Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa
File: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (raw, json)
Hash identifier: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=
Subject key identifier: 90:FF:16:A5:B9:A5:A1:F2:53:75:46:82:99:45:96:EB:C6:2E:F9:1C
Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial: 0194FE23BDB9DF5384EA615BBAADEEA63BCA
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa
Signing time: Thu 13 Feb 2025 07:09:02 +0000
ROA not before: Thu 13 Feb 2025 07:09:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213430
IP address blocks: 2a13:2200:8::/47 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:23:bd:b9:df:53:84:ea:61:5b:ba:ad:ee:a6:3b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Validity
Not Before: Feb 13 07:09:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90ff16a5b9a5a1f253754682994596ebc62ef91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:22:df:e3:73:0a:12:08:4d:35:03:f2:e2:
d2:0f:df:95:18:3a:d6:1a:d9:1f:f0:ff:d3:1e:f3:
81:5e:ef:db:5a:9c:f1:c7:76:db:71:74:3c:a3:e7:
9d:2b:3f:b8:37:59:b0:18:1d:1e:65:da:a4:a8:58:
54:ed:8d:1a:b4:92:27:da:d9:75:63:93:b1:2a:6d:
12:0b:80:b3:9b:75:c1:9e:a8:91:e7:e4:71:cf:48:
32:f2:d8:57:ce:c7:50:49:cb:a6:7d:97:35:6e:5e:
6b:66:76:55:80:13:37:55:81:ab:72:27:3f:bd:f0:
28:c8:20:56:f7:96:68:4d:bf:f6:99:c1:c9:4a:02:
c2:5a:2f:3c:9d:02:0e:df:46:e2:a0:03:56:1b:85:
3f:69:bc:e6:33:cb:3c:e9:0e:43:a6:f9:a7:10:e5:
37:94:80:6b:c7:c7:66:da:ab:62:bd:3f:1b:6d:41:
df:45:22:45:9f:b2:bd:83:c3:c1:4b:db:01:89:a6:
ed:52:f1:55:ac:4d:5a:34:91:b2:80:63:2c:87:57:
ef:b4:f6:85:e4:31:f8:08:80:a3:c5:4c:dc:36:32:
9b:a0:c8:f3:3f:46:54:b1:c3:75:ba:d5:d7:e3:ac:
31:2f:32:16:fa:c8:44:f1:d8:66:a5:df:2b:9d:d0:
be:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FF:16:A5:B9:A5:A1:F2:53:75:46:82:99:45:96:EB:C6:2E:F9:1C
X509v3 Authority Key Identifier:
keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2200:8::/47
Signature Algorithm: sha256WithRSAEncryption
7b:8d:33:a2:46:00:e7:ac:1d:85:ae:e3:3a:b2:41:ce:7a:ff:
09:2e:26:22:20:14:31:4e:e8:e7:a1:48:a8:37:cd:2c:51:27:
cb:d0:8b:7b:91:cf:87:d8:92:3e:53:ba:49:ad:21:97:53:40:
02:41:d2:6e:59:a2:5a:4d:17:2a:2d:9f:31:79:81:9f:1f:0f:
6b:fa:4a:62:e6:54:d4:cb:2d:d3:73:35:d1:33:73:32:e2:3d:
96:22:2a:d9:39:c6:34:89:a2:de:46:0a:27:f8:84:f7:27:a6:
33:2f:67:04:5a:64:f3:d2:77:77:49:8a:28:0a:a8:a6:cb:9b:
e9:c0:e4:02:99:d2:37:28:7a:db:db:de:00:44:b0:f0:c4:06:
2b:b1:de:9b:79:78:d8:e6:3c:b3:b8:fe:7e:ed:f7:48:6a:48:
17:b0:a5:22:69:eb:c2:92:7e:55:57:ce:a3:49:4f:ec:a3:4d:
a0:e2:95:72:ab:a0:a2:45:d6:1d:ec:3f:48:9a:92:9a:f1:77:
bb:9f:9e:bb:f8:55:8c:26:a6:f5:e1:fe:df:50:a9:c1:0b:e0:
ef:59:39:41:09:7e:a0:2e:03:14:9c:9a:22:7c:c2:5d:52:35:
e0:3e:08:3a:f8:e1:fd:48:d0:de:17:41:59:4e:37:47:c7:7b:
b0:e3:b0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:24 2025 by rpki-client