Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/PrCKdVAgs7g-83DoLIirQhnfnYs.roa
File: PrCKdVAgs7g-83DoLIirQhnfnYs.roa (raw, json)
Hash identifier: AcjgkxDOFEtcLk+vM0DvwJT1VY0AMFq5+BlyNqFm6kQ=
Subject key identifier: 3E:B0:8A:75:50:20:B3:B8:3E:F3:70:E8:2C:88:AB:42:19:DF:9D:8B
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C28AE1FF2A7641C39343F872C5CCE
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/PrCKdVAgs7g-83DoLIirQhnfnYs.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214967
IP address blocks: 2a13:9306::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:28:ae:1f:f2:a7:64:1c:39:34:3f:87:2c:5c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eb08a755020b3b83ef370e82c88ab4219df9d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:16:6f:56:1d:99:16:2d:17:ce:3a:c1:f1:
f6:4a:70:2a:f2:24:1c:79:5c:a5:11:66:55:f8:cd:
43:d7:d8:ec:36:76:b2:72:77:ad:e1:38:6c:8f:61:
aa:6b:d5:15:81:b9:a3:52:3d:f3:d6:2b:42:d2:55:
d1:d4:3e:63:4c:a7:92:5f:9f:d7:90:77:45:f8:91:
27:5c:95:27:07:9b:2d:8b:d1:a5:2f:84:e1:a6:bd:
7e:d0:d2:c2:18:b2:32:02:19:23:e5:88:4d:63:86:
33:0c:ec:41:5a:b6:e5:43:75:56:8d:61:6f:29:93:
0a:49:64:60:6e:a4:47:d0:e5:7c:3e:38:55:a8:2d:
52:75:b3:eb:41:7c:27:fc:4f:0a:b0:8b:ba:6c:db:
f0:d2:0b:8e:c8:39:f9:96:94:49:8e:66:2a:ff:a3:
87:5c:73:5b:0f:cb:1d:41:80:34:28:e0:0e:1c:95:
8d:0e:ce:3e:99:57:e2:9a:2e:98:68:1a:34:d9:38:
2a:56:8e:9b:5e:0c:2b:43:51:a6:d1:b6:f8:d8:ab:
9c:73:68:70:f9:1e:5a:33:c8:7f:65:4b:75:f6:ad:
85:de:08:05:c8:80:0e:90:58:ae:4b:a4:a3:5d:2b:
5e:cf:29:71:6a:a6:b3:d2:0a:a3:98:45:e4:cb:16:
54:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B0:8A:75:50:20:B3:B8:3E:F3:70:E8:2C:88:AB:42:19:DF:9D:8B
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/PrCKdVAgs7g-83DoLIirQhnfnYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9306::/31
Signature Algorithm: sha256WithRSAEncryption
a4:68:12:17:95:3a:8b:3d:8e:e2:3d:d8:8b:22:8c:a4:d1:be:
1d:34:55:65:b5:5e:0b:6c:62:5c:e9:ac:a0:b3:7d:18:d8:71:
cb:ae:b5:99:d8:f3:c6:e3:ec:c6:6b:2b:24:ca:de:2a:87:6e:
4a:9a:68:9f:70:84:6d:6a:0c:43:ef:81:08:d9:dd:ac:8d:75:
4e:c2:31:2e:99:2a:5a:06:5f:ca:e7:b2:33:79:e9:10:b4:f8:
0c:26:84:a8:a0:d4:b1:ee:d6:19:a8:2d:ac:c4:ac:68:a8:8b:
9c:64:0b:ba:b5:83:6c:0a:3e:d0:d4:a0:94:68:27:aa:1e:48:
7e:e9:b6:4f:6e:20:9a:f4:6b:79:84:28:7c:6e:29:e5:a5:20:
e7:f5:96:24:de:a9:ad:30:ef:aa:66:7f:43:f5:1b:e9:ec:b3:
3c:96:8e:15:52:aa:e4:8f:76:59:65:64:3c:27:93:a7:ae:df:
2d:22:1a:03:0a:4e:19:c9:3f:fd:c8:bf:23:d1:1f:47:92:94:
6c:8f:2d:c8:6b:15:04:9c:4b:88:34:ed:06:31:04:1d:12:a9:
91:64:dc:3b:90:17:25:e8:7d:43:19:31:1a:23:19:65:95:35:
a8:1e:a6:79:78:16:33:ea:e7:68:20:74:4b:a9:08:eb:9f:96:
78:25:52:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:24:24 2025 by rpki-client