Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/9DaucjtzMRXDPg_EUHBIoY3bTOU.roa
File: 9DaucjtzMRXDPg_EUHBIoY3bTOU.roa (raw, json)
Hash identifier: mZ0MXLkwNirDY5NT53cggMsyjcWqPUK0z8HcRTHFoqc=
Subject key identifier: F4:36:AE:72:3B:73:31:15:C3:3E:0F:C4:50:70:48:A1:8D:DB:4C:E5
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 018C4427E756819A72DDF6BCC4DD6F37A211
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/9DaucjtzMRXDPg_EUHBIoY3bTOU.roa
Signing time: Thu 07 Dec 2023 12:01:54 +0000
ROA not before: Thu 07 Dec 2023 12:01:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216398
IP address blocks: 2a13:ef41:e000::/35 maxlen: 48
2a13:ef45::/32 maxlen: 48
2a13:ef44:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:27:e7:56:81:9a:72:dd:f6:bc:c4:dd:6f:37:a2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Dec 7 12:01:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f436ae723b733115c33e0fc4507048a18ddb4ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:86:8c:96:52:99:83:9e:ca:04:1b:b3:a7:52:
59:99:de:22:25:ee:ef:42:75:4e:36:ad:86:2f:74:
7d:b3:1c:dd:5c:2c:92:89:f0:bc:ec:84:ca:fc:ab:
7e:3e:0b:30:a6:57:6d:37:6f:ff:32:8a:4d:be:69:
20:a7:aa:f0:be:f3:73:7e:05:3d:88:59:81:26:f7:
c8:fe:a2:14:23:1d:ce:4f:8c:99:5d:33:e0:84:31:
03:4e:04:85:ff:9e:ee:f4:fb:12:79:b0:ef:d6:ba:
f2:d5:da:58:41:38:a5:a4:dd:ae:f9:71:5a:e5:bd:
7e:e8:70:5b:69:f5:06:ba:8b:14:02:ca:60:43:76:
0c:15:2f:73:32:d1:2a:46:fb:f1:a1:ee:9f:9d:5f:
fe:7c:db:b5:07:95:a4:f6:d6:1b:6c:6b:09:51:e9:
19:73:33:53:ca:ad:35:74:55:ec:3b:f9:69:a1:24:
67:91:f9:e4:0d:c9:0b:41:d5:20:d6:7a:c2:50:3b:
5c:c1:2b:71:27:bb:bc:74:42:53:84:21:9b:de:fd:
7f:03:fd:18:2c:b6:1f:6d:86:ab:f0:b1:ee:e2:c3:
6c:45:38:83:48:50:0b:64:02:82:6b:e2:d8:f6:1f:
6d:47:95:ef:b8:ce:bb:c9:2d:55:a2:43:9a:8e:f5:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:36:AE:72:3B:73:31:15:C3:3E:0F:C4:50:70:48:A1:8D:DB:4C:E5
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/9DaucjtzMRXDPg_EUHBIoY3bTOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef41:e000::/35
2a13:ef44:b00b::/48
2a13:ef45::/32
Signature Algorithm: sha256WithRSAEncryption
9b:f7:8f:e2:49:0b:39:ce:bc:27:41:b7:18:7c:87:4e:6b:77:
c8:49:e5:0a:71:b3:4d:f1:7c:1b:a4:5d:e0:da:a5:43:64:09:
58:f4:97:ae:97:70:94:c8:86:59:60:ed:c8:63:3f:dd:db:0e:
57:c2:dc:0a:96:91:24:13:3b:f7:ce:cf:73:a2:9b:32:81:8b:
00:70:45:bb:04:86:79:28:0a:00:19:cd:ba:c0:05:bb:4c:fc:
1e:0e:86:37:06:59:6f:2d:3e:ea:f2:97:d0:97:27:50:9d:c6:
2a:fe:e2:8b:fc:e2:b4:eb:df:1e:10:22:b1:93:75:23:cf:0b:
8f:a4:94:45:76:c6:85:c3:75:3f:d5:e5:14:58:56:45:a7:45:
f4:cf:21:40:c4:87:44:ba:94:a3:5f:26:3b:ff:fd:3f:7e:a7:
e3:2d:6d:25:df:f8:db:b0:d5:40:98:65:0c:3a:88:44:57:a8:
18:3f:3d:d0:e1:f3:85:11:66:46:76:ce:a7:9b:13:57:81:de:
6a:fe:a3:d4:6d:2d:09:e9:54:b7:e3:6e:e4:40:ef:14:11:a0:
fb:4f:65:93:db:8e:de:9e:6d:2d:57:3b:c2:12:c2:68:f5:2a:
13:16:5e:c3:e9:a1:52:36:53:69:93:24:1c:69:b3:78:00:64:
b2:1e:a7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:37:48 2025 by rpki-client