Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/bikpWTy5yaDOaM9Wddo9-QZQZjA.roa
File: bikpWTy5yaDOaM9Wddo9-QZQZjA.roa (raw, json)
Hash identifier: fUAYzf7xEr6yNujiG6DUJDMz4zPc0sSGso4up3/ZIcY=
Subject key identifier: 6E:29:29:59:3C:B9:C9:A0:CE:68:CF:56:75:DA:3D:F9:06:50:66:30
Certificate issuer: /CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Certificate serial: 0189995FEB6C94B6901F063B144AE0095677
Authority key identifier: EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/bikpWTy5yaDOaM9Wddo9-QZQZjA.roa
Signing time: Thu 27 Jul 2023 22:02:27 +0000
ROA not before: Thu 27 Jul 2023 22:02:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48280
IP address blocks: 2a13:9642:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:99:5f:eb:6c:94:b6:90:1f:06:3b:14:4a:e0:09:56:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Validity
Not Before: Jul 27 22:02:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e2929593cb9c9a0ce68cf5675da3df906506630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:b9:0a:61:43:ae:5d:ca:fd:89:80:ee:29:
cd:8d:a7:fa:b8:6f:61:9c:38:d5:e2:e9:bf:b3:c1:
bc:75:7e:2e:ce:e4:8d:a9:70:c2:db:88:5d:14:e4:
8c:62:2b:f3:ea:e0:1f:d2:e2:4d:10:5b:cd:d4:15:
f3:e0:0e:10:41:40:97:58:cc:4d:08:06:95:21:fe:
8f:8a:30:f5:5f:35:73:4c:da:f9:9d:fa:53:6b:75:
91:11:52:7f:9c:d5:73:ed:50:df:71:7c:02:3f:78:
ec:92:6e:06:96:c9:cd:93:ed:ef:ea:85:e3:2e:d7:
a2:6a:98:7d:88:43:5f:62:88:a2:68:c8:cf:fa:3c:
56:71:89:a2:2e:2f:7e:6a:93:6c:e6:b4:85:b1:27:
ab:e3:68:49:ff:1b:4a:92:f0:5c:cf:cf:b5:74:57:
7d:89:3d:9c:fc:ea:c8:70:91:b1:4d:ee:86:46:9b:
2f:d4:2e:52:20:98:8c:3e:71:f1:af:9f:65:38:18:
a5:d1:67:6d:56:e6:8a:86:bd:14:f9:d9:e4:7d:e3:
df:d0:eb:84:55:74:65:ef:65:dd:0e:b8:a6:9e:75:
4a:2d:a6:f5:5f:c2:98:35:13:1c:c3:c3:ba:0c:f2:
bf:96:85:58:f9:3f:e6:d8:a2:0f:93:36:49:18:3e:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:29:29:59:3C:B9:C9:A0:CE:68:CF:56:75:DA:3D:F9:06:50:66:30
X509v3 Authority Key Identifier:
keyid:EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/bikpWTy5yaDOaM9Wddo9-QZQZjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9642:100::/48
Signature Algorithm: sha256WithRSAEncryption
92:b2:18:88:e6:e2:6b:ca:66:21:0d:45:ed:8c:6d:05:79:6d:
d4:c8:97:e5:8a:cb:50:f2:e2:de:2d:4d:35:bd:c6:c9:da:92:
04:c1:6f:5b:e4:9a:22:9e:3a:2c:9f:58:5e:af:2e:6f:ee:5d:
97:27:20:41:33:2b:45:e9:b1:ec:35:5d:06:69:8a:b3:c2:e8:
e0:f1:be:fc:e3:bb:52:7a:c8:44:4a:70:23:8d:ed:0a:59:87:
99:f9:a6:7e:27:5b:fa:99:6a:2c:18:b7:a5:e2:81:6d:98:09:
4d:1b:37:95:91:48:33:6e:19:f0:00:7c:37:9e:91:2b:c3:84:
fc:c2:ed:c6:e9:aa:c1:01:b7:1c:e2:0c:1c:87:88:59:56:50:
49:7b:72:99:91:22:08:2d:fd:71:6a:f0:1d:5d:8c:eb:64:cb:
cb:63:b4:9a:5c:eb:d3:c8:17:78:c8:a0:f6:cc:22:71:b7:79:
a3:6b:81:69:88:05:c3:ec:0f:f1:eb:4c:cf:f1:d0:80:6e:a5:
c5:ec:a7:86:bf:62:f3:15:e4:65:00:76:18:f6:9f:51:98:46:
5a:bf:17:db:1f:7a:59:69:86:12:8f:7f:59:87:de:62:e7:ab:
ab:5b:bf:72:c6:ac:3a:71:80:db:c5:1b:0c:d2:9c:f5:27:56:
a5:43:ad:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:59 2025 by rpki-client