Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/K20bwUQ5N1fKDZpYXnJdAm759UU.roa
File: K20bwUQ5N1fKDZpYXnJdAm759UU.roa (raw, json)
Hash identifier: yxysg/UcgF2cxNzswRT4h83amYvrmBL+0uAJ6z6+J44=
Subject key identifier: 2B:6D:1B:C1:44:39:37:57:CA:0D:9A:58:5E:72:5D:02:6E:F9:F5:45
Certificate issuer: /CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Certificate serial: 01896D58DA10ACBE8F2709D70CAF210E3DF4
Authority key identifier: EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/K20bwUQ5N1fKDZpYXnJdAm759UU.roa
Signing time: Wed 19 Jul 2023 08:51:26 +0000
ROA not before: Wed 19 Jul 2023 08:51:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52112
IP address blocks: 2a13:9640::/29 maxlen: 48
2a13:9640::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6d:58:da:10:ac:be:8f:27:09:d7:0c:af:21:0e:3d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Validity
Not Before: Jul 19 08:51:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b6d1bc144393757ca0d9a585e725d026ef9f545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:df:89:27:76:1d:f7:20:f2:10:b8:fb:bd:e7:
6c:d5:2d:11:13:48:63:66:bf:0f:12:3e:77:fa:96:
27:a4:86:d3:fb:2b:fc:3d:64:a9:b4:91:0a:19:3b:
af:62:21:17:ec:ca:e7:25:8a:77:ca:6c:59:7f:2d:
39:63:16:f3:ec:3b:f5:82:49:e9:5f:3a:d8:26:f0:
20:86:b9:fc:13:c6:93:bb:44:49:da:4a:1d:3c:23:
2a:cc:6d:71:6a:6f:e1:04:bc:cd:31:cf:40:c9:0e:
f2:6c:ac:cd:8d:e6:c6:1a:da:06:be:35:8a:f2:c9:
fc:fb:33:3d:76:17:72:6a:5d:6b:59:74:e6:03:5b:
26:13:46:d2:ca:62:e5:80:0a:ea:89:d1:ac:ac:e4:
22:05:8a:de:9b:31:9a:3f:25:14:99:64:f8:14:6b:
2b:14:a6:6c:39:ca:e0:54:33:50:43:0d:c2:c0:b7:
45:da:27:66:8a:59:26:d4:07:57:0d:19:56:a8:41:
2f:12:e4:a3:04:87:14:4b:3a:1f:a5:33:d1:45:1c:
48:ea:fa:fb:c3:41:63:bf:f6:82:d1:20:e8:b7:bd:
1d:e1:59:47:50:0c:f5:c3:dc:12:b2:14:ab:b5:a1:
be:6c:a1:21:ea:6b:5d:66:15:5c:a0:4d:6a:00:0d:
f3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6D:1B:C1:44:39:37:57:CA:0D:9A:58:5E:72:5D:02:6E:F9:F5:45
X509v3 Authority Key Identifier:
keyid:EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/K20bwUQ5N1fKDZpYXnJdAm759UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9640::/29
Signature Algorithm: sha256WithRSAEncryption
3c:c5:65:c1:6f:64:4c:f5:94:2a:be:3d:8c:31:cc:33:76:ff:
c2:7f:09:2a:25:f0:ae:96:14:19:2a:08:ea:01:78:5b:90:17:
18:5c:91:00:e3:e6:81:7c:2d:25:82:5d:1a:67:49:27:91:f7:
5c:4d:03:4d:3f:b3:10:6d:38:67:b4:bc:ba:ba:7b:34:ab:27:
16:0a:c2:3a:39:be:c1:7d:a3:4c:d1:bc:1e:5c:30:7c:31:c7:
ce:ff:c2:bf:33:23:bf:7a:36:05:39:58:39:c8:b8:b6:3f:fc:
99:57:c4:2d:f6:c1:b5:21:4d:14:c5:25:db:37:2d:17:98:fe:
f9:c3:f8:11:ef:ea:00:23:f5:39:a5:70:91:63:a8:89:cf:1f:
a7:07:c2:84:59:62:38:7c:7e:4c:3f:24:07:0c:99:e8:8b:90:
5e:10:8d:95:b0:03:70:fe:e3:96:92:79:fa:58:a5:fe:15:a0:
65:5b:9b:e1:dd:fd:bf:6a:94:df:b4:6e:e8:29:74:5a:b7:27:
2f:58:de:18:8e:42:c1:ef:fc:2a:a0:70:ae:c0:f6:1a:35:c8:
31:de:23:98:7d:04:cd:fd:c4:8a:95:07:d1:4f:2f:f8:03:fc:
37:8a:30:1a:64:b1:18:b4:02:95:5d:18:76:4e:da:b1:e0:55:
52:a7:a7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:50 2025 by rpki-client