Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/w6nyjw8CCPdGWE2r0om0qvXFyXo.roa
File: w6nyjw8CCPdGWE2r0om0qvXFyXo.roa (raw, json)
Hash identifier: 1O15ZgeKf2Rbzxb6TQY0MNC2RDhbgVcfZUfdxbDgya4=
Subject key identifier: C3:A9:F2:8F:0F:02:08:F7:46:58:4D:AB:D2:89:B4:AA:F5:C5:C9:7A
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 019424B36CB0C00CA0378DE5365B806E8BE8
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/w6nyjw8CCPdGWE2r0om0qvXFyXo.roa
Signing time: Thu 02 Jan 2025 01:48:46 +0000
ROA not before: Thu 02 Jan 2025 01:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 2a13:e940::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:6c:b0:c0:0c:a0:37:8d:e5:36:5b:80:6e:8b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Jan 2 01:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3a9f28f0f0208f746584dabd289b4aaf5c5c97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:25:9d:27:3f:a9:11:4d:d6:e0:7a:c1:eb:07:
6e:7d:28:92:a8:a9:40:f8:48:a5:1c:0a:0d:6a:04:
fb:74:bb:af:3f:31:a0:66:70:71:78:49:05:57:e8:
48:8d:b0:28:11:04:fb:99:49:12:1f:0a:de:eb:60:
c1:07:14:84:3c:c3:ec:48:24:b9:48:bd:83:85:e5:
16:ab:c4:13:73:5e:43:de:26:b4:e0:26:b1:03:83:
7f:0f:2c:a1:20:30:f0:cf:98:a7:66:14:7a:1d:12:
2b:f1:d9:ea:7c:e4:34:16:24:27:bb:83:5c:87:f0:
ba:7c:8d:a0:38:dd:66:b2:76:bd:14:c6:3c:e2:40:
b1:78:66:d0:e3:f1:cd:21:25:a5:e5:a8:f2:c5:5f:
a4:42:e0:86:bd:65:7f:eb:5e:07:42:c7:4c:e7:43:
cf:ee:ed:ef:5d:7d:02:7f:85:31:0c:f2:50:70:db:
73:0b:8d:f8:a3:e1:e8:9f:dc:c7:62:c6:65:9b:04:
5f:7d:6b:b7:d1:09:cd:3a:3b:74:38:f0:67:9e:fb:
03:98:a4:3c:00:98:12:4b:1e:95:89:43:19:fe:50:
51:d7:37:e1:bd:c3:33:1e:f5:10:59:20:8f:95:73:
a4:ce:42:3e:ea:40:1c:51:e5:9d:13:e9:d4:a4:ab:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A9:F2:8F:0F:02:08:F7:46:58:4D:AB:D2:89:B4:AA:F5:C5:C9:7A
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/w6nyjw8CCPdGWE2r0om0qvXFyXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e940::/29
Signature Algorithm: sha256WithRSAEncryption
79:9e:54:25:81:c8:22:59:49:71:0d:70:d3:68:3d:f5:ab:8e:
be:ef:b4:d9:44:15:96:d8:c2:d6:05:d3:4f:f9:a7:db:b1:df:
9d:4b:27:d2:18:f1:dd:0c:e4:0a:ab:7c:ba:e1:ba:68:11:33:
95:37:8d:a2:09:0b:f9:2b:11:3b:82:9d:69:5d:d3:02:72:8f:
7b:a0:0c:a0:4e:d1:3a:bc:ee:b5:ad:54:71:58:70:26:c7:b2:
f4:fe:70:20:69:0e:b6:9c:28:45:1d:e1:93:71:70:5a:7a:62:
48:80:37:b9:d5:51:b5:ec:17:c2:47:c6:50:e7:01:16:d9:4a:
71:e6:20:a8:32:4b:f0:f0:90:93:50:9e:e7:b2:64:95:ef:a9:
7a:53:42:42:89:c4:9f:a1:7c:8e:dc:34:99:7c:09:e4:7f:24:
d5:af:86:3e:f9:2b:a0:a8:50:90:5f:89:31:ff:d1:00:12:3f:
e8:38:ce:d2:68:8c:96:7b:6b:56:a6:31:20:f7:0b:19:59:f2:
7c:90:74:5f:d8:22:66:85:00:8c:44:4d:6b:72:51:1d:6e:02:
d0:68:60:73:19:ea:c5:be:8b:14:2b:d4:12:d7:26:71:db:66:
50:e9:b7:5d:c8:c3:3f:c6:ae:67:ee:69:2c:a5:e5:62:14:ad:
85:23:8a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:42:56 2025 by rpki-client