Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa
File: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (raw, json)
Hash identifier: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=
Subject key identifier: 9C:17:90:07:66:3C:C5:43:F0:FB:7B:30:B3:2D:7F:90:B3:3B:12:CE
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 019422FC213E3350E23B3E2B232301DE7E9D
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:2e00::/36 maxlen: 48
2a13:2e01::/36 maxlen: 48
2a13:2e02::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:21:3e:33:50:e2:3b:3e:2b:23:23:01:de:7e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c179007663cc543f0fb7b30b32d7f90b33b12ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2a:9d:d1:ab:39:68:29:ac:60:e2:fd:7e:66:
a7:40:58:81:e1:98:13:8b:fb:22:3e:03:a4:fc:a8:
5e:57:1a:61:ec:9c:3b:d5:35:25:26:ce:da:82:60:
d8:e5:e1:fa:61:21:08:ea:58:fe:8a:f7:33:2a:ee:
f7:36:db:91:88:cf:96:eb:ad:0c:29:78:a2:9c:00:
58:bf:36:cd:41:87:f7:09:b2:ba:9d:67:1b:93:4c:
4b:c2:d9:aa:be:da:06:91:da:b4:16:b6:ec:f0:d7:
e5:b2:98:a8:a5:9c:00:46:c9:3a:e3:24:3b:04:df:
9e:74:32:3d:0d:8e:af:d4:13:42:89:53:8c:13:99:
15:ed:37:9e:cd:56:ad:47:bf:c5:1c:1b:ea:8b:75:
c3:9e:f6:e5:fb:56:27:f2:c1:0e:c3:c9:07:68:1d:
50:a2:e1:39:c6:e8:5f:31:5a:20:d5:b6:a2:65:4a:
c5:2c:4c:83:02:ca:82:5d:88:18:af:bf:d8:93:ba:
3e:0b:76:b6:e2:1b:32:8c:f1:d6:9e:d3:e7:90:71:
3a:2a:63:22:ce:06:0f:58:83:29:10:b6:4b:ba:9e:
db:d9:17:df:c1:89:eb:df:e2:88:27:11:35:f3:89:
be:83:c6:1b:a2:14:45:6d:36:69:37:56:93:b4:ee:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:17:90:07:66:3C:C5:43:F0:FB:7B:30:B3:2D:7F:90:B3:3B:12:CE
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2e00::/36
2a13:2e01::/36
2a13:2e02::/36
Signature Algorithm: sha256WithRSAEncryption
08:92:a4:3d:77:49:79:d4:47:23:8b:ee:fd:9c:b8:9a:b4:75:
72:42:eb:aa:b9:39:a4:da:9c:63:55:30:44:50:09:2b:41:b7:
27:be:dc:eb:8d:80:88:8d:63:e5:7c:45:18:34:45:05:69:c0:
99:bb:53:38:87:37:1f:db:87:92:f8:52:8c:02:40:53:11:ec:
d0:cf:c3:fb:6d:62:b2:89:78:56:db:a6:7c:16:ec:84:9e:a0:
89:9a:c1:11:76:54:d6:4c:f4:2f:a6:83:0c:48:99:00:b3:3c:
81:d8:5f:64:30:10:c1:b6:32:5e:24:20:16:57:bb:f5:02:db:
a7:21:ce:ad:96:b5:19:7d:b9:59:7c:2e:b9:09:37:8e:73:f7:
3f:73:b3:12:92:07:6d:69:12:78:dc:24:33:91:63:77:db:c2:
d7:55:22:cb:6a:ac:30:60:9b:83:26:96:c8:0b:80:bf:87:f4:
f3:38:12:46:fa:5c:ab:7c:81:76:ed:15:1b:dc:69:83:99:0c:
7d:86:44:25:8f:c7:ea:a9:27:82:2b:09:b7:94:b5:0c:12:79:
11:3d:d4:ed:f0:9f:93:a2:55:d2:bb:0a:79:bc:2b:91:67:69:
e3:6e:f6:ad:1e:26:6d:6c:c3:7c:d1:0d:a4:6d:f8:d2:89:d3:
9d:bb:b2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:01 2025 by rpki-client