Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/AR8_wIl8DUpYP7KubtK_WjTI9Yg.roa
File: AR8_wIl8DUpYP7KubtK_WjTI9Yg.roa (raw, json)
Hash identifier: VBK/s5fQa4YZQsAHU7WMS4ftCQ62G//BKKOQdCIew7A=
Subject key identifier: 01:1F:3F:C0:89:7C:0D:4A:58:3F:B2:AE:6E:D2:BF:5A:34:C8:F5:88
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0194274810CA6E10D7F3EB12D331F721B7F5
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/AR8_wIl8DUpYP7KubtK_WjTI9Yg.roa
Signing time: Thu 02 Jan 2025 13:50:21 +0000
ROA not before: Thu 02 Jan 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139317
IP address blocks: 2a13:b487:4200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:10:ca:6e:10:d7:f3:eb:12:d3:31:f7:21:b7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=011f3fc0897c0d4a583fb2ae6ed2bf5a34c8f588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5f:d5:57:5f:c6:de:0b:d8:7c:82:f1:08:60:
07:2f:61:d9:3b:36:d0:b2:e7:fa:ea:cc:37:ac:4f:
c7:36:5a:77:df:37:8a:e2:51:05:26:73:b8:93:b2:
6c:ba:77:c8:1b:1b:e1:2c:c5:98:ef:fa:06:a0:ba:
ea:ac:ab:72:07:e7:58:aa:d6:46:01:d2:18:bf:fc:
68:08:8d:a7:db:80:db:a7:99:a4:b6:a3:e0:63:8f:
ab:ad:9c:53:01:2e:94:67:18:39:40:0a:b3:f1:75:
76:7d:94:8c:d0:06:b6:2e:db:09:3e:2c:bd:d2:9c:
7b:78:75:87:69:95:c3:d1:c0:c7:f5:b0:89:77:4b:
b2:f1:48:cf:16:fe:ca:c4:34:39:7c:e6:ec:ba:50:
4e:38:7f:8e:37:06:88:1b:c2:ab:6f:2f:da:cf:f9:
4a:7e:db:28:ee:7d:a6:bd:66:5e:44:24:a3:db:a5:
06:db:a9:ba:ea:ff:ca:de:42:16:a7:d9:21:ef:31:
06:a8:bc:a9:a0:1a:98:e2:90:7a:69:19:9c:42:a7:
6c:c7:8b:81:63:20:1f:a5:fd:38:30:14:df:b6:ec:
fa:90:29:fc:26:f0:1e:58:c7:b4:97:7b:19:ab:a6:
39:ea:73:5d:da:86:db:d8:fb:ce:85:a2:13:1f:d0:
bc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1F:3F:C0:89:7C:0D:4A:58:3F:B2:AE:6E:D2:BF:5A:34:C8:F5:88
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/AR8_wIl8DUpYP7KubtK_WjTI9Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:4200::/40
Signature Algorithm: sha256WithRSAEncryption
39:20:a1:a6:00:97:8e:73:90:12:75:c2:ca:2a:56:73:57:a8:
96:b8:c6:2a:a5:b2:e4:23:49:4c:7c:7a:53:0f:08:1f:f2:7b:
96:0f:34:1c:4e:c5:a0:de:9f:02:2c:51:4a:35:26:b0:ec:a3:
08:b0:e1:60:a5:ed:47:0f:23:26:b3:4b:6e:60:76:37:de:90:
b4:af:0a:9d:33:60:ef:85:e1:40:d1:0d:24:84:51:b0:0e:5a:
f1:a1:26:19:13:22:5a:7a:5b:69:7c:b0:20:33:65:7a:6c:2e:
02:6f:0e:62:03:3b:41:46:32:96:8f:5d:63:8f:9a:4d:ae:bb:
8c:67:54:bb:f4:d7:f6:90:62:3f:c0:21:c1:90:09:3a:36:c6:
f8:f8:1a:be:98:bd:13:21:b9:03:67:95:6d:dd:ab:f8:d1:45:
aa:5f:ca:1d:b0:aa:79:b7:68:ab:80:64:b0:9a:61:b6:08:94:
05:b7:61:ed:b6:39:e7:7a:fe:79:5f:00:23:2b:11:d0:8d:1b:
91:fd:84:40:20:cd:e8:9b:3d:82:64:7f:d9:bc:21:fa:8c:d2:
1b:d1:c2:0c:c3:40:f8:84:29:a3:ef:18:ef:c1:b6:4c:92:38:
e9:cc:c4:19:d4:43:85:5a:13:92:bc:8b:72:b7:18:b2:bd:19:
bb:f8:55:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:30 2025 by rpki-client