Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/apYDa0miMFSNZbqZx8SvcMNbVDk.roa
File: apYDa0miMFSNZbqZx8SvcMNbVDk.roa (raw, json)
Hash identifier: P+XaSMrbP0pt2+WSA9+4SIgOOkE8vSMWO8prdAKDjHs=
Subject key identifier: 6A:96:03:6B:49:A2:30:54:8D:65:BA:99:C7:C4:AF:70:C3:5B:54:39
Certificate issuer: /CN=2c52d4608ec623920744ebc6cc83746aa684142c
Certificate serial: 018A2D3F307AF593901D17F8274F539DBFCD
Authority key identifier: 2C:52:D4:60:8E:C6:23:92:07:44:EB:C6:CC:83:74:6A:A6:84:14:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFLUYI7GI5IHROvGzIN0aqaEFCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/apYDa0miMFSNZbqZx8SvcMNbVDk.roa
Signing time: Fri 25 Aug 2023 15:10:30 +0000
ROA not before: Fri 25 Aug 2023 15:10:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150445
IP address blocks: 2a13:b740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2d:3f:30:7a:f5:93:90:1d:17:f8:27:4f:53:9d:bf:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c52d4608ec623920744ebc6cc83746aa684142c
Validity
Not Before: Aug 25 15:10:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a96036b49a230548d65ba99c7c4af70c35b5439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:83:de:e0:da:c9:d7:12:25:95:90:32:3b:cd:
92:5d:96:1f:d8:a8:92:8a:34:c9:09:c5:0e:b5:4d:
ef:26:bd:fd:db:b4:49:0c:25:4b:32:c9:91:07:d8:
79:03:ed:9d:43:72:b3:11:8b:a0:22:71:6b:d3:b3:
b1:e3:5f:b6:d6:18:91:e7:1e:c7:b7:83:54:e2:38:
87:24:ee:1e:05:bb:bb:42:4e:ba:3c:2d:0e:85:68:
9e:ca:5d:ee:ad:11:df:f1:04:57:8b:72:99:2f:00:
b9:28:12:62:e5:76:6e:11:82:0a:38:9b:dd:39:c6:
a1:54:bf:52:f5:01:e1:0c:51:d0:58:6a:fd:3f:09:
6b:66:ca:66:b8:99:17:5b:8d:07:5e:3e:ee:90:71:
f3:c1:4f:08:99:ba:3a:3e:3b:28:ef:81:51:77:9c:
88:c3:cf:c6:80:95:72:fc:7a:65:73:4e:b4:4c:58:
8c:1d:73:47:e6:0b:23:4b:a9:92:6a:e9:48:c3:6a:
0f:cd:c7:55:60:c3:b1:31:b5:df:97:84:fc:51:b5:
52:3b:d8:da:93:71:d3:ac:71:f2:1d:84:3e:e1:e7:
7b:18:da:5b:47:75:7f:05:24:78:2a:71:a8:50:95:
24:b3:48:2c:b7:85:6b:8d:ee:7d:b7:b7:84:00:57:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:96:03:6B:49:A2:30:54:8D:65:BA:99:C7:C4:AF:70:C3:5B:54:39
X509v3 Authority Key Identifier:
keyid:2C:52:D4:60:8E:C6:23:92:07:44:EB:C6:CC:83:74:6A:A6:84:14:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFLUYI7GI5IHROvGzIN0aqaEFCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/apYDa0miMFSNZbqZx8SvcMNbVDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/LFLUYI7GI5IHROvGzIN0aqaEFCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b740::/29
Signature Algorithm: sha256WithRSAEncryption
7f:60:e3:b4:6b:d0:26:f5:f9:8a:49:f5:c2:77:9c:6f:e5:cf:
55:e0:a9:52:06:d4:5f:fb:26:35:a2:c2:13:a2:ef:0d:44:de:
8d:d7:52:72:59:ec:bb:7b:da:9e:e7:2b:18:7a:92:45:7e:6e:
b4:18:68:12:e1:e4:c5:89:13:56:51:d3:97:42:8a:0b:23:a5:
8a:2c:af:69:9a:19:be:15:65:c5:4e:08:17:29:32:87:c2:43:
b5:4e:fc:3b:e3:53:bf:fd:69:c3:9a:19:31:ee:0f:eb:ed:cb:
ba:99:f4:e0:40:76:12:53:15:80:08:18:1e:ee:21:02:33:ac:
49:42:9e:7e:33:54:a6:89:af:cb:3a:bd:3e:b2:fa:fe:ec:fc:
55:62:d4:cc:5b:fa:b2:f6:a3:65:3a:ed:27:87:e9:1a:fe:7d:
1b:c3:7a:8b:1f:8a:76:80:b4:47:b7:19:c2:75:69:6b:9d:16:
76:ba:d9:e5:77:33:5a:89:4c:ee:45:66:a1:d2:be:25:f0:dd:
83:9e:1c:9b:af:51:f3:04:70:69:a5:e3:1e:60:14:16:6c:49:
5b:44:d1:c2:4c:e7:69:52:ce:c5:ff:d3:1c:e1:3d:92:83:7c:
72:3a:3f:94:69:a8:4a:93:8b:cf:40:bb:16:e0:8c:f6:4f:73:
ad:4e:ec:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:26 2025 by rpki-client