Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/8_EM-NgogDWyXCZ7GHqoBVXM7dU.roa
File: 8_EM-NgogDWyXCZ7GHqoBVXM7dU.roa (raw, json)
Hash identifier: gQd8gawt/KvpcQzHqj4TWyOy7DQ5VK8Yji82w0a5OTs=
Subject key identifier: F3:F1:0C:F8:D8:28:80:35:B2:5C:26:7B:18:7A:A8:05:55:CC:ED:D5
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194887F872230C548FE184BA25834A711A8
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/8_EM-NgogDWyXCZ7GHqoBVXM7dU.roa
Signing time: Tue 21 Jan 2025 10:54:06 +0000
ROA not before: Tue 21 Jan 2025 10:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50580
IP address blocks: 2a13:9302::/31 maxlen: 31
2a13:da00::/29 maxlen: 32
2a13:e400::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:7f:87:22:30:c5:48:fe:18:4b:a2:58:34:a7:11:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 21 10:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3f10cf8d8288035b25c267b187aa80555ccedd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c2:24:41:56:89:52:60:70:dd:f6:14:c1:bb:
64:44:fc:d5:1f:49:fb:a3:56:61:5d:ae:34:7a:33:
a5:09:93:3c:54:d1:63:68:81:3a:46:c9:a9:bc:ec:
14:c3:46:b9:18:c0:4b:1c:84:6c:f9:1a:11:ca:d0:
c4:e1:e2:c1:c6:1a:10:69:61:7f:f1:2a:7e:d8:63:
ff:74:a5:28:93:37:91:b6:21:9e:28:33:b8:03:66:
1d:5e:33:9a:77:ff:2c:3f:b7:64:53:94:20:d9:b9:
d2:91:de:59:c9:d3:d8:29:2d:a8:d0:f9:6b:3e:88:
e1:81:c3:e5:54:a3:da:86:f3:1c:30:b8:58:94:e3:
e7:1f:2d:09:f9:01:a4:fe:24:8a:d1:e9:5e:2d:6c:
1e:3f:08:0a:42:8f:0e:82:6c:a8:8e:2b:cc:02:54:
d8:01:98:b3:e9:2f:8a:b0:ca:a0:c9:67:a0:eb:01:
99:76:f9:a1:a7:c3:c9:64:8b:af:38:27:9b:9d:66:
25:a1:c4:b7:52:0f:85:04:f9:fb:de:2d:7c:53:2d:
fd:d5:bb:12:b7:1c:5e:51:75:84:83:e8:fd:36:9b:
f0:b6:d7:19:8a:78:b3:43:6d:a2:66:d9:d5:a5:63:
f0:d5:27:35:31:55:c7:64:67:e8:42:33:ab:c0:ff:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F1:0C:F8:D8:28:80:35:B2:5C:26:7B:18:7A:A8:05:55:CC:ED:D5
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/8_EM-NgogDWyXCZ7GHqoBVXM7dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9302::/31
2a13:da00::/29
2a13:e400::/29
Signature Algorithm: sha256WithRSAEncryption
91:2d:12:1e:e6:29:dc:12:cf:85:d6:2a:d1:91:b5:13:0d:54:
07:9f:64:df:9c:d0:d8:38:65:1a:f7:c1:39:a0:59:b9:3f:d4:
eb:bc:89:7c:e5:b7:8c:0e:2a:1e:e9:a3:77:2b:47:d8:27:b3:
81:77:d3:84:ae:ad:ae:5b:07:4f:23:25:fd:3a:2d:79:ee:cb:
a5:8f:2f:78:f3:1f:77:7e:51:44:b1:90:2e:5f:67:f1:04:b9:
18:b9:60:c7:4c:42:b8:9f:0e:b3:b1:22:30:fd:a7:51:e7:59:
a9:ca:a4:75:29:42:87:cd:0b:6a:be:8a:16:40:8f:88:17:d5:
df:99:12:02:0a:23:5d:e9:5b:b9:88:ee:72:27:97:e8:38:c7:
e7:8b:79:02:f5:6e:cf:ce:cc:f3:83:9b:b0:ad:5d:7f:5f:21:
be:7e:70:58:67:48:c5:a5:78:8b:25:5c:13:fe:be:4c:d1:fb:
49:af:0c:82:a2:3c:04:7d:db:52:e5:22:73:45:14:52:96:3e:
1f:bd:28:e7:31:e6:f0:9c:eb:ff:e8:e2:25:79:a2:1b:6d:76:
3c:1c:9f:4e:84:15:df:37:90:cd:2b:25:44:e8:56:c1:18:73:
80:f8:96:f3:1f:5f:83:b2:85:f5:2d:46:b9:a8:07:1f:1a:da:
9b:7e:46:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:33 2025 by rpki-client