Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/A3wAiXtFLIjsMkAS5R9rMrDzDUY.roa
File: A3wAiXtFLIjsMkAS5R9rMrDzDUY.roa (raw, json)
Hash identifier: 7t6sdyB7j9u0CLu5D4tVwjoXPLjdBWSDa0vGKBc1IRI=
Subject key identifier: 03:7C:00:89:7B:45:2C:88:EC:32:40:12:E5:1F:6B:32:B0:F3:0D:46
Certificate issuer: /CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Certificate serial: 019123B0F402FF7741A55D5A34C1D35CF4B1
Authority key identifier: EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/A3wAiXtFLIjsMkAS5R9rMrDzDUY.roa
Signing time: Mon 05 Aug 2024 17:58:05 +0000
ROA not before: Mon 05 Aug 2024 17:58:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211431
IP address blocks: 2a13:9644:3000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:b0:f4:02:ff:77:41:a5:5d:5a:34:c1:d3:5c:f4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Validity
Not Before: Aug 5 17:58:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=037c00897b452c88ec324012e51f6b32b0f30d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6f:06:87:91:35:fc:9e:64:96:8f:98:d0:6d:
f4:30:6f:b3:dc:23:55:b9:db:8e:d8:24:b0:d9:2b:
7f:bd:3c:73:35:8d:59:73:12:51:6d:53:c7:d7:a1:
8e:9a:e7:f3:07:85:dd:f3:4e:ab:6b:1c:b1:ba:7a:
1e:bd:3e:a4:7e:0a:1d:4d:ea:85:8d:f4:bf:e1:2f:
b3:4c:08:3e:7d:0e:e8:db:66:e1:d1:e1:33:08:76:
02:92:4a:15:7e:65:c4:24:ae:75:f0:5d:9e:8a:d8:
b4:62:92:83:4b:26:73:a7:f6:e4:38:ec:33:f3:20:
21:28:59:3d:9a:6a:17:51:02:cf:3d:9e:be:46:db:
4d:82:1c:dc:47:4e:f6:81:4e:be:0a:f4:ff:29:ca:
7c:fb:16:97:23:40:14:21:9e:74:a0:88:f2:54:6f:
d8:7c:85:30:2c:20:c5:71:74:4b:57:6e:29:d5:9e:
80:ec:6f:e0:82:aa:f8:d2:f0:25:a5:a6:75:21:7a:
92:18:84:9d:2f:6f:9f:ea:31:b9:25:ec:3f:42:f0:
c1:f9:37:19:b5:e1:b7:90:f1:a5:42:79:9b:68:57:
cc:ae:36:b5:40:cd:af:70:1d:56:5d:5d:40:bb:91:
21:2d:43:68:11:67:af:33:61:b6:0d:d9:38:23:b7:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7C:00:89:7B:45:2C:88:EC:32:40:12:E5:1F:6B:32:B0:F3:0D:46
X509v3 Authority Key Identifier:
keyid:EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/A3wAiXtFLIjsMkAS5R9rMrDzDUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9644:3000::/40
Signature Algorithm: sha256WithRSAEncryption
04:19:6b:b9:0d:91:59:10:b5:46:cf:c3:52:6f:34:d7:34:ea:
df:58:a5:ea:59:ca:c9:cb:cc:49:90:63:5d:35:e1:7d:c3:59:
fe:1f:36:b0:2d:18:84:c6:43:f3:6e:32:e1:5f:1c:ef:cc:29:
93:aa:a2:ea:e5:71:4f:56:2e:e3:49:a9:63:b0:82:93:23:12:
b9:67:77:b9:3e:25:bd:b1:f6:2c:22:f4:eb:58:53:12:1d:e3:
5c:c8:aa:58:f9:c9:35:0f:36:b4:c0:57:48:a3:58:2d:89:a0:
41:4a:da:0b:3a:f3:68:00:be:72:46:5e:72:3c:f6:db:fe:75:
d0:bc:5c:9b:c9:0b:06:91:97:d6:a7:27:ba:2f:e7:f2:6c:c9:
c7:36:f6:c1:04:da:7b:c6:d8:1e:61:16:8e:e2:9e:d3:f2:a2:
34:29:d0:ce:a7:8f:c6:10:34:de:97:79:82:9a:e6:08:0a:0e:
df:36:a1:ea:2d:4f:8a:38:0d:6c:dc:43:ff:91:fe:d3:80:34:
13:34:22:c6:3e:62:38:ab:d2:ea:ea:9d:f9:2c:4b:a6:f0:f4:
79:9b:3d:a0:ba:dc:1b:b2:e0:d3:79:3d:50:4b:06:24:d5:0d:
3b:39:d6:b8:d6:6c:37:19:8c:cb:e1:b7:b8:ad:b7:bf:d8:64:
f8:9d:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:46 2025 by rpki-client