3:7a:a8:
28:bb:3f:b3:0c:14:00:ec:54:8b:2d:8f:62:40:7e:
8b:34:9e:f6:62:fa:3c:60:5b:5a:3b:ef:32:97:d5:
c3:4e:45:1d:ed:2b:08:c3:71:da:8c:f4:af:e6:7e:
fa:bf:26:e6:af:94:df:64:6d:39:34:70:0d:43:f2:
1d:c5:38:a4:d2:d4:ad:d8:a4:c2:89:a5:0b:3f:4d:
d6:7a:ef:fd:3a:28:7b:f1:84:e4:5e:77:2f:24:c0:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:59:A4:DB:AA:3D:18:6C:E1:10:71:38:B8:B9:1F:3E:8C:63:F3:FF
X509v3 Authority Key Identifier:
keyid:42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/Rlmk26o9GGzhEHE4uLkfPoxj8_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e2c0:fd59::/48
2a13:e2c6::/32
Signature Algorithm: sha256WithRSAEncryption
76:98:bf:f1:73:0e:32:db:a4:63:4a:d9:71:a0:34:bd:df:95:
9d:ce:c4:2d:a6:b1:e7:3c:70:0f:18:fa:f7:03:a6:99:33:19:
0e:04:17:bb:a8:73:b4:5b:ff:85:66:16:22:85:6f:c9:1f:29:
26:a0:0b:40:32:24:6a:2a:7b:e1:17:42:ca:91:d4:73:1f:dd:
d3:d9:fb:34:d1:e7:d2:ff:90:c7:39:5e:8f:00:c6:98:b2:7a:
8f:7b:79:e1:d4:d9:dd:aa:e6:f0:1c:e9:0e:14:b2:10:6d:1c:
2c:e6:43:91:bc:ae:63:06:31:62:bf:aa:05:7b:1c:85:33:0a:
bd:1b:d8:7f:c6:63:db:15:eb:50:b5:ee:2d:cf:1c:b8:44:79:
27:7b:ef:1a:c9:38:7a:70:40:5a:f3:a7:16:b4:76:2a:a3:8b:
b2:97:73:66:a6:3b:2b:fc:8a:88:a7:cc:09:98:e0:16:bc:8e:
13:cc:49:30:88:4d:8d:45:b5:68:96:29:ee:04:8c:38:16:78:
32:5d:fa:2f:7c:81:08:3b:6e:53:5c:0d:03:5e:0b:d1:ff:4a:
0e:c2:83:08:21:0a:63:2a:65:82:57:a7:45:2d:dc:a8:31:6a:
00:d7:f2:0f:54:b3:8d:80:a0:95:a8:60:29:22:b0:cd:19:30:
3e:a3:6b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:10:18 2025 by rpki-client