Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/rTYWpF5_d-l3Kc_Aj1WkXWY_lC4.roa
File: rTYWpF5_d-l3Kc_Aj1WkXWY_lC4.roa (raw, json)
Hash identifier: 1ggXdl4LsKtgG9n7KW9aAkcIVW9W/jS+65czegsI90g=
Subject key identifier: AD:36:16:A4:5E:7F:77:E9:77:29:CF:C0:8F:55:A4:5D:66:3F:94:2E
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 018C4F7CFFF0A3307B18AD461F77749CD993
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/rTYWpF5_d-l3Kc_Aj1WkXWY_lC4.roa
Signing time: Sat 09 Dec 2023 16:50:41 +0000
ROA not before: Sat 09 Dec 2023 16:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216396
IP address blocks: 2a13:ef46:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4f:7c:ff:f0:a3:30:7b:18:ad:46:1f:77:74:9c:d9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Dec 9 16:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad3616a45e7f77e97729cfc08f55a45d663f942e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:64:3b:ae:9e:c9:11:38:d5:75:2d:71:eb:
0a:a7:bf:87:26:33:01:00:f2:16:17:82:9d:e9:ca:
8d:26:81:72:7a:2b:21:28:17:e1:a9:25:c8:e2:39:
12:a6:da:27:4b:91:31:79:bb:d5:3f:0c:6b:e6:b5:
f7:5a:5c:8b:e4:c0:6f:43:93:77:01:70:2f:96:9d:
dd:fd:42:3b:ed:c2:bd:04:92:2a:17:12:4e:1d:3b:
73:9a:1f:a1:36:ee:64:18:85:8c:93:ae:84:89:ac:
a0:01:f3:b6:bc:a7:b8:22:db:8d:cb:a0:3d:fd:c6:
01:b8:2d:ac:77:65:da:24:d5:cf:84:cd:e5:bd:a0:
a3:b1:29:09:82:54:2e:c0:82:74:f8:4f:5f:af:e5:
50:d9:47:ad:ef:9c:32:0e:bb:e0:5a:16:d9:d7:a4:
8d:16:0e:ea:fe:b8:ad:a6:92:dc:d2:81:78:dd:fd:
97:0c:97:1b:01:c1:23:40:ad:b3:1d:0b:f5:8c:6c:
35:e8:f6:7f:2a:34:65:99:48:42:1e:b4:11:92:a9:
9f:8a:c0:ea:1f:c7:c4:82:fc:69:a5:de:2b:b7:a9:
f0:76:f9:55:22:4f:49:46:89:65:a7:5b:55:20:e8:
b8:00:c6:92:a6:de:fa:35:d0:c1:a9:d0:02:6d:c0:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:36:16:A4:5E:7F:77:E9:77:29:CF:C0:8F:55:A4:5D:66:3F:94:2E
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/rTYWpF5_d-l3Kc_Aj1WkXWY_lC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef46:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
51:9a:1b:d2:42:a8:26:97:26:cb:06:f4:01:af:2b:aa:ed:c0:
f3:c5:cf:fa:2a:20:42:e6:7e:c2:20:22:e1:5f:ed:0d:10:e8:
2f:9c:5f:f3:f4:57:28:75:29:31:61:d1:98:07:ad:d3:02:60:
30:93:04:d9:b5:bd:96:36:cc:49:81:67:eb:c0:5f:89:42:d9:
5d:0b:63:c1:16:08:d4:7c:92:54:e3:c5:b3:fa:34:60:01:19:
05:b8:23:4b:82:b5:07:cb:23:5e:1b:e3:a8:f2:41:ab:21:df:
f4:6e:8f:b1:9e:f6:28:1e:a4:29:97:9b:5e:65:a8:6c:1b:99:
a0:60:f3:3d:f3:3d:af:2b:28:96:cf:a0:de:48:12:bb:3c:6c:
51:7a:cb:c8:3c:72:26:2a:1d:78:52:c5:66:59:32:a8:f1:54:
27:82:d1:35:2a:f9:b8:25:dc:42:a2:6a:6a:03:e4:b6:8c:00:
0f:0d:ea:0a:3b:20:8d:e1:68:2d:07:c6:73:c9:36:8a:3e:a5:
94:f8:27:b4:92:3f:97:fd:a2:47:56:a4:f4:a8:be:1a:84:ee:
be:42:0f:fe:52:7b:4d:fb:52:80:d7:2a:37:83:4f:47:d5:9a:
fe:e7:a9:ba:41:27:ce:b6:d4:40:16:e4:92:1b:70:24:68:91:
4a:a2:f6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:03:18 2025 by rpki-client