Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/vLglN2psOTGhVqOCWUAf1u3QYqE.roa
File: vLglN2psOTGhVqOCWUAf1u3QYqE.roa (raw, json)
Hash identifier: ClWzMH+x+E9HhxA0DyK0kAyuvQycmjFBPG5pt5v3eok=
Subject key identifier: BC:B8:25:37:6A:6C:39:31:A1:56:A3:82:59:40:1F:D6:ED:D0:62:A1
Certificate issuer: /CN=cf5e22e798ae3169daab1ceba670bda1fff7b517
Certificate serial: 01856D6F82636DC598E7CCB7A8B33042D32E
Authority key identifier: CF:5E:22:E7:98:AE:31:69:DA:AB:1C:EB:A6:70:BD:A1:FF:F7:B5:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z14i55iuMWnaqxzrpnC9of_3tRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/vLglN2psOTGhVqOCWUAf1u3QYqE.roa
Signing time: Sun 01 Jan 2023 13:05:02 +0000
ROA not before: Sun 01 Jan 2023 13:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15701
IP address blocks: 2a13:28c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:82:63:6d:c5:98:e7:cc:b7:a8:b3:30:42:d3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5e22e798ae3169daab1ceba670bda1fff7b517
Validity
Not Before: Jan 1 13:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcb825376a6c3931a156a38259401fd6edd062a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:74:3a:01:fc:3f:29:aa:19:8b:ee:69:29:
45:89:4f:13:1e:29:28:8e:2f:29:1a:d3:9c:ac:ee:
02:fa:9a:44:8f:43:9a:d3:56:df:ad:d4:0b:84:1d:
d2:d2:f7:e4:3d:c5:a4:b6:8c:ee:64:b8:55:d8:21:
cb:32:17:45:d4:4f:a7:b2:d7:d0:f1:62:24:6f:28:
a9:cc:05:81:41:75:db:41:21:3c:8b:9b:5d:16:c7:
68:4d:1e:22:6d:81:cb:04:78:82:60:21:53:62:11:
1b:79:f2:30:dd:2f:25:f4:80:a1:7a:1c:f6:06:04:
2b:5a:d8:65:bc:b1:be:c1:07:de:39:e8:11:c4:70:
ed:ea:83:08:6f:11:72:61:87:f3:35:5a:ee:a6:d8:
9f:eb:01:18:19:9b:7f:f6:c7:b2:e4:e7:54:a8:27:
ce:f0:ef:d8:dc:58:4f:8e:9d:61:43:46:65:d9:52:
12:00:aa:d1:81:6d:99:73:07:03:4c:72:10:2b:60:
e0:20:24:e6:c6:bf:4d:7d:18:ad:09:cd:8d:79:02:
d3:44:69:5d:93:e9:dd:55:87:f5:08:ff:29:16:71:
ae:5f:cd:b1:67:b7:23:44:3b:6c:22:4c:03:b1:5a:
e2:fa:79:ea:d2:c4:9f:b0:11:f3:c2:0b:25:b3:12:
5f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B8:25:37:6A:6C:39:31:A1:56:A3:82:59:40:1F:D6:ED:D0:62:A1
X509v3 Authority Key Identifier:
keyid:CF:5E:22:E7:98:AE:31:69:DA:AB:1C:EB:A6:70:BD:A1:FF:F7:B5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z14i55iuMWnaqxzrpnC9of_3tRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/vLglN2psOTGhVqOCWUAf1u3QYqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9f9bf3-cf1d-4b33-8123-36a762fb5ec1/1/z14i55iuMWnaqxzrpnC9of_3tRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:28c0::/32
Signature Algorithm: sha256WithRSAEncryption
90:9b:e2:ce:42:23:e6:fe:c1:59:ba:04:62:db:94:64:ee:60:
83:c4:02:a6:48:64:01:88:eb:57:99:86:df:2c:fe:86:ce:85:
43:92:c2:81:18:0a:88:09:5e:82:cf:29:cc:c5:87:f3:34:df:
43:ad:f5:00:e1:a7:10:28:f1:d1:02:71:f2:b7:10:10:67:ee:
45:fe:93:1f:6d:e2:da:87:42:9b:df:09:2a:b1:57:a0:17:17:
ef:3f:cf:e7:15:4f:3a:09:4e:c6:bf:6b:b3:6a:cf:f6:14:30:
b4:80:a9:2b:48:82:13:e9:98:70:0a:da:5c:f2:d0:9d:93:14:
d5:ed:3f:55:17:5b:2e:dc:45:57:46:b0:f2:f2:f9:ee:31:1b:
11:10:3a:35:19:1b:fb:42:48:67:e9:b1:1d:b5:0b:47:e1:29:
0c:60:3f:c4:4a:54:56:25:1c:8b:dd:0a:c8:98:0f:c7:b0:bd:
f2:89:16:55:c5:94:e5:ed:dc:fd:3e:c3:22:90:ed:03:25:44:
27:00:82:e1:7d:8d:3e:7e:34:89:57:05:af:59:11:b6:31:ef:
ab:7e:10:aa:c5:91:1b:2c:b4:8e:96:eb:b8:c3:cd:b5:d0:6f:
f3:58:6f:c3:6d:75:26:14:e7:bf:5b:13:e3:41:82:c1:19:fc:
eb:7e:23:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:50 2025 by rpki-client