Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/DEkgt7AE1Iurv1gdgI4QOvTs29s.roa
File: DEkgt7AE1Iurv1gdgI4QOvTs29s.roa (raw, json)
Hash identifier: YYhF4Wk1OWCgiTiDwmzzUdGICChv/o9/RpFOj0wkgnI=
Subject key identifier: 0C:49:20:B7:B0:04:D4:8B:AB:BF:58:1D:80:8E:10:3A:F4:EC:DB:DB
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 019427481499FBC67E10234350616756C176
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/DEkgt7AE1Iurv1gdgI4QOvTs29s.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202402
IP address blocks: 2a13:b487:4400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:14:99:fb:c6:7e:10:23:43:50:61:67:56:c1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c4920b7b004d48babbf581d808e103af4ecdbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:3c:4e:54:3d:37:c0:f0:85:7b:57:cf:67:
28:db:95:75:80:6a:a3:38:d4:d3:67:5a:73:8d:7c:
ef:81:0c:30:dd:89:4c:9c:c3:11:9b:e8:62:73:70:
da:23:51:20:a6:75:7b:44:8a:3e:30:fc:a2:1e:ad:
2e:36:58:48:04:c9:57:d8:e0:b0:97:bd:0a:2c:c5:
9f:ca:e3:41:1c:88:bc:05:f5:05:37:96:62:8b:c1:
27:d1:bb:a9:77:d7:f0:41:15:55:23:8e:fb:f4:cd:
70:3c:d8:46:ab:df:7f:0f:98:f4:85:a9:e6:df:1c:
b2:07:00:f3:e5:9c:e8:f0:ad:a7:3b:b8:b6:10:93:
a9:5a:5b:bf:0e:68:56:51:7a:8e:ec:28:4d:69:89:
49:34:d5:93:5f:a5:03:62:7f:6e:ec:96:2a:a6:4a:
0a:3d:7d:79:ad:52:5e:31:3a:28:62:72:92:37:b3:
63:ba:1f:5b:ec:81:3a:bc:38:b5:92:36:06:87:d6:
dc:2f:42:09:a4:31:c9:8b:78:d8:e3:f1:cb:f4:40:
4f:08:36:83:fc:4e:65:bf:f4:4a:a5:3e:e2:85:3d:
27:42:a8:f3:af:22:be:ae:b0:b2:3f:85:f6:cb:4c:
2c:8b:0d:ca:ea:c3:2c:2e:80:87:17:8f:30:fa:0a:
bf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:49:20:B7:B0:04:D4:8B:AB:BF:58:1D:80:8E:10:3A:F4:EC:DB:DB
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/DEkgt7AE1Iurv1gdgI4QOvTs29s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:4400::/40
Signature Algorithm: sha256WithRSAEncryption
5d:09:de:e8:68:bf:0a:fb:ad:fd:a3:3d:63:4f:4f:55:e8:00:
ad:0b:1f:ac:b6:6e:dd:60:6b:75:fe:de:ba:ee:5c:c0:b0:46:
bd:a2:07:10:12:aa:a8:12:27:db:21:c3:dc:3f:60:72:9b:21:
61:70:09:9e:2c:63:54:bb:39:10:91:3b:b2:bc:ac:06:16:c9:
1e:76:f6:2d:3b:27:b6:bd:33:d6:fa:40:2c:0f:84:17:00:e5:
17:98:85:ec:01:c8:03:6f:41:5b:a0:be:64:04:bc:c9:9b:96:
17:6f:0b:85:13:72:99:6b:5b:92:91:ee:98:b5:71:95:3f:1b:
ec:b9:d2:f4:4f:54:c5:86:f4:61:b0:53:d2:b0:05:85:3d:fa:
40:e2:33:8d:94:a9:91:31:30:89:16:ae:94:22:3d:9c:1a:b9:
32:7e:ca:c9:de:be:43:e0:9b:df:43:f5:e1:5b:53:c7:e4:df:
1d:11:bb:bd:62:86:9c:9c:f2:ba:d1:53:68:54:a2:3c:90:d9:
39:d1:0e:07:48:20:01:08:fe:69:81:43:d5:be:56:5a:71:dc:
d6:09:d7:17:8d:ca:88:e4:d3:29:4c:29:f6:36:33:3e:75:41:
76:c3:d8:c0:bc:3a:66:54:e9:71:79:53:1c:67:9d:c7:92:8e:
f0:9e:86:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:12:41 2025 by rpki-client