Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/ecbbea-9bc4-4bcd-9522-1008204ba6fd/1/Jv8SwK0MC542smR4z3CyzCOakDA.roa
File: Jv8SwK0MC542smR4z3CyzCOakDA.roa (raw, json)
Hash identifier: GFhqfzNSKCeKbFGmuP5orGXVv+U5MiGSauihciDctbA=
Subject key identifier: 26:FF:12:C0:AD:0C:0B:9E:36:B2:64:78:CF:70:B2:CC:23:9A:90:30
Certificate issuer: /CN=7545b74cb0f5e0ae08071d34483e16a07e8b0f5d
Certificate serial: 01870CF48F12E31B84671DD36E32FCB4CFB7
Authority key identifier: 75:45:B7:4C:B0:F5:E0:AE:08:07:1D:34:48:3E:16:A0:7E:8B:0F:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUW3TLD14K4IBx00SD4WoH6LD10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/ecbbea-9bc4-4bcd-9522-1008204ba6fd/1/Jv8SwK0MC542smR4z3CyzCOakDA.roa
Signing time: Thu 23 Mar 2023 05:32:46 +0000
ROA not before: Thu 23 Mar 2023 05:32:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29491
IP address blocks: 2a13:d280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0c:f4:8f:12:e3:1b:84:67:1d:d3:6e:32:fc:b4:cf:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7545b74cb0f5e0ae08071d34483e16a07e8b0f5d
Validity
Not Before: Mar 23 05:32:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26ff12c0ad0c0b9e36b26478cf70b2cc239a9030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3a:ec:a6:11:2f:52:9b:6a:57:4f:61:f0:83:
65:f8:4e:9e:8d:bb:05:25:7f:f1:6d:b5:50:9e:05:
1e:b6:49:d4:d6:16:9f:64:2a:04:c8:f8:3f:54:3e:
11:00:e9:57:57:1e:6f:e8:c4:67:38:85:5b:ad:b4:
71:11:68:82:e6:ed:c4:4a:ed:5a:fc:0f:ba:fa:f0:
02:3b:48:2c:ff:47:c4:55:78:33:15:03:ab:8b:9d:
3c:af:ed:39:f0:7f:78:5b:80:8b:e9:6d:0b:e5:d8:
c1:c0:e5:80:0e:30:17:a3:24:57:ad:fa:eb:59:f6:
9c:71:0b:61:1d:29:4e:15:c4:49:56:db:c7:9e:5f:
b4:34:25:33:c2:93:9d:9b:99:5a:73:11:77:73:ab:
05:ba:b9:27:18:bf:e1:23:95:3b:7d:15:5a:e9:37:
b2:38:8f:ff:c3:a4:c6:e9:0f:6e:ce:64:a1:16:5a:
86:8f:62:cc:e6:8c:b5:2c:9d:cb:40:49:c5:85:8e:
24:eb:ff:04:5c:05:ca:f8:d7:78:eb:7e:73:6a:af:
35:29:79:66:79:ed:81:db:c0:93:1f:ba:d9:fd:94:
19:3c:ca:fb:4a:19:76:cc:2c:ef:41:ff:f7:c3:b5:
fe:60:f2:2c:5b:62:21:d4:0d:c3:f6:fb:d2:ef:5b:
72:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FF:12:C0:AD:0C:0B:9E:36:B2:64:78:CF:70:B2:CC:23:9A:90:30
X509v3 Authority Key Identifier:
keyid:75:45:B7:4C:B0:F5:E0:AE:08:07:1D:34:48:3E:16:A0:7E:8B:0F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUW3TLD14K4IBx00SD4WoH6LD10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/ecbbea-9bc4-4bcd-9522-1008204ba6fd/1/Jv8SwK0MC542smR4z3CyzCOakDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/ecbbea-9bc4-4bcd-9522-1008204ba6fd/1/dUW3TLD14K4IBx00SD4WoH6LD10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d280::/29
Signature Algorithm: sha256WithRSAEncryption
32:91:86:67:07:f1:90:3d:ab:4f:65:29:ad:f5:a3:91:22:9c:
fe:f1:2b:d0:69:d2:52:1b:0c:8f:75:0c:5a:2a:4f:7b:63:64:
ad:9d:f5:09:b8:71:a0:ce:90:a2:9b:6d:3d:1d:ee:af:d4:d6:
29:6e:bc:80:64:e2:1c:a6:b8:6b:40:06:b2:6b:5f:89:0c:54:
8a:12:e1:17:70:16:cc:8b:05:e8:5a:56:8e:a1:32:6a:6a:dd:
97:0c:f8:ca:52:95:71:97:09:80:f7:13:cd:cf:d2:3a:4c:25:
a7:c9:b7:ce:d8:9e:19:13:d4:c2:77:a3:5d:e2:23:b6:b5:15:
20:00:31:e1:52:95:81:e9:b7:d2:be:24:0a:10:9f:ce:52:94:
6d:97:07:10:f7:47:df:8e:37:41:e1:2b:a3:bb:31:9b:84:7f:
21:99:c3:1a:00:ad:ec:1c:83:4b:72:34:ea:ba:20:0f:bd:78:
21:20:e3:d9:49:56:5f:57:47:df:cf:92:08:be:76:08:6d:26:
74:22:9e:20:5c:af:27:6e:6a:1f:18:00:11:18:16:8e:9a:2d:
19:45:b4:48:0f:43:65:e3:1d:ec:9b:cb:72:de:6c:98:38:52:
3f:6c:d3:4e:db:20:2d:57:30:2c:90:49:d5:d6:9a:f2:46:8d:
0e:f5:3c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:22:34 2025 by rpki-client