Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/1MMOey2DFiHGwBuawoDAV5GTR0U.roa
File: 1MMOey2DFiHGwBuawoDAV5GTR0U.roa (raw, json)
Hash identifier: C6gJNXtwf6inO2jQLVsOQct8LTsyFQuwXSbNPT+y76g=
Subject key identifier: D4:C3:0E:7B:2D:83:16:21:C6:C0:1B:9A:C2:80:C0:57:91:93:47:45
Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial: 019426D91C5A67AC0DA35523A08F7739E6F0
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/1MMOey2DFiHGwBuawoDAV5GTR0U.roa
Signing time: Thu 02 Jan 2025 11:49:10 +0000
ROA not before: Thu 02 Jan 2025 11:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214216
IP address blocks: 2a13:8340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:1c:5a:67:ac:0d:a3:55:23:a0:8f:77:39:e6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
Validity
Not Before: Jan 2 11:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4c30e7b2d831621c6c01b9ac280c05791934745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:a4:7e:92:a4:92:a2:ed:51:b9:86:a0:e9:
e5:a2:15:06:b6:2d:a1:67:16:7e:bd:7a:df:d9:2f:
a1:8e:e7:62:61:ed:21:04:50:4c:47:86:5b:15:65:
dc:13:cd:ad:ae:39:85:3d:60:a1:65:05:60:6f:16:
ff:e7:f8:3c:e5:ca:08:52:a0:95:b4:f6:38:99:aa:
b7:fe:8f:a8:06:aa:5a:6d:c6:b8:1d:2a:79:26:64:
4e:3a:93:0f:51:c3:cb:89:9b:54:56:e5:4b:ce:1d:
5d:82:d0:dd:a2:14:9c:49:02:12:49:a2:66:07:71:
df:d2:d0:96:76:a7:55:38:37:d3:69:18:ad:93:e6:
ce:71:a3:18:5e:06:52:d3:23:9a:11:ce:68:3c:e3:
8f:97:8b:d2:bd:86:dd:a6:5b:d3:66:bf:08:45:7e:
88:34:73:c1:67:23:21:81:6e:53:c5:b4:f4:b2:07:
aa:ef:85:c8:b1:8d:d9:cc:9b:08:17:b7:30:cc:4d:
1a:0e:ab:50:68:aa:5d:5e:a8:4b:cf:20:2c:47:bd:
77:bf:b4:58:f4:f7:73:7b:e3:60:a2:9c:ad:c0:8c:
c0:89:f4:e7:cd:f8:f9:d5:db:e3:63:04:9b:11:ca:
44:70:bb:db:d2:e9:43:1a:d8:92:0d:b6:e3:55:82:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C3:0E:7B:2D:83:16:21:C6:C0:1B:9A:C2:80:C0:57:91:93:47:45
X509v3 Authority Key Identifier:
keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/1MMOey2DFiHGwBuawoDAV5GTR0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8340::/29
Signature Algorithm: sha256WithRSAEncryption
64:cc:82:4e:5d:cf:f8:72:9d:84:8d:ec:d7:cf:6d:b4:b2:f0:
65:cd:6d:2e:01:30:87:96:97:e7:13:03:f5:17:db:f5:fe:81:
e7:ff:5f:ae:00:6c:9e:71:34:85:83:0f:ff:da:fb:f6:32:45:
7d:2d:54:3d:51:be:f9:20:2b:fb:61:83:bd:7f:42:3d:5e:dc:
e4:35:d9:dd:ca:a2:7a:41:d1:e0:45:e8:4e:57:1a:e5:dc:40:
96:d7:45:23:b6:90:97:b8:b5:ce:3a:65:11:f4:da:b9:e1:4e:
1d:41:b6:79:f8:5e:dc:1f:82:2f:8e:db:fc:23:d4:46:52:01:
17:63:8a:ac:fe:48:9a:57:8e:1a:89:45:4f:04:3e:fe:18:66:
7b:fe:a6:30:8c:2b:9c:45:9e:8b:7b:e6:73:8d:8f:bd:d4:c8:
81:30:32:66:14:4b:c2:a6:1d:a9:39:f7:0d:62:59:41:48:bf:
f5:26:d5:44:d3:c9:d5:a9:f7:8a:25:55:28:33:8b:31:4f:bc:
15:b2:44:c5:4e:fe:bb:70:ef:38:9a:04:03:e6:82:13:ae:3d:
1e:49:5f:b0:80:55:79:16:70:8c:78:78:1c:22:5d:d2:b0:bb:
9b:59:2f:cf:7c:ef:2e:c4:d2:2d:41:37:5e:fe:54:e3:95:ab:
27:63:42:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:37 2025 by rpki-client