Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/iGjGn5gZjf3G3PrNDMkcYSy_inM.roa
File: iGjGn5gZjf3G3PrNDMkcYSy_inM.roa (raw, json)
Hash identifier: 3p+HfmQfsCCKVnKoNxOWG3b3ouKSQAVqE6Sb9frtEm0=
Subject key identifier: 88:68:C6:9F:98:19:8D:FD:C6:DC:FA:CD:0C:C9:1C:61:2C:BF:8A:73
Certificate issuer: /CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Certificate serial: 018CC4246BBF4F8E4E0DB043EBE894100877
Authority key identifier: EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/iGjGn5gZjf3G3PrNDMkcYSy_inM.roa
Signing time: Mon 01 Jan 2024 08:29:30 +0000
ROA not before: Mon 01 Jan 2024 08:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48280
IP address blocks: 2a13:9642:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6b:bf:4f:8e:4e:0d:b0:43:eb:e8:94:10:08:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Validity
Not Before: Jan 1 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8868c69f98198dfdc6dcfacd0cc91c612cbf8a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:29:c1:7c:2d:c1:ea:51:29:89:8c:ae:c6:d0:
3f:72:ca:1a:9a:e7:9a:44:2e:24:3b:83:6d:b9:86:
b5:be:1e:db:b0:c4:12:11:45:af:aa:22:5d:83:24:
0a:0b:41:2a:ea:12:00:27:81:b8:c1:4a:25:37:55:
b9:b8:55:0a:d5:87:7a:6f:53:08:fb:ee:31:aa:b1:
76:1c:69:a4:ba:f7:6e:84:52:6b:c4:59:d6:de:90:
68:6d:be:5f:4c:54:e1:d4:12:f3:54:d9:87:8a:2b:
18:ae:65:fe:99:43:64:46:7d:04:3b:46:d3:c2:73:
d3:51:00:f3:39:8a:ca:97:19:58:f8:cc:ff:de:21:
72:29:c7:89:39:25:f5:1b:df:57:79:86:78:c9:2e:
c6:7e:8c:ab:0f:60:b4:da:7b:6a:8f:ce:64:93:06:
17:0f:53:e8:aa:20:84:21:06:5e:fd:81:89:f3:1c:
35:4a:40:51:ad:a9:e4:c7:1f:f9:68:fa:f4:f7:aa:
e9:9f:1e:6d:0b:0a:bd:45:e9:ae:5d:c7:ed:65:bb:
2f:9c:92:34:62:45:19:b7:67:b1:79:63:32:d5:24:
ff:d2:69:7e:85:a7:c7:cd:a6:f0:49:6c:e6:31:4a:
a9:d1:c7:05:77:21:92:8a:85:9b:d3:6c:ea:6a:8d:
8a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:68:C6:9F:98:19:8D:FD:C6:DC:FA:CD:0C:C9:1C:61:2C:BF:8A:73
X509v3 Authority Key Identifier:
keyid:EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/iGjGn5gZjf3G3PrNDMkcYSy_inM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9642:100::/48
Signature Algorithm: sha256WithRSAEncryption
e7:71:93:6d:4a:e4:69:06:8d:97:c6:cf:36:73:75:08:4c:fc:
4d:5d:6e:d1:94:29:39:d8:ff:0d:9d:bb:f1:8f:24:24:ba:02:
bd:7c:19:6b:0f:b0:c9:2a:25:ab:c3:f6:cc:3b:34:a8:ef:35:
d3:04:57:2a:7c:0c:1d:a0:87:14:7b:30:28:fb:42:4a:6b:04:
c9:ca:e7:05:fe:ca:a6:2a:a0:57:bd:79:65:1b:f4:20:0a:75:
91:88:ed:bb:3c:67:aa:e3:f6:ba:c2:97:97:3e:c2:82:a1:4e:
e2:79:ed:43:cd:11:b4:f7:ad:b5:21:21:2a:ec:e1:e8:36:b4:
b1:fc:85:40:94:00:4c:1a:d7:13:7c:32:b9:11:ac:5f:61:d9:
6a:90:11:7a:0f:39:60:b3:63:1b:9f:a7:7a:dd:1a:35:e1:52:
c6:6d:5d:45:0a:f0:39:b3:b9:28:7a:ce:44:24:86:4e:d9:c1:
58:25:bf:92:6f:31:ca:ea:87:5d:b9:1f:ec:7e:e5:8f:2c:92:
f7:ee:4e:2b:0d:b2:40:8a:66:7d:a1:73:f1:15:08:c4:56:ff:
cd:db:23:f6:84:da:49:e0:ba:c4:d2:89:50:ae:bc:01:f9:0a:
00:d7:62:34:23:b0:ae:38:2f:8d:50:7a:7a:9f:88:e6:43:dc:
fe:f1:ba:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:01:56 2025 by rpki-client