Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/U0tP_F7sIdc2glW1oOmFzaaGMqg.roa
File: U0tP_F7sIdc2glW1oOmFzaaGMqg.roa (raw, json)
Hash identifier: shlpzy6dHGBBoYIz88yH7U1UaQp821h24HX3zG604NQ=
Subject key identifier: 53:4B:4F:FC:5E:EC:21:D7:36:82:55:B5:A0:E9:85:CD:A6:86:32:A8
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 018C736287F7937F296957A8CDADC544A912
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/U0tP_F7sIdc2glW1oOmFzaaGMqg.roa
Signing time: Sat 16 Dec 2023 16:08:06 +0000
ROA not before: Sat 16 Dec 2023 16:08:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216398
IP address blocks: 2a13:ef41:e000::/35 maxlen: 48
2a13:ef45::/32 maxlen: 48
2a13:ef44:f003::/48 maxlen: 48
2a13:ef44:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:73:62:87:f7:93:7f:29:69:57:a8:cd:ad:c5:44:a9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Dec 16 16:08:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=534b4ffc5eec21d7368255b5a0e985cda68632a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e5:cb:09:c1:55:a1:0d:22:0f:c5:8b:90:6e:
21:be:d4:43:8f:99:74:16:bc:6f:d6:b1:f5:82:06:
05:1c:bc:6d:bb:98:3a:20:59:1b:4e:0a:6f:3a:03:
7c:1b:e7:9e:cb:0f:11:70:1f:8f:de:46:2f:1b:ca:
87:ae:52:16:5d:e6:e4:df:fb:07:0f:b7:3a:e4:5f:
48:72:9e:f8:62:4e:b0:38:92:c3:09:42:93:16:de:
be:0e:f3:cc:0d:4c:91:d3:21:b7:b8:40:d7:c3:e0:
ed:de:6a:6e:bc:4b:91:79:2e:97:f0:72:d4:61:28:
d0:8f:97:04:96:43:e3:cc:fc:27:fe:56:74:d9:9f:
7f:39:cc:bc:d8:39:eb:6c:39:ed:71:37:45:1f:2a:
18:a7:1c:ac:73:d9:cc:bc:57:8b:30:50:94:38:83:
97:4f:0d:8d:77:b7:2e:47:45:34:45:66:7e:e7:6a:
98:a8:21:7e:95:13:c3:fd:2c:04:6b:ff:14:a2:c9:
de:c3:b5:43:6a:7f:a9:c8:34:1b:4e:d6:ac:12:9d:
d7:44:53:30:b0:8e:b1:99:5c:ec:de:4d:82:43:dc:
93:2a:7a:72:95:22:a4:62:d9:88:6a:a7:5e:46:5f:
ca:13:0a:4c:f4:60:a9:d0:5c:64:9d:90:02:b7:4c:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4B:4F:FC:5E:EC:21:D7:36:82:55:B5:A0:E9:85:CD:A6:86:32:A8
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/U0tP_F7sIdc2glW1oOmFzaaGMqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef41:e000::/35
2a13:ef44:b00b::/48
2a13:ef44:f003::/48
2a13:ef45::/32
Signature Algorithm: sha256WithRSAEncryption
6c:59:13:c9:9b:21:dd:8a:80:ad:95:c6:1a:96:91:29:a8:58:
15:52:77:a3:be:80:66:92:b5:30:d7:62:de:3f:2b:81:f4:5e:
f2:50:73:12:83:e1:f6:af:95:95:d0:ff:c8:83:fd:34:4c:19:
26:dc:7e:da:36:e2:95:fa:f7:45:69:f5:0b:80:e6:a2:eb:27:
e0:32:04:24:35:ba:d0:cf:61:77:de:3a:48:db:ba:ae:12:b6:
93:40:61:1d:c2:4d:c5:92:96:f0:98:12:52:5f:ce:16:d3:32:
e8:61:73:e9:0e:34:e7:43:60:73:d5:9a:a7:5c:d3:e2:25:ef:
ce:21:08:a2:9e:88:3f:9a:ea:9e:5c:cd:0a:fb:93:0e:f6:d3:
e9:b9:74:7c:0f:58:bb:50:3d:ba:79:e7:06:a1:ac:3e:fd:ad:
23:b5:90:e6:31:1b:d2:65:97:3f:14:6c:4e:39:e5:30:8b:aa:
1e:21:94:88:43:ce:ca:40:dd:d2:32:ed:60:7e:3c:43:b9:4f:
cd:a0:f0:43:87:ef:73:37:0a:e9:cb:5b:2a:66:8f:cb:b5:eb:
34:f2:04:56:5d:73:bd:3d:d9:67:c0:87:59:29:29:1b:80:c2:
bd:e9:1b:9a:bc:fa:14:42:d1:42:8f:f3:15:49:35:cb:a8:c8:
c7:7e:68:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:46:47 2025 by rpki-client