Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/4Btmo4X8P0Aavpp-nU0Yc8hYhVc.roa
File: 4Btmo4X8P0Aavpp-nU0Yc8hYhVc.roa (raw, json)
Hash identifier: qDrq2XWyugrrzMadNyZODi+tYW3DV+sPLZzT49k0JrM=
Subject key identifier: E0:1B:66:A3:85:FC:3F:40:1A:BE:9A:7E:9D:4D:18:73:C8:58:85:57
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 01942521A3EDE7DF15DB4E2261A00E1E6004
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/4Btmo4X8P0Aavpp-nU0Yc8hYhVc.roa
Signing time: Thu 02 Jan 2025 03:49:09 +0000
ROA not before: Thu 02 Jan 2025 03:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214439
IP address blocks: 2a13:a5c7:2300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a3:ed:e7:df:15:db:4e:22:61:a0:0e:1e:60:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e01b66a385fc3f401abe9a7e9d4d1873c8588557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:08:83:72:e6:56:d0:19:f1:f3:c3:14:d5:
d6:6e:b4:be:d3:43:bd:16:f2:ec:59:6e:61:ba:1e:
7e:a7:7d:61:bd:c9:4e:4f:c7:1d:07:0f:1c:f9:54:
40:39:a1:e7:02:cc:64:75:df:6c:1a:a1:14:1a:9f:
56:4a:4f:15:05:5e:41:a6:a7:7c:f7:da:29:6a:8d:
c3:4c:e3:ba:00:76:c3:dc:b7:5f:82:f4:67:c7:4a:
90:9b:30:6c:ac:a3:20:9e:5b:8e:16:13:f3:62:2d:
e1:61:a5:02:b5:66:96:8c:3c:64:24:e0:1a:12:e3:
1e:d0:13:50:e9:60:8d:d6:3b:ac:51:d8:a4:94:5f:
50:90:d3:2e:51:ec:83:c4:47:2c:47:78:06:a4:14:
bb:e1:68:52:42:38:99:77:75:d9:23:9d:20:ff:d2:
74:05:41:2f:a5:7f:62:8e:99:8b:8b:f8:18:8e:3a:
29:b4:d0:4f:b9:ba:1d:50:d5:67:b7:2f:12:1f:88:
01:44:b8:0c:79:56:5e:f9:d8:4c:c3:9e:2c:ec:fb:
be:7e:90:80:5e:2c:4a:d0:ef:57:e3:63:76:48:bd:
20:cb:0c:03:b2:66:f4:07:fa:d4:b8:4a:9f:4f:39:
5a:2b:c5:25:a8:c4:d8:a7:d2:9a:88:c7:d7:e2:ee:
ab:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1B:66:A3:85:FC:3F:40:1A:BE:9A:7E:9D:4D:18:73:C8:58:85:57
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/4Btmo4X8P0Aavpp-nU0Yc8hYhVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:2300::/40
Signature Algorithm: sha256WithRSAEncryption
1d:1f:c4:87:04:74:94:18:e1:5f:aa:8e:de:5a:cf:85:f7:5c:
75:60:fc:c4:2e:34:b4:04:1e:cc:01:ee:5f:26:e7:4d:29:31:
12:c0:e4:98:fd:fb:87:d2:06:82:e7:04:5c:e0:8c:da:9f:78:
7e:70:2d:53:4b:94:37:37:b3:ec:a7:83:b8:eb:3b:1d:96:d4:
94:4d:98:8e:33:81:17:8d:7e:f8:a7:55:ec:e7:98:a4:e4:59:
b4:df:87:1b:9c:17:a1:2e:f9:1d:74:76:36:6d:3a:a0:14:0a:
a1:f1:a9:bb:b0:57:f3:12:bf:7b:69:ad:76:c0:1a:de:a8:9b:
25:8d:7d:20:19:57:70:6b:84:75:fb:8d:a1:a6:49:25:41:85:
73:88:cd:9f:8d:bf:b2:0a:92:34:a9:77:a9:d4:d7:e3:16:fc:
5b:77:56:46:b4:46:4b:fb:6e:4d:d4:1d:cd:18:75:71:c0:66:
01:08:36:af:04:35:7d:13:de:eb:5b:bf:a8:09:38:8c:9c:11:
14:7d:0d:b1:35:9d:f1:f1:68:bf:22:79:38:41:64:19:2e:52:
82:eb:96:25:5b:8e:d7:3f:71:de:3e:e0:ff:1d:78:df:34:3a:
e7:9f:0d:a7:cc:78:c3:5d:bb:02:db:c0:1c:59:5b:c2:13:39:
67:ad:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:33 2025 by rpki-client