Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/wH7YjQGC2kPbicIfKx1K6Iv4sBs.roa
File: wH7YjQGC2kPbicIfKx1K6Iv4sBs.roa (raw, json)
Hash identifier: YR8jN4lQpTriIrl6/luq+DdE8e4Qj31ZZIIQj98pQoI=
Subject key identifier: C0:7E:D8:8D:01:82:DA:43:DB:89:C2:1F:2B:1D:4A:E8:8B:F8:B0:1B
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019426D9DB6C9A44360EA7F72C26809947F0
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/wH7YjQGC2kPbicIfKx1K6Iv4sBs.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136787
IP address blocks: 2a13:240:8888::/48 maxlen: 48
2a13:240:9999::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:db:6c:9a:44:36:0e:a7:f7:2c:26:80:99:47:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c07ed88d0182da43db89c21f2b1d4ae88bf8b01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:f2:ee:57:64:a7:16:63:35:38:3b:ad:45:
f9:15:bf:a2:03:d1:26:ac:79:55:c5:f6:c3:eb:0f:
97:97:7f:a0:46:6a:82:f6:ef:65:0a:49:84:c0:4c:
ce:de:48:31:c4:b2:15:d2:53:82:ca:b7:2f:56:f1:
16:35:72:a0:6d:f1:a5:d2:e2:f8:b1:69:0a:0f:1d:
1b:6e:6b:ef:1e:99:66:1b:c1:1e:49:b1:86:2c:93:
63:1a:a9:a4:88:fb:5b:8f:38:02:1e:13:3d:da:6e:
65:3c:fd:88:bd:89:ac:28:ef:e1:e0:16:37:0c:8f:
59:fb:1c:71:64:06:f3:bc:90:2c:39:fc:27:36:e1:
3f:1e:28:1a:26:46:6e:af:11:df:55:33:22:18:9b:
0a:22:1c:3c:40:22:a6:82:2a:17:f5:16:19:04:16:
4a:99:a3:8d:92:fa:ee:dc:11:c7:a2:43:03:80:d5:
c8:13:e4:8d:48:07:ee:33:06:2f:ef:48:9b:49:66:
58:ae:9f:70:4a:13:f3:dd:48:36:ec:13:f3:67:ee:
a1:b5:00:62:39:63:16:b6:65:76:fe:52:e2:19:96:
88:2c:e4:75:6a:f8:68:c1:ca:7d:aa:40:b2:31:cd:
a2:54:bd:87:0b:34:18:71:0d:a9:33:f1:6c:f1:6f:
73:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7E:D8:8D:01:82:DA:43:DB:89:C2:1F:2B:1D:4A:E8:8B:F8:B0:1B
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/wH7YjQGC2kPbicIfKx1K6Iv4sBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:240:8888::/48
2a13:240:9999::/48
Signature Algorithm: sha256WithRSAEncryption
65:e9:d4:10:cf:c2:ff:e2:be:fe:b8:8d:fa:bb:6a:57:ec:27:
30:a7:24:e2:94:86:22:d1:13:41:9d:c9:dc:14:4d:69:96:b4:
81:7c:ae:6f:90:2d:25:b2:f6:f6:11:78:d7:03:fe:7f:d3:be:
8d:cc:1f:b9:03:28:9c:a4:6d:2a:4a:00:c7:35:b8:77:3c:4f:
21:c5:e2:da:8c:3b:aa:9b:fa:35:76:4c:c9:90:d4:fe:96:5c:
08:33:91:1c:96:89:1c:45:d6:93:ff:7c:b9:e7:01:d9:a5:8d:
c9:58:d1:ef:6c:f6:2a:85:2c:ca:cd:d7:38:ea:2d:e9:91:75:
e9:d5:1a:b5:99:59:b4:9e:ad:67:bf:7e:c8:6b:8d:ad:33:3b:
79:83:ab:3f:da:97:38:2f:46:65:a1:6f:bd:48:30:28:cd:df:
fd:d8:eb:97:df:97:e1:f8:5c:61:b0:5e:a7:d3:3f:94:67:5c:
ee:68:83:aa:8f:63:23:5c:71:01:d3:bf:ea:00:a0:8f:a2:fe:
37:6e:69:ec:a1:d5:ab:b4:d6:d8:de:ef:ca:a8:0d:c9:b2:59:
c2:66:f8:a4:06:e1:6e:e2:12:94:87:4a:cd:68:f9:ba:39:c6:
64:e8:b3:e3:c6:fa:c4:7c:a3:15:ef:0f:43:50:5f:f9:2e:0b:
f7:a1:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:06:12 2025 by rpki-client