Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/Ayx1HbBkau6OTJzU-DB6RGSfMec.roa
File: Ayx1HbBkau6OTJzU-DB6RGSfMec.roa (raw, json)
Hash identifier: rDF3VlhH2IkFFIpYBfyAO2HpGfGtVuZnppXFVNc1ErY=
Subject key identifier: 03:2C:75:1D:B0:64:6A:EE:8E:4C:9C:D4:F8:30:7A:44:64:9F:31:E7
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0193EEA7942AFC8EA255221C878624605C24
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/Ayx1HbBkau6OTJzU-DB6RGSfMec.roa
Signing time: Sun 22 Dec 2024 13:56:20 +0000
ROA not before: Sun 22 Dec 2024 13:56:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137908
IP address blocks: 2a13:a5c3:ff50::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ee:a7:94:2a:fc:8e:a2:55:22:1c:87:86:24:60:5c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Dec 22 13:56:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=032c751db0646aee8e4c9cd4f8307a44649f31e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:b1:cc:22:5b:ab:7b:5a:25:8c:aa:c8:4e:
ea:12:9f:94:f0:cb:31:ba:cd:e2:cf:68:44:73:e3:
a5:3c:6a:ac:59:69:c7:56:aa:e8:40:7d:d9:f2:1a:
a0:aa:66:a2:47:e8:97:8e:82:55:d9:4e:d7:5f:84:
e2:27:ab:0b:98:e3:38:b5:cf:04:c5:12:53:18:a8:
40:ec:cd:b6:03:54:1f:a9:97:a1:af:37:ed:65:cb:
f5:1e:a8:8c:63:f4:3f:0c:22:c1:4b:f6:d8:be:cd:
78:ab:5b:60:59:40:4f:f7:b2:6e:2f:1d:15:03:70:
77:54:6d:05:3f:3a:64:6e:6d:3f:19:a9:8b:5e:b0:
76:5c:a1:55:d4:6f:e6:1a:6f:0f:ad:4e:f2:b8:5c:
0d:71:b4:57:b6:c3:79:ff:c0:0f:76:61:34:20:48:
81:e7:9d:95:ad:60:bd:1a:cf:e9:9b:37:52:9e:90:
2a:6a:e5:7d:34:10:8d:a1:95:57:15:35:1c:04:d0:
da:b4:f9:69:9b:06:20:06:95:b4:22:bb:42:9a:d2:
dd:9f:01:94:8c:12:af:d7:b9:22:f3:89:7f:97:93:
8a:7c:c6:4b:d3:2d:60:79:c6:7a:a7:80:c7:6a:75:
10:f3:14:cb:6c:b2:b0:5a:91:e5:15:1b:21:69:f1:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2C:75:1D:B0:64:6A:EE:8E:4C:9C:D4:F8:30:7A:44:64:9F:31:E7
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/Ayx1HbBkau6OTJzU-DB6RGSfMec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c3:ff50::/44
Signature Algorithm: sha256WithRSAEncryption
36:fb:6e:75:35:2c:6b:26:fd:ec:98:33:d5:ef:2a:48:09:8e:
98:bc:d5:bd:ed:cc:70:04:ee:b1:ad:a3:ba:7b:7b:08:44:18:
aa:ec:26:40:9c:6d:f0:25:48:2a:41:65:c0:5b:6b:dc:77:43:
8c:88:ab:76:0c:50:d8:c1:00:33:b3:af:fb:14:c6:27:fc:80:
31:7a:58:aa:42:65:89:96:6d:46:5a:e9:87:dd:e2:34:18:3c:
5a:cc:5f:30:bf:da:e2:b8:8b:8b:68:73:d4:3b:78:c4:fe:c2:
60:87:85:37:75:33:5a:4d:35:da:d0:0a:90:79:43:f5:51:ff:
a5:5f:fb:dc:d9:8b:3f:ca:52:cf:73:c9:e9:3d:99:39:c8:2c:
9c:6d:8b:ed:4a:7c:34:eb:d9:f7:dd:a6:79:53:9d:ed:e0:c1:
77:b2:96:5f:a1:e7:46:e2:f8:0e:cf:7c:a0:ef:18:fd:e8:71:
77:15:d1:a7:e0:c7:1d:80:50:68:1e:d6:3c:94:d3:7f:21:20:
d3:8f:a3:8e:fb:2e:a7:0c:2c:20:33:9b:68:99:25:56:62:e1:
8c:8e:68:65:82:db:98:46:32:be:ca:eb:2e:49:5b:dd:a6:ff:
bd:9d:cb:25:b4:f8:d4:23:97:b6:d4:3e:c2:68:cb:19:0d:70:
da:75:fe:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:27:14 2025 by rpki-client