Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SF7KRH8mMUKD8SvQUB9HmHcTwqY.roa
File: SF7KRH8mMUKD8SvQUB9HmHcTwqY.roa (raw, json)
Hash identifier: zZmQXCrpjTed25loOHdTbhbhpGZZ/cps70tpYSEekdQ=
Subject key identifier: 48:5E:CA:44:7F:26:31:42:83:F1:2B:D0:50:1F:47:98:77:13:C2:A6
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0195105508402843981393A48D1808A2039E
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SF7KRH8mMUKD8SvQUB9HmHcTwqY.roa
Signing time: Sun 16 Feb 2025 19:56:02 +0000
ROA not before: Sun 16 Feb 2025 19:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393886
IP address blocks: 2a13:b9c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:55:08:40:28:43:98:13:93:a4:8d:18:08:a2:03:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Feb 16 19:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=485eca447f26314283f12bd0501f47987713c2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:96:b8:18:e8:7c:98:31:98:97:75:5b:d3:36:
58:9f:aa:66:06:ff:d2:15:4a:30:38:8b:8c:79:c5:
66:59:12:fb:60:d0:8c:8a:26:64:fe:35:30:47:55:
5c:77:4c:0d:0f:be:72:cf:06:7f:29:51:ec:75:f6:
fe:ec:d1:04:50:e3:49:63:e8:a9:cf:8e:42:e2:95:
be:ea:78:5e:cb:cb:05:65:8c:4c:7e:51:75:56:4f:
80:3f:8f:f6:98:59:c1:1a:c5:53:67:d8:32:c4:12:
2b:b5:bf:22:e4:c9:97:88:ab:f1:6b:66:b5:5b:7c:
f6:f7:ae:07:d8:46:19:85:5b:6c:85:db:0c:23:58:
98:f7:d1:8d:f0:28:64:7c:2e:09:a3:33:9c:9e:f8:
6b:eb:da:79:50:d6:d0:03:92:b9:02:33:f4:10:c6:
2d:c3:0b:b1:6f:de:3d:a2:07:07:bf:2d:a0:52:09:
26:a5:2e:35:84:23:f3:c8:f7:a9:51:38:ec:91:16:
79:f5:8f:32:de:59:a1:d8:45:5e:db:5f:01:9e:49:
81:eb:63:fe:2e:67:cf:7c:99:1a:02:96:ae:97:59:
8c:91:76:9b:5d:d5:8d:de:30:88:c3:ef:cd:bd:99:
e9:ba:30:39:5a:fe:b5:fd:d2:39:8d:d8:ed:68:93:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5E:CA:44:7F:26:31:42:83:F1:2B:D0:50:1F:47:98:77:13:C2:A6
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SF7KRH8mMUKD8SvQUB9HmHcTwqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b9c0::/29
Signature Algorithm: sha256WithRSAEncryption
6c:98:8c:b4:fa:17:54:4d:05:36:1a:4c:ca:46:d2:9e:ce:5a:
65:22:28:7f:8b:af:40:31:55:4b:56:5c:91:f1:fa:5d:32:f4:
31:f3:88:f4:fa:68:ca:6d:f4:fd:26:cc:da:b5:1e:50:ea:d6:
86:97:eb:54:76:9f:dd:c0:6b:cf:a0:df:77:3e:ed:72:7b:d4:
49:e5:6c:85:08:23:4c:f0:ed:dd:3c:6b:c4:ee:11:c5:aa:4e:
f4:c1:16:94:52:a9:70:d7:c4:2c:9f:d4:91:d5:45:82:0a:7f:
2e:8a:ea:62:31:e0:f2:a2:7b:43:c4:d0:9d:78:db:d7:f9:5a:
f1:2c:7e:20:5b:2b:f9:43:4b:3c:d5:a3:a0:b2:ec:32:97:2b:
f4:27:c2:93:16:b8:bf:d1:98:b9:08:45:c5:42:f1:a0:91:b8:
19:6c:05:53:f4:5d:c2:1b:be:1a:ea:c2:38:fd:ab:b1:e1:99:
24:f5:df:75:8d:d7:ed:ca:a2:f5:c5:e7:d2:ec:2f:1c:3f:85:
3f:4b:cc:10:bd:1e:18:f6:93:05:fd:21:72:0d:cf:16:07:d8:
79:2b:f4:f3:95:3f:33:b2:dd:04:90:0e:93:c9:73:c8:c3:38:
32:39:c9:3f:2f:42:cd:40:7f:3d:ae:72:78:a3:6a:8a:63:4e:
e0:54:b8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:58:59 2025 by rpki-client