Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/J84vfTEmt9In1sWBVB17KhLEvSU.roa
File: J84vfTEmt9In1sWBVB17KhLEvSU.roa (raw, json)
Hash identifier: OHWH7AwVpVtA2aRk2+01eqDDSXs7qUA61OlZNdu0DaE=
Subject key identifier: 27:CE:2F:7D:31:26:B7:D2:27:D6:C5:81:54:1D:7B:2A:12:C4:BD:25
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 018C7805F7945F6E74B2D9FCE04C109D9DFC
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/J84vfTEmt9In1sWBVB17KhLEvSU.roa
Signing time: Sun 17 Dec 2023 13:45:06 +0000
ROA not before: Sun 17 Dec 2023 13:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216289
IP address blocks: 2a13:ef44:f006::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:78:05:f7:94:5f:6e:74:b2:d9:fc:e0:4c:10:9d:9d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Dec 17 13:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27ce2f7d3126b7d227d6c581541d7b2a12c4bd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:08:dc:d4:1a:34:81:81:1b:8b:2a:b0:8d:
e1:05:96:84:03:82:77:e0:58:1e:1a:b2:f7:45:13:
a1:44:57:d5:8a:55:5f:19:70:cf:68:ab:94:da:4c:
a5:e5:14:a4:9c:13:12:54:e4:cb:e2:a4:3f:5b:a1:
a4:9a:c3:04:59:0f:81:28:63:d0:d5:e2:f5:c2:2a:
71:9c:8c:04:3a:31:1a:99:b5:96:00:2c:aa:9e:61:
67:7f:7f:28:ca:3e:2f:23:fc:10:97:a3:15:01:48:
f5:83:94:03:f4:f3:ef:17:5a:a0:97:12:c5:2a:be:
d8:67:3c:ed:fe:03:08:d6:ee:18:31:b4:c5:38:6a:
14:9b:bd:68:af:e4:5d:e8:84:33:d1:61:9a:5f:5d:
33:0a:71:05:fd:ad:32:93:77:c5:c3:e2:0b:a6:60:
b2:da:72:47:45:de:2f:29:b4:b4:5f:8c:67:7d:9c:
32:4d:17:83:57:7a:b2:ca:06:a4:b5:cd:79:95:c3:
bb:1b:81:7f:8a:e6:5f:58:03:4a:22:8c:59:13:d9:
56:68:43:c2:00:d0:c2:29:84:6e:00:c8:2e:ec:08:
a3:36:0e:59:4b:4f:0d:f7:74:64:42:06:b9:87:16:
fc:95:51:ed:6c:da:55:a7:f7:61:2f:76:14:b3:c5:
e9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CE:2F:7D:31:26:B7:D2:27:D6:C5:81:54:1D:7B:2A:12:C4:BD:25
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/J84vfTEmt9In1sWBVB17KhLEvSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef44:f006::/48
Signature Algorithm: sha256WithRSAEncryption
77:32:f0:8e:ce:62:66:59:f8:e8:47:0a:fd:d7:b0:12:f7:0b:
d6:4e:e4:6b:ee:f0:b8:c8:26:f2:46:e2:48:c8:7a:ef:ef:ce:
df:b5:a5:cd:d7:99:5a:c5:2b:cd:1d:c8:ab:c6:13:0b:1b:6f:
08:af:41:e4:54:f8:f9:87:7e:b0:e5:70:6b:3f:9c:1b:e6:b3:
79:4b:a3:2e:49:24:fd:75:fd:5a:62:36:38:24:77:23:d5:4d:
0a:fe:96:2c:45:49:22:e9:78:f7:45:70:fa:7f:ac:81:07:e5:
25:59:a5:84:78:cf:6b:bf:71:07:09:2a:ee:fd:76:81:1f:0f:
11:cc:6d:ba:34:ff:bb:bc:42:0b:2a:65:86:4c:09:c8:8d:dc:
07:7e:05:75:40:b0:61:c6:36:24:24:d6:27:b6:e0:18:76:a7:
b7:92:1e:fc:4e:9c:83:79:21:15:12:19:17:d0:3d:8d:40:9e:
92:d5:e1:2a:d0:73:bd:bb:65:cf:ab:ab:67:c6:b7:7f:5a:53:
9b:f3:3c:f1:39:79:12:f7:b0:5c:97:47:d5:b3:07:53:86:5f:
be:25:c8:a1:c0:85:09:82:50:05:d5:dd:9b:29:c5:39:91:26:
6c:9a:02:29:73:ff:8c:2f:9d:3e:b6:14:c4:16:0c:6a:fe:ca:
ae:3f:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:45:50 2025 by rpki-client