Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/ebTYskrTqWy7tkpq4iBIYkJf6b0.roa
File: ebTYskrTqWy7tkpq4iBIYkJf6b0.roa (raw, json)
Hash identifier: VD/0CS5PzrFfUobpPtNiXDtj9HeuGGwnEGOI8nk8O6o=
Subject key identifier: 79:B4:D8:B2:4A:D3:A9:6C:BB:B6:4A:6A:E2:20:48:62:42:5F:E9:BD
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C2A89A513919E172205F7D90645D5
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/ebTYskrTqWy7tkpq4iBIYkJf6b0.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215462
IP address blocks: 2a13:a702::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2a:89:a5:13:91:9e:17:22:05:f7:d9:06:45:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79b4d8b24ad3a96cbbb64a6ae2204862425fe9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:e9:b4:b4:9c:91:fa:75:1e:4b:41:aa:25:
ff:16:8c:25:f8:c4:ac:2a:32:fb:6d:7c:7c:25:d6:
29:24:29:72:e1:08:dd:b4:83:42:c9:65:0d:5b:a6:
9c:90:d9:a9:14:a7:d5:e4:72:8a:ca:f5:8c:af:fc:
33:0f:9d:21:2c:e4:fe:22:e7:53:d6:14:0b:73:46:
02:bf:01:93:79:10:fa:56:c1:b0:4b:1b:c8:15:88:
30:8e:9b:97:15:4b:41:58:dd:b4:de:9a:b6:e4:b3:
ea:4f:cf:cb:ed:dd:a3:0d:b9:e4:d4:31:bb:d3:a9:
7d:60:5c:d6:77:98:75:d3:a3:46:ba:21:40:b0:1f:
6c:4f:a1:6d:ad:f5:c7:5c:26:eb:d5:22:e1:ae:6b:
36:33:9b:ea:58:08:d7:44:bb:d0:6d:0e:24:10:46:
62:75:98:72:4e:aa:df:19:07:ea:37:89:fb:90:5e:
2f:9e:e7:07:58:00:73:7d:64:b8:6b:12:52:a4:72:
5e:37:a8:b6:bd:8f:5a:f2:b7:ce:ea:39:60:d4:17:
85:2e:8f:27:10:4b:71:b6:0d:f7:08:bf:dd:63:aa:
10:3f:b2:f7:f5:c0:00:b4:06:4e:59:f4:c9:c3:06:
a4:57:e0:f0:03:65:22:b6:b0:63:a7:71:84:93:63:
3e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B4:D8:B2:4A:D3:A9:6C:BB:B6:4A:6A:E2:20:48:62:42:5F:E9:BD
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/ebTYskrTqWy7tkpq4iBIYkJf6b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a702::/31
Signature Algorithm: sha256WithRSAEncryption
0c:ac:c8:51:a6:a4:97:3b:da:69:fe:75:de:f8:49:d5:d0:5e:
bb:8e:18:87:bf:ce:16:c3:9b:10:a7:10:b1:1b:25:b0:8e:38:
dc:eb:5a:97:27:f8:7a:f3:c9:77:ee:5a:69:69:c3:e9:71:51:
19:88:23:7f:d2:d1:f1:ed:12:47:c7:e3:63:9e:a3:87:59:60:
06:ed:48:f0:e5:2e:67:01:7b:cd:e7:6a:f2:85:d2:20:fc:56:
dc:12:a5:3a:b8:cb:c5:9a:ea:a1:de:d0:43:bc:3c:97:f4:62:
ae:31:33:bf:64:5c:ff:2c:a7:20:94:0b:78:a3:7e:ca:28:bb:
b9:28:d4:95:18:ab:e6:12:da:43:12:4e:9e:bf:63:01:79:47:
ee:1a:e3:45:32:a6:6a:4a:05:e0:08:fa:53:a4:bb:b3:46:b7:
87:b0:4b:9b:01:92:f0:94:bc:22:82:c9:f0:0f:5f:50:f0:ff:
d9:8b:3a:8f:22:93:5a:0c:4e:67:51:ad:d2:ab:b2:63:e7:84:
f2:24:41:48:23:b6:6c:91:67:ae:bc:c3:82:06:56:d9:d7:d7:
5b:83:fb:92:7d:05:b9:82:5a:74:03:29:fd:ee:b7:bc:80:2f:
61:85:1a:77:39:b5:cb:8a:5c:ed:f3:df:c6:1c:8e:e0:f9:c5:
8a:81:ec:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:25 2025 by rpki-client