Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/zIkbJeTwbr4g4HqCiSMjmkUtoc4.roa
File: zIkbJeTwbr4g4HqCiSMjmkUtoc4.roa (raw, json)
Hash identifier: iCalAjOGxm0opXXl2pTuqSySdO8pgzWKpdJeQe3j0mA=
Subject key identifier: CC:89:1B:25:E4:F0:6E:BE:20:E0:7A:82:89:23:23:9A:45:2D:A1:CE
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0193EEA794D08092AF6BE848A572C1588D3F
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/zIkbJeTwbr4g4HqCiSMjmkUtoc4.roa
Signing time: Sun 22 Dec 2024 13:56:20 +0000
ROA not before: Sun 22 Dec 2024 13:56:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214963
IP address blocks: 2a13:a5c3:ff20::/44 maxlen: 48
2a13:a5c7:2100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ee:a7:94:d0:80:92:af:6b:e8:48:a5:72:c1:58:8d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Dec 22 13:56:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc891b25e4f06ebe20e07a828923239a452da1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:e8:f8:9f:0a:e9:ed:61:40:b5:51:cb:47:
6f:c5:34:93:9f:a2:14:2b:40:bc:49:ec:89:e9:26:
c1:e9:b6:21:90:0b:89:44:38:06:74:33:09:b0:08:
72:82:db:c8:d4:06:fa:0d:66:33:02:18:d4:79:b8:
f7:b2:7e:0e:1d:6d:c6:2f:3a:33:a3:90:49:a3:5b:
14:1d:fe:11:bf:97:87:bb:bd:a2:b0:64:1d:98:a7:
e2:5b:57:29:cd:48:fe:2c:61:e2:7b:1c:61:91:7a:
1a:24:13:dc:2d:3a:4a:78:5a:ef:1e:74:26:06:92:
60:63:47:59:1d:a5:6d:24:bb:f4:95:0f:af:de:ab:
a2:ef:ec:59:71:66:00:64:b1:c4:52:8a:5c:4e:20:
ae:3a:4d:65:06:26:93:86:a3:d1:82:2d:47:9f:b5:
87:c8:25:8d:ce:ef:2f:a6:1a:75:ca:40:ac:62:d2:
5b:3c:49:77:d8:1b:74:c2:3c:33:a7:28:7b:c6:db:
0e:77:9f:26:48:09:f6:92:84:c8:6a:b8:53:4d:f9:
71:58:e3:2d:df:ee:23:f7:1a:58:45:15:21:b0:b1:
8f:4a:98:30:b5:eb:87:c6:9b:13:24:f7:65:f7:b0:
49:dd:83:14:bd:cf:98:cd:01:e8:fe:da:24:6b:ff:
3d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:1B:25:E4:F0:6E:BE:20:E0:7A:82:89:23:23:9A:45:2D:A1:CE
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/zIkbJeTwbr4g4HqCiSMjmkUtoc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c3:ff20::/44
2a13:a5c7:2100::/40
Signature Algorithm: sha256WithRSAEncryption
45:c2:57:45:e9:18:02:5c:f0:10:4b:34:84:21:88:17:38:15:
7a:aa:e3:62:84:9d:f2:fc:3c:99:f0:2c:17:c8:f3:b0:2d:b5:
41:95:b7:1d:7c:56:82:79:d4:d4:1a:00:1d:b5:96:67:89:82:
61:1f:ed:bf:3e:40:81:91:aa:e9:07:8d:27:1b:32:d6:9f:19:
05:d7:bf:aa:1c:ad:4d:79:8c:41:c2:c0:db:e7:f2:77:c0:21:
76:f7:29:4d:4b:ed:08:a2:10:49:91:9a:59:b2:79:b8:01:c3:
7f:41:83:a2:b7:35:87:2b:27:0c:bf:44:29:ef:74:f5:13:a9:
67:e8:d1:91:d4:29:d5:62:6b:de:85:3a:db:19:83:27:f6:f7:
b1:99:3f:91:7f:b1:8f:d2:78:c8:e8:f1:25:d3:fd:fd:4c:71:
85:01:ce:54:4f:b9:06:c0:98:f2:16:19:cd:5a:1c:ac:5a:35:
21:3f:1e:eb:84:a2:88:e1:f7:ba:ef:a9:a8:63:b3:6b:e5:43:
83:28:84:2a:25:bf:89:a2:c5:52:0b:91:0b:7b:e4:53:ab:0e:
3f:78:bc:af:d1:b7:1c:a4:13:01:f8:9e:58:41:53:d0:4c:f6:
48:c4:4c:15:c0:bb:43:8c:13:5b:3b:0a:66:61:d5:1c:5c:28:
af:11:60:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:44:09 2025 by rpki-client