Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/N2QuwvR3-RK48xUJxMc9wWDLf3E.roa
File: N2QuwvR3-RK48xUJxMc9wWDLf3E.roa (raw, json)
Hash identifier: 65ftfSTgz4jTOhcWf48QywIZMEWx07Y9pWNuXFnL38U=
Subject key identifier: 37:64:2E:C2:F4:77:F9:12:B8:F3:15:09:C4:C7:3D:C1:60:CB:7F:71
Certificate issuer: /CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Certificate serial: 019421B257200DC9014CFD6FB45C7DB55A5C
Authority key identifier: EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/N2QuwvR3-RK48xUJxMc9wWDLf3E.roa
Signing time: Wed 01 Jan 2025 11:48:43 +0000
ROA not before: Wed 01 Jan 2025 11:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:5941::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:57:20:0d:c9:01:4c:fd:6f:b4:5c:7d:b5:5a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae2653179cafe5ff6651c6058b67ad2d2c8485e
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37642ec2f477f912b8f31509c4c73dc160cb7f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:4f:45:96:6a:be:0c:75:3a:30:2d:5b:84:
16:b0:d4:dd:6b:06:5a:2b:c9:17:22:2d:27:35:a4:
7d:41:a7:ee:08:f3:ad:2d:ce:1b:72:b3:76:a5:c7:
7b:3f:c1:69:2f:0e:6a:ec:06:4c:ce:30:24:c2:be:
56:47:ae:03:ec:c3:55:5e:ce:b5:fc:38:10:7b:5e:
12:95:fa:fa:d3:2c:6e:ce:91:84:49:0c:43:14:fd:
a1:5a:bf:59:d2:98:04:69:de:ca:85:47:18:bc:09:
fe:cf:63:9b:99:2d:14:28:e2:2c:54:0b:a1:1e:0a:
e7:b6:5d:49:62:02:11:d0:31:7e:2f:bb:c4:07:17:
de:b3:ea:4b:f2:41:95:02:98:aa:4c:b8:36:41:2e:
2a:65:9f:93:48:d9:82:ae:5c:ad:7f:0e:bf:7a:55:
f3:5c:45:d3:12:53:2b:e7:f2:1b:32:20:90:75:eb:
9a:1d:ac:d3:b6:e5:36:51:28:37:e2:d9:e0:90:8f:
a1:c2:36:6d:d0:75:87:bf:55:be:4c:7f:09:8b:0b:
e8:61:f8:02:06:0a:7d:c6:f6:09:df:70:fd:ac:a1:
53:f8:61:fb:b4:90:c4:c8:8d:52:5c:14:65:43:04:
e1:26:bb:23:07:e2:48:2c:86:42:9a:e5:41:0f:9c:
43:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:64:2E:C2:F4:77:F9:12:B8:F3:15:09:C4:C7:3D:C1:60:CB:7F:71
X509v3 Authority Key Identifier:
keyid:EA:E2:65:31:79:CA:FE:5F:F6:65:1C:60:58:B6:7A:D2:D2:C8:48:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uJlMXnK_l_2ZRxgWLZ60tLISF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/N2QuwvR3-RK48xUJxMc9wWDLf3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/19e9c5-82e2-438b-a0e9-992d797f4bbb/1/6uJlMXnK_l_2ZRxgWLZ60tLISF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5941::/32
Signature Algorithm: sha256WithRSAEncryption
74:6c:f0:86:a6:b4:fb:96:63:14:47:48:b2:ce:5b:06:33:73:
25:7f:ad:5f:1f:e9:7d:2c:15:7b:5a:99:5f:9b:fd:be:7c:52:
40:9c:06:1d:90:36:b3:e1:58:a7:b1:dc:5c:28:81:83:5a:d4:
83:d9:95:d7:09:43:97:1c:50:dd:fe:a3:ed:1c:8c:e7:07:13:
53:23:a2:3a:cd:e7:ba:06:3e:a1:dd:d9:e7:fd:77:bb:37:69:
66:9a:6a:34:c3:0c:77:37:b4:b9:95:70:3f:5f:e7:1d:59:a7:
e7:4e:66:d5:f9:af:f0:97:9e:1f:78:37:20:a2:5e:b6:a6:79:
b0:d3:53:b7:5b:f8:74:33:09:55:5e:b3:6b:14:c2:09:cc:fd:
fa:ad:7c:8c:cc:83:8d:88:40:1f:26:cd:8f:27:1d:2a:6b:96:
5b:cd:c9:21:e9:3e:4d:0f:c5:1a:df:3a:73:ea:63:18:fd:3d:
82:de:a5:d1:09:7e:fb:bb:e8:ea:30:42:cc:81:ee:f8:be:82:
77:10:d6:ec:b9:e2:2c:d8:f0:09:9d:71:b5:b4:ae:2c:d7:f1:
83:49:80:b1:77:8c:81:f2:de:c1:7a:e4:d3:eb:28:f0:51:a3:
5d:1c:0c:0a:20:33:97:ef:52:6a:e2:ae:6b:57:e2:05:6f:2a:
72:70:7b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:50:36 2025 by rpki-client