Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/v5rd3XnU3ZqmnqL71QiXWoaFpHQ.roa
File: v5rd3XnU3ZqmnqL71QiXWoaFpHQ.roa (raw, json)
Hash identifier: cUnxFs8/ItsIv+X+YpAJHR09CMVKn6T7EVV1k7xhbX0=
Subject key identifier: BF:9A:DD:DD:79:D4:DD:9A:A6:9E:A2:FB:D5:08:97:5A:86:85:A4:74
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 018BFE41DC916A3CDF1D67658596C777BCBA
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/v5rd3XnU3ZqmnqL71QiXWoaFpHQ.roa
Signing time: Thu 23 Nov 2023 22:16:51 +0000
ROA not before: Thu 23 Nov 2023 22:16:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215978
IP address blocks: 2a13:ef44::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fe:41:dc:91:6a:3c:df:1d:67:65:85:96:c7:77:bc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Nov 23 22:16:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf9adddd79d4dd9aa69ea2fbd508975a8685a474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:65:b8:30:a3:6f:ab:86:d7:b9:c1:3d:af:
1d:b9:1d:68:ce:27:a8:22:51:01:d2:37:cb:62:1a:
a5:22:61:6f:ff:e5:69:2a:2f:74:8c:7b:43:f8:e8:
e9:dc:d9:5b:0a:3f:43:45:45:0f:88:90:53:db:9a:
4a:b6:26:57:79:d8:8b:24:88:9a:6c:33:d1:4f:1d:
74:b9:2e:89:0f:e4:29:ff:6a:2e:39:c4:16:67:1a:
7f:80:ec:4a:f6:66:9f:c7:4d:a6:cb:ee:09:33:2a:
3a:48:5a:c2:0f:e3:cc:d5:f6:5c:3a:6c:52:0a:24:
ba:87:ce:d3:2b:96:e7:2a:23:8a:24:2f:1f:ce:68:
0a:5b:b9:13:d9:a3:0f:d5:ae:b3:6d:9d:2f:b3:93:
59:41:24:23:66:1b:cc:74:ba:8d:8e:9d:ba:25:28:
42:68:b6:8e:79:8c:89:e1:00:cb:5d:33:15:75:01:
a8:76:94:86:24:39:38:d1:ff:41:79:45:fd:9f:0b:
ad:f6:ac:ec:c4:ce:13:bb:bb:09:c1:b4:6e:e8:ce:
77:26:f8:64:5d:44:b5:71:81:c7:67:cc:c6:eb:98:
3f:c2:8c:84:f7:e7:df:f2:0d:b7:56:df:6a:c9:30:
41:72:3f:a5:cb:6f:c7:f3:53:13:00:00:fb:f5:9c:
15:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9A:DD:DD:79:D4:DD:9A:A6:9E:A2:FB:D5:08:97:5A:86:85:A4:74
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/v5rd3XnU3ZqmnqL71QiXWoaFpHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef44::/32
Signature Algorithm: sha256WithRSAEncryption
7f:35:a6:86:b2:33:94:da:86:c1:06:02:bb:f0:4c:02:87:c6:
b3:73:af:bd:e9:de:f5:89:f8:10:82:27:56:51:1f:58:01:46:
d0:6f:7e:79:40:81:63:96:9f:20:b6:5e:a4:2f:93:a4:64:04:
cd:e7:97:b3:36:0d:d1:8d:69:3a:76:dc:ec:50:bd:90:53:fa:
40:d1:11:f2:b2:74:f1:25:78:ae:97:29:f2:50:53:17:5d:e7:
b5:c2:39:d4:83:d1:8a:34:af:1b:d9:81:b0:0b:e8:4c:c8:08:
7d:da:41:42:06:1a:9a:60:5c:97:40:36:c3:38:bd:48:42:38:
8a:99:23:49:72:47:d3:40:30:ad:8d:49:59:67:a1:06:8f:48:
a0:a6:50:71:5b:8e:b1:d1:dd:cd:dc:59:08:fe:92:8c:c7:2c:
0b:8e:45:1b:38:37:89:d9:e1:f5:48:89:3e:91:ed:8d:98:ad:
85:ba:3f:95:9c:5c:8e:c0:e5:50:a5:cd:8b:fd:74:65:2a:da:
20:e9:31:67:67:73:b4:1c:4a:f6:ab:68:b8:fe:33:da:3e:73:
8f:3e:6d:7b:96:86:e4:b2:c5:86:1d:fa:75:3b:5c:0f:02:f1:
ed:a2:4c:c6:79:6d:2a:ae:63:88:12:6f:11:22:bb:54:4d:9c:
c0:d4:25:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:52:11 2025 by rpki-client