Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/AWFxgbYysKzYv0gJGHIqs-M6fSo.roa
File: AWFxgbYysKzYv0gJGHIqs-M6fSo.roa (raw, json)
Hash identifier: 7jBsDk6x5plbEAdm4r8Xm1I+hNT3AXg3hm3X4BQ8DKo=
Subject key identifier: 01:61:71:81:B6:32:B0:AC:D8:BF:48:09:18:72:2A:B3:E3:3A:7D:2A
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C23378622D0E4ED653C38C4CB46D2
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/AWFxgbYysKzYv0gJGHIqs-M6fSo.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50580
IP address blocks: 2a13:9302::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:23:37:86:22:d0:e4:ed:65:3c:38:c4:cb:46:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01617181b632b0acd8bf480918722ab3e33a7d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:8c:05:80:6f:7d:cf:8b:5e:fb:56:a2:23:
5a:3b:59:fb:46:0a:eb:bc:1f:37:e1:4e:ed:fc:d6:
7a:89:0e:52:1e:be:9a:5f:d3:7c:09:1f:7e:8a:9b:
27:c7:62:b5:63:4d:62:c5:02:9c:37:e4:b4:90:01:
7d:38:2b:85:18:6b:a5:3b:d2:f8:1c:d0:05:c8:58:
b3:95:a6:5e:ec:39:4a:b2:b9:7d:98:d4:a5:47:0c:
fc:1b:a0:20:c7:c3:70:77:a9:dd:e7:eb:1b:ee:e7:
b6:de:ba:b2:56:b6:c3:67:ac:f4:6f:98:07:3b:4c:
46:90:6c:a5:84:29:f0:00:08:e7:0a:03:f2:35:6a:
e8:99:e0:89:7a:db:97:9b:81:c3:0a:a2:c6:1e:e7:
8e:c1:f5:12:01:06:ec:1c:3b:13:1d:71:41:55:cc:
89:05:5d:2b:02:14:ac:13:75:f5:19:4e:f3:4d:d8:
2a:f9:36:1f:b5:8a:0a:18:92:cb:e7:e7:43:92:1f:
f5:9c:ff:0f:90:06:59:75:a3:87:d9:95:0b:d4:78:
c4:7c:82:04:db:be:79:33:9e:25:6f:eb:85:f3:55:
94:5e:2f:96:e5:77:11:5d:bd:1d:3a:6d:d5:f5:bf:
27:0e:e4:e0:35:c3:d3:93:15:a5:e9:97:86:88:d8:
90:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:61:71:81:B6:32:B0:AC:D8:BF:48:09:18:72:2A:B3:E3:3A:7D:2A
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/AWFxgbYysKzYv0gJGHIqs-M6fSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9302::/31
Signature Algorithm: sha256WithRSAEncryption
1b:c2:f4:5b:12:ca:67:22:ff:11:9a:56:98:90:06:24:16:03:
1d:a7:ae:47:7c:20:58:0c:c9:96:e0:59:e3:1d:c1:c7:7c:fe:
ff:4d:a1:f3:a1:77:54:e6:fd:42:41:fc:72:0c:17:19:e4:6d:
dd:f8:0a:78:9c:ab:e9:68:f5:ca:d0:81:7e:9d:4f:89:e9:c7:
1e:3e:0e:16:d8:9b:a3:cd:eb:64:03:7e:e0:45:89:d2:ff:74:
bd:61:ae:c4:65:f9:3a:16:eb:08:16:e1:e6:92:d0:3e:2e:ed:
d5:15:68:04:d6:8a:37:1d:4c:cb:e5:35:99:51:e0:05:30:03:
29:01:af:f8:d8:b2:6c:dc:ee:ed:e4:88:a6:02:bd:b1:85:cb:
5b:19:76:ba:9a:0a:d8:9a:4c:cb:c3:70:f5:8c:d2:57:f0:32:
4d:7c:ca:c1:65:8d:42:8d:89:db:ae:0d:4c:b8:b1:2c:9e:3a:
cb:34:33:6a:d7:cf:28:6a:a4:b0:b3:a7:f9:ce:00:c5:c2:83:
2d:c9:24:c3:6b:aa:2f:fb:de:07:9c:f3:2e:3a:6e:9e:d2:6d:
98:6f:54:bb:66:06:7d:43:f7:ea:b5:13:5e:d1:ec:8c:dc:5c:
d2:cd:38:0c:78:81:4e:41:20:72:cb:49:f2:cf:29:fe:a2:79:
49:25:28:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:09 2025 by rpki-client