Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/DHtZpFn4GXCzNvsV-fQDkkv0E3Q.roa
File: DHtZpFn4GXCzNvsV-fQDkkv0E3Q.roa (raw, json)
Hash identifier: mIWQtuRUYMAIMNWTk2R94Vc9M/vD3qRf+T1I/Wud7SU=
Subject key identifier: 0C:7B:59:A4:59:F8:19:70:B3:36:FB:15:F9:F4:03:92:4B:F4:13:74
Certificate issuer: /CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Certificate serial: 019421B212A2B2DB63D4161AE1AF66186DBB
Authority key identifier: 57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/DHtZpFn4GXCzNvsV-fQDkkv0E3Q.roa
Signing time: Wed 01 Jan 2025 11:48:25 +0000
ROA not before: Wed 01 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56621
IP address blocks: 2a13:b301::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:12:a2:b2:db:63:d4:16:1a:e1:af:66:18:6d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5758cb11e842bcaf1323647f3befeee2fc6f0e2c
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c7b59a459f81970b336fb15f9f403924bf41374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:22:a3:04:c6:14:23:ec:0d:6d:ce:8e:7b:
76:c2:44:81:43:60:f2:b5:e3:01:d7:5b:cd:aa:ff:
57:9d:dd:df:07:9e:96:45:7e:7f:05:85:8c:78:d6:
ba:42:7f:ba:47:d2:6a:6a:a1:c1:c0:0a:63:6f:a2:
93:0c:cd:f0:59:b1:13:0e:50:f7:c1:e2:bc:20:97:
a5:51:10:b7:f8:84:7b:71:9a:73:25:38:de:37:69:
d2:61:96:df:1b:d3:44:d8:61:db:e9:e9:38:f2:07:
de:dc:89:39:8a:f5:03:ac:d2:04:6c:cb:80:ee:9a:
50:b9:82:80:a9:6c:4c:7f:56:71:cb:4d:d0:ff:5b:
30:cc:42:fa:16:13:0d:33:0b:4b:dc:5d:d4:80:49:
06:2e:dd:83:bb:7a:2c:2e:bd:f9:9a:ff:36:11:11:
c5:51:3b:d5:54:c1:1f:b5:e4:13:d2:c5:e5:71:81:
3a:2e:af:6b:d8:23:91:4a:0f:6d:1d:d7:0b:35:2e:
ea:ed:5b:eb:71:c2:a0:8f:09:18:80:6e:82:7d:04:
e2:9e:cb:9d:94:72:b0:9c:b3:3d:cc:98:6d:d1:41:
bb:a6:88:75:bf:34:2c:da:09:d7:f6:b7:e0:bc:2c:
28:98:ee:08:19:de:f1:f2:d5:e8:51:1e:26:9e:31:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7B:59:A4:59:F8:19:70:B3:36:FB:15:F9:F4:03:92:4B:F4:13:74
X509v3 Authority Key Identifier:
keyid:57:58:CB:11:E8:42:BC:AF:13:23:64:7F:3B:EF:EE:E2:FC:6F:0E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1jLEehCvK8TI2R_O-_u4vxvDiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/DHtZpFn4GXCzNvsV-fQDkkv0E3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a28330-8ba0-4b88-a7ac-8bbf8bfc6d8e/1/V1jLEehCvK8TI2R_O-_u4vxvDiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b301::/32
Signature Algorithm: sha256WithRSAEncryption
07:72:9a:36:37:7d:e7:87:71:bc:b7:a8:5f:a8:93:35:3a:57:
46:41:64:38:40:76:0f:7c:31:98:21:ab:65:30:64:ba:03:b8:
8e:6d:2f:d3:92:47:e8:7b:bd:35:58:5f:a3:ad:6a:e5:44:77:
31:3f:56:85:ea:ff:bb:8e:8d:73:ac:38:7f:79:5e:fd:cf:e7:
4c:3f:79:7b:11:a3:db:47:e1:76:91:3a:de:cb:ac:94:5e:73:
7b:53:db:42:39:3a:8d:1f:53:e6:50:ed:49:4a:ca:6d:e7:80:
09:c2:34:4a:8d:37:ca:22:09:9b:3b:fb:a8:b7:77:e1:24:fc:
33:ae:86:ca:1a:75:22:e7:c4:d1:2d:b1:3d:89:2e:0f:b3:6e:
86:01:d0:50:19:7b:4a:5d:b2:ce:28:22:95:22:7e:d4:ac:78:
21:4a:87:0a:71:d4:d6:16:c9:7f:1d:7b:5a:ec:9a:5d:47:f6:
2e:ed:4a:d4:c0:a6:80:30:eb:17:81:0c:c4:72:de:21:ac:e2:
57:fe:3d:83:20:28:53:6a:b8:d3:5e:94:9e:a9:f8:4c:a4:f5:
3b:5c:6a:23:7a:5e:9d:6a:8e:2c:87:58:78:a9:66:b1:6f:26:
87:53:7d:f3:e9:cc:97:b4:16:74:f1:51:69:4f:69:a4:ff:a8:
64:9b:25:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:52 2025 by rpki-client