Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/lPdDfmlD9RAxCyidA_ifam-2Uvk.roa
File: lPdDfmlD9RAxCyidA_ifam-2Uvk.roa (raw, json)
Hash identifier: sWKYz6K+L1Be8/sNsnQfCAv7/Dkkri5HUxz/km5Fw+o=
Subject key identifier: 94:F7:43:7E:69:43:F5:10:31:0B:28:9D:03:F8:9F:6A:6F:B6:52:F9
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 01942521981D3B3CA1D68BE5A4022D6C1E62
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/lPdDfmlD9RAxCyidA_ifam-2Uvk.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27010
IP address blocks: 2a13:a5c3:f300::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:98:1d:3b:3c:a1:d6:8b:e5:a4:02:2d:6c:1e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94f7437e6943f510310b289d03f89f6a6fb652f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:35:30:1d:d2:39:3a:d1:10:e9:95:64:20:77:
c6:ce:e6:91:5a:37:64:0e:a3:6d:88:58:f0:f9:08:
3f:59:2a:92:51:0d:92:c0:ac:22:3c:34:d9:2e:64:
bd:8c:d1:eb:32:11:68:13:80:d1:b0:ea:ad:49:5e:
c3:f2:1b:31:10:9f:8e:d8:f3:b3:dc:5c:ea:d4:3c:
c7:8a:a3:31:6b:5b:0c:73:27:d5:de:b3:53:2d:e8:
ff:39:f4:42:32:44:23:77:3b:46:08:3f:fc:a1:d4:
8d:9f:81:fd:c5:18:ed:3b:5d:f5:d4:af:e7:db:40:
4a:52:b9:19:5e:0f:1a:e7:c1:18:a2:03:87:ab:5b:
5b:47:58:68:d3:f7:8a:f2:39:1f:b1:f2:05:3d:eb:
4f:f2:03:b6:30:11:13:db:24:7e:5b:10:cf:33:64:
63:15:10:3f:11:5f:75:48:a2:9e:ed:6e:e4:60:39:
b8:d9:2e:a6:d9:c3:dd:5c:bf:bd:38:b7:93:01:76:
40:ef:03:e9:9f:14:71:6c:1f:d6:d0:e8:d1:25:61:
90:a3:b6:4d:b1:d8:f6:8d:07:fc:d4:93:0b:0f:fd:
d1:88:5b:09:ff:4b:9f:a1:54:49:bc:8c:81:63:fa:
d2:f9:4a:66:c7:09:34:8f:f4:00:ab:39:09:63:6c:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F7:43:7E:69:43:F5:10:31:0B:28:9D:03:F8:9F:6A:6F:B6:52:F9
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/lPdDfmlD9RAxCyidA_ifam-2Uvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c3:f300::/40
Signature Algorithm: sha256WithRSAEncryption
9b:58:97:9d:35:78:b2:73:13:a8:65:c3:7f:66:f4:ff:35:6a:
4a:02:61:ab:02:29:b7:00:56:c9:a0:c8:eb:74:ba:49:b8:37:
13:f6:13:93:b2:ad:d4:04:1a:76:e8:58:96:24:e2:a7:67:0e:
a9:ea:14:64:8b:5d:7a:42:bd:e4:39:25:e3:07:ef:17:3d:3e:
2f:c9:ea:7e:1b:87:1a:e7:69:3b:a8:d6:5e:39:d1:28:6e:20:
5e:15:ed:46:d9:e0:6a:ed:62:36:ef:45:bf:a4:4a:8f:ca:a4:
98:84:f5:d0:13:b7:fc:88:ea:d5:5f:a5:21:70:9c:95:73:63:
10:b4:46:d4:ac:81:76:99:aa:a8:df:14:2a:b8:7c:ae:03:9c:
9e:95:f1:0e:bc:1c:f0:46:f3:f0:60:a4:57:2a:c5:72:aa:bf:
22:88:ec:50:52:ae:d7:c8:65:34:97:e1:8a:0f:35:bb:19:ea:
fa:84:e2:48:d7:46:f5:b8:35:01:bc:81:9c:11:86:eb:8a:2f:
e3:b5:67:12:57:63:d0:ab:c2:7a:3a:b8:83:de:39:03:21:4f:
0f:f0:cd:2d:06:c4:ef:2c:94:e2:67:e9:6f:38:62:20:d3:21:
14:4e:47:2a:92:8a:fd:bb:df:b3:15:c0:7c:02:e9:5b:4b:e7:
79:fd:2a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:45 2025 by rpki-client