Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/sFM2L08PdnQHgMCoVVEVX-_LejQ.roa
File: sFM2L08PdnQHgMCoVVEVX-_LejQ.roa (raw, json)
Hash identifier: D70WCj0Q788eF6JwiW++nZ1G5lKNdvynQwijHtQSRWc=
Subject key identifier: B0:53:36:2F:4F:0F:76:74:07:80:C0:A8:55:51:15:5F:EF:CB:7A:34
Certificate issuer: /CN=19807ee602c94f400ed485e651ede60daec9ac4b
Certificate serial: 018A2D3A7221F27FB671709F041FED01F243
Authority key identifier: 19:80:7E:E6:02:C9:4F:40:0E:D4:85:E6:51:ED:E6:0D:AE:C9:AC:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYB-5gLJT0AO1IXmUe3mDa7JrEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/sFM2L08PdnQHgMCoVVEVX-_LejQ.roa
Signing time: Fri 25 Aug 2023 15:05:19 +0000
ROA not before: Fri 25 Aug 2023 15:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202044
IP address blocks: 2a13:b4c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2d:3a:72:21:f2:7f:b6:71:70:9f:04:1f:ed:01:f2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19807ee602c94f400ed485e651ede60daec9ac4b
Validity
Not Before: Aug 25 15:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b053362f4f0f76740780c0a85551155fefcb7a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:5a:3b:fd:b6:8b:00:de:ca:82:fc:28:32:
a5:ff:ff:78:b0:19:d6:77:b8:02:02:d4:6c:96:0d:
1f:03:b6:eb:9c:7f:54:10:42:da:57:3e:f6:db:dc:
e6:c5:de:b1:14:6c:52:aa:a6:70:13:e1:7d:f7:69:
75:b1:cd:b2:49:2c:52:87:2c:a1:2d:4d:7e:63:f1:
10:e0:a0:c4:07:da:b7:7e:9c:3f:cd:cc:c9:fb:8f:
b5:cb:3f:23:c1:aa:23:ba:60:8e:53:f9:f8:d7:b0:
ce:0c:95:f4:2d:e0:b3:2d:69:b4:55:f2:f2:a7:23:
b3:04:46:44:d1:50:12:6f:94:d9:b1:40:b2:fc:ab:
4e:e4:18:d1:fb:bf:ce:7f:3f:7c:2c:92:7b:d8:1c:
73:51:93:3b:80:66:8f:4e:6f:63:04:f1:62:f9:ce:
e6:56:d4:f1:05:46:27:0a:5a:32:72:a9:3c:70:cf:
0f:f0:aa:31:9f:6b:54:bc:69:2b:4b:30:d4:02:e6:
96:b7:5e:24:f4:8a:b4:25:77:a6:b5:27:5a:00:d8:
e7:fd:c0:97:fb:b8:8a:90:5e:68:3d:db:cf:62:95:
bb:34:53:9a:27:60:a1:36:42:f2:22:fe:9e:34:21:
78:d5:d8:45:bc:04:68:3e:47:28:52:15:b9:ff:68:
41:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:53:36:2F:4F:0F:76:74:07:80:C0:A8:55:51:15:5F:EF:CB:7A:34
X509v3 Authority Key Identifier:
keyid:19:80:7E:E6:02:C9:4F:40:0E:D4:85:E6:51:ED:E6:0D:AE:C9:AC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYB-5gLJT0AO1IXmUe3mDa7JrEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/sFM2L08PdnQHgMCoVVEVX-_LejQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/GYB-5gLJT0AO1IXmUe3mDa7JrEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b4c0::/29
Signature Algorithm: sha256WithRSAEncryption
3e:cc:6a:8a:a6:fc:81:c0:e8:47:9e:a6:7b:3a:99:ab:61:6d:
01:9f:7f:fb:5c:b6:9d:e7:a1:04:73:b5:85:c7:36:0a:16:1f:
a1:75:d4:b5:ea:52:58:10:0b:61:52:a2:80:3a:a4:67:7f:8a:
90:64:c8:ef:4a:64:ee:5f:22:0e:bb:63:5e:3a:56:c4:43:99:
76:46:eb:ce:75:b1:8e:af:b3:0c:76:33:1b:f3:64:0d:e6:bb:
8f:dd:f7:ac:22:39:f0:5f:d6:a1:13:0f:05:05:08:c2:ae:d2:
4b:60:ea:97:1a:96:aa:dd:0a:a1:ef:38:4c:44:3a:92:c0:b1:
3b:06:22:3c:47:5c:05:36:03:b6:9c:90:9a:ad:ee:75:9a:56:
7d:bf:cf:e7:72:57:2f:5e:c1:b5:8d:0e:eb:66:05:81:2d:e6:
f4:64:b5:39:c2:cf:a0:26:17:35:e8:e0:ae:ae:9b:f5:e5:3c:
f7:32:b4:0d:d0:4e:47:01:30:ab:5e:8e:7c:16:6b:9a:0c:a9:
be:d2:4e:5c:26:2a:92:15:7e:4f:77:5b:82:f0:01:a0:ba:39:
0f:a8:0d:4a:9b:d2:2e:41:9d:e3:00:58:42:65:e5:da:18:f7:
36:61:39:93:b9:16:51:87:e9:99:3d:02:99:65:15:21:07:13:
72:eb:74:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:16 2025 by rpki-client