Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/qYZMsLDocNzfCfVr5DSPwspnT7w.roa
File: qYZMsLDocNzfCfVr5DSPwspnT7w.roa (raw, json)
Hash identifier: Cn1bYtgRejgZpBbqaABjvsENJNBNR18vEZY7h5JVk4k=
Subject key identifier: A9:86:4C:B0:B0:E8:70:DC:DF:09:F5:6B:E4:34:8F:C2:CA:67:4F:BC
Certificate issuer: /CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Certificate serial: 019123B0F3B85869CA538D37195FF39358DD
Authority key identifier: EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/qYZMsLDocNzfCfVr5DSPwspnT7w.roa
Signing time: Mon 05 Aug 2024 17:58:04 +0000
ROA not before: Mon 05 Aug 2024 17:58:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204291
IP address blocks: 2a13:9644:4000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:b0:f3:b8:58:69:ca:53:8d:37:19:5f:f3:93:58:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Validity
Not Before: Aug 5 17:58:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9864cb0b0e870dcdf09f56be4348fc2ca674fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:f3:60:91:41:82:f6:d4:b1:64:ee:84:18:
e6:79:bd:2a:f3:7e:6d:cf:b3:00:af:ed:83:3c:34:
55:32:fe:95:9d:3f:02:c5:f0:31:77:c5:a2:e2:b6:
5b:82:16:42:04:7d:12:04:0f:aa:63:6c:e1:b2:a1:
ad:05:9d:ec:d7:7d:4a:f8:c5:4b:47:b7:b1:6c:d8:
03:4e:f7:03:58:00:ad:b6:35:6e:80:2c:26:b3:bb:
82:48:fb:54:c9:ea:e8:1e:19:cc:c7:86:e4:2c:f6:
15:e9:91:3c:45:2b:11:be:19:fe:f9:86:a1:5d:d0:
84:48:9d:58:c2:82:3f:02:76:85:80:8f:b1:86:b2:
45:25:24:60:28:54:4c:69:17:73:2d:fb:c6:1c:73:
51:57:ca:b4:df:7f:93:35:a0:ea:b3:72:3b:1a:e6:
98:08:fe:72:3b:b1:a1:83:1d:57:62:c7:59:43:f6:
ce:37:74:e9:fe:87:12:1e:5d:3e:81:b8:b4:89:03:
74:c2:ec:22:93:7b:da:c6:ab:0f:a2:98:07:b7:e0:
91:51:1f:87:c9:19:3c:30:9d:15:00:16:03:75:f3:
88:f1:9c:ab:f2:3c:33:e5:fb:d8:f2:20:8f:2d:0b:
c2:e9:a3:71:5c:42:30:f1:d4:91:76:9d:a0:ec:ee:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:86:4C:B0:B0:E8:70:DC:DF:09:F5:6B:E4:34:8F:C2:CA:67:4F:BC
X509v3 Authority Key Identifier:
keyid:EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/qYZMsLDocNzfCfVr5DSPwspnT7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9644:4000::/40
Signature Algorithm: sha256WithRSAEncryption
0f:85:d3:f5:19:87:56:e8:9a:ce:19:0c:22:bc:04:8a:eb:1d:
07:9e:0a:bc:38:fe:79:e9:0d:a3:a9:aa:29:c0:8a:93:d4:e6:
f1:cd:90:f3:9d:fb:78:96:b0:c4:73:a2:58:aa:dc:2f:74:e6:
76:1a:8a:7a:35:24:df:a4:7e:f4:26:c5:3c:d6:71:21:a4:42:
36:cf:71:3f:5e:5d:5e:ea:39:4c:f8:2e:28:2b:11:38:60:8f:
d5:5c:6b:55:33:92:18:2e:00:4b:66:3b:f0:a1:c4:9c:ea:a7:
8a:4a:16:e8:06:83:f6:2a:5c:a9:45:e7:3d:6c:68:aa:b3:66:
a7:6d:02:43:56:32:3e:a4:1e:1b:08:57:45:92:71:3c:5a:12:
0a:f3:c0:71:e4:11:41:fe:1e:db:0a:13:b6:09:f4:79:15:9c:
51:70:c5:d4:2a:e5:36:ce:ef:be:7c:86:7a:1b:49:0a:83:c7:
82:6b:64:75:f6:c4:0a:d5:c8:67:83:16:5b:3c:12:fb:e9:6e:
de:97:38:42:2b:15:96:5c:3b:e3:77:a6:36:e6:1b:e9:64:32:
47:91:b2:fd:66:67:ef:4b:f8:8c:08:f4:5f:f1:57:0e:ab:79:
5a:80:6e:91:25:00:54:e8:bb:bd:cb:5b:3f:26:fb:c1:bf:f0:
c7:1e:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:48 2025 by rpki-client