Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/637ySHaa7VPjeqlKlcPrhZ2yY2I.roa
File: 637ySHaa7VPjeqlKlcPrhZ2yY2I.roa (raw, json)
Hash identifier: 5OCAk2cIQJcX+e/E05dY0NN7PiUYi4cdJimVcm3YI9A=
Subject key identifier: EB:7E:F2:48:76:9A:ED:53:E3:7A:A9:4A:95:C3:EB:85:9D:B2:63:62
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 019425219FC0BFBABE3FFC91B27B1A73FF6F
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/637ySHaa7VPjeqlKlcPrhZ2yY2I.roa
Signing time: Thu 02 Jan 2025 03:49:08 +0000
ROA not before: Thu 02 Jan 2025 03:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208747
IP address blocks: 2a13:a5c7:1100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9f:c0:bf:ba:be:3f:fc:91:b2:7b:1a:73:ff:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb7ef248769aed53e37aa94a95c3eb859db26362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ee:89:cb:88:ce:35:96:b0:f1:8e:fb:48:09:
1f:c1:c0:14:f0:2c:1b:d7:86:c5:b5:a2:2d:e6:96:
eb:1d:48:2c:4e:07:4c:70:35:3c:fd:0b:09:8b:3c:
05:3f:7e:f9:1c:0c:94:86:82:7c:e9:df:08:19:3c:
fa:70:73:85:f3:9f:0d:16:4e:f7:99:21:07:8e:be:
a2:4c:fa:b4:77:f3:04:8b:16:23:41:5a:ba:33:4b:
24:e9:09:5c:29:30:38:50:ad:39:08:9e:a1:fb:49:
42:73:ca:25:7c:90:31:0e:cd:d9:dd:c8:77:62:cd:
62:c4:c1:d6:ff:7d:01:65:ce:90:fe:d3:83:76:ed:
71:1b:37:c1:88:bd:ce:b3:dc:e4:3b:bd:80:0b:61:
7b:fb:c6:b4:63:de:5e:3b:e0:41:cc:e6:9b:73:0d:
e7:ae:46:e8:ae:d6:16:0e:d3:32:0d:25:5a:25:27:
cb:61:6b:a5:4d:6f:9a:a1:c1:27:2d:5c:aa:a3:d1:
93:af:88:95:d9:f6:48:f0:b1:ef:a5:61:aa:9b:39:
f9:2e:af:31:b5:94:ee:05:b0:68:36:c1:75:15:95:
63:38:f4:1a:02:56:c6:85:06:91:ac:a2:83:a6:4d:
ff:04:ac:e9:ba:59:b7:7b:d9:a5:2d:94:f0:1d:01:
7f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7E:F2:48:76:9A:ED:53:E3:7A:A9:4A:95:C3:EB:85:9D:B2:63:62
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/637ySHaa7VPjeqlKlcPrhZ2yY2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:1100::/40
Signature Algorithm: sha256WithRSAEncryption
20:fc:8c:f7:a4:4e:bb:4c:62:84:63:e5:a2:e3:61:0d:c3:4e:
90:b1:69:a0:10:ae:f8:41:ae:ea:4c:25:82:89:93:26:d0:cb:
70:f8:a0:dd:f8:5c:26:3f:f8:d7:77:30:c3:4e:da:fe:26:ec:
e7:7a:8d:39:eb:5c:37:92:e7:0d:72:b9:8b:94:36:a9:c6:02:
b8:3a:23:a1:8f:89:52:6d:56:b0:0b:bd:4b:d5:5f:eb:a9:45:
0a:48:b1:68:82:e0:c5:85:ac:71:27:b5:50:96:28:46:0a:c9:
7b:3d:4c:44:ee:69:12:f4:39:a5:d3:51:92:e4:fd:52:b6:ba:
52:dc:93:67:cc:59:a4:77:53:a9:56:1c:8b:62:69:88:77:54:
e9:70:bf:ab:86:6f:95:75:3f:9d:8d:df:30:6f:62:ae:c6:58:
4d:e4:68:a8:75:0c:90:0f:35:89:21:df:6d:74:d9:1a:43:39:
d8:c4:2a:9e:98:ad:af:f9:38:7c:c6:56:af:9f:62:d2:01:90:
05:f0:b7:6e:5c:8d:22:81:3c:60:6e:62:fe:79:72:b7:d1:60:
8c:65:74:4a:36:b7:89:19:96:75:b3:4f:85:2e:b4:f7:60:29:
fe:57:75:7f:9e:3f:e7:87:ec:56:83:97:24:8f:46:5d:72:42:
9d:a1:dd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:14:20 2025 by rpki-client