Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/wT6NFp3gqg_lEnVwZcLvo1HIXNM.roa
File: wT6NFp3gqg_lEnVwZcLvo1HIXNM.roa (raw, json)
Hash identifier: PqZBT7mV7REyAzquiE3E038ioWZsYjnxJLWTlzwItEk=
Subject key identifier: C1:3E:8D:16:9D:E0:AA:0F:E5:12:75:70:65:C2:EF:A3:51:C8:5C:D3
Certificate issuer: /CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Certificate serial: 018E0D2FD0841D0BA32D8F987054078F5BA6
Authority key identifier: FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/wT6NFp3gqg_lEnVwZcLvo1HIXNM.roa
Signing time: Tue 05 Mar 2024 05:57:00 +0000
ROA not before: Tue 05 Mar 2024 05:57:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200216
IP address blocks: 2a13:5040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0d:2f:d0:84:1d:0b:a3:2d:8f:98:70:54:07:8f:5b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Validity
Not Before: Mar 5 05:57:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c13e8d169de0aa0fe512757065c2efa351c85cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:53:37:bd:c3:52:03:4b:ef:3f:c4:c6:35:
e9:15:93:58:02:bc:63:c3:08:75:65:2f:9d:63:26:
e6:66:fe:6c:01:db:51:78:d7:3b:40:cb:a4:43:c7:
97:a1:0e:7c:2b:dd:53:5f:f4:b6:a9:8b:5a:14:e5:
26:60:4b:3b:8b:15:ad:70:0e:c2:d6:75:4c:45:13:
46:de:df:94:c6:38:25:63:0b:f4:53:9b:2b:92:8a:
ed:d0:3c:58:65:e1:08:39:04:fc:b6:87:ef:48:01:
d3:09:19:e3:85:f5:3c:6f:0f:03:9e:00:fb:4a:f7:
53:91:ee:6d:ee:3e:80:26:6a:44:47:02:25:aa:67:
d2:4d:a4:d7:69:d7:5c:ff:7a:0f:7a:1d:79:95:54:
fb:10:d9:c1:2c:8c:3d:e8:2b:78:ed:c6:35:31:d3:
92:56:4e:b9:d9:31:86:54:ea:3b:88:0c:97:3d:c5:
4d:cb:07:1a:ea:0e:78:d1:a5:d0:ad:18:97:b8:9d:
d1:a7:ab:81:04:a8:ea:a7:32:92:04:ec:7a:23:84:
e4:9b:26:db:a3:2a:ac:b2:41:6b:e0:69:87:1f:67:
ce:9c:3f:67:c0:62:f2:93:64:2a:61:9f:50:2a:e6:
ce:19:2d:90:02:24:dc:2a:10:cf:b5:19:d2:22:2d:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3E:8D:16:9D:E0:AA:0F:E5:12:75:70:65:C2:EF:A3:51:C8:5C:D3
X509v3 Authority Key Identifier:
keyid:FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/wT6NFp3gqg_lEnVwZcLvo1HIXNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5040::/29
Signature Algorithm: sha256WithRSAEncryption
a4:ad:76:dd:d5:0e:46:c9:3d:df:d4:fc:b4:43:50:3f:62:f3:
bd:d4:bd:0c:ba:ef:98:ca:b1:c6:21:0f:53:77:ae:57:b9:90:
92:2a:61:31:e8:7c:75:38:97:70:3b:cd:c0:50:ef:45:bc:b0:
e6:74:5c:36:14:d2:4f:74:74:72:72:63:ca:a4:f9:08:33:56:
9f:fb:ae:a2:f5:77:2c:ed:77:54:3a:b8:69:65:60:38:d1:c6:
89:53:e2:0a:db:78:24:29:01:8b:84:f0:a3:5f:46:64:3f:98:
19:46:2a:a7:ce:ef:76:b7:d7:95:4b:ef:f5:7e:9a:ab:69:f0:
c0:1a:4d:27:e9:f6:83:ea:b5:69:ec:a9:7f:34:e4:db:df:4e:
bd:bc:18:07:d7:05:22:3c:ad:d7:c2:0a:16:6c:45:dd:8b:23:
f0:06:53:b0:a5:fd:d7:39:a1:67:be:47:86:2a:91:aa:0c:d9:
03:b1:23:7f:aa:37:c6:d5:c3:be:98:6f:d1:b5:2a:61:12:8b:
a8:f5:78:0b:c8:00:71:b1:ed:68:29:73:ea:ca:bd:2b:e8:d6:
01:9c:9e:91:3c:99:5a:d0:49:a2:9f:98:ff:3b:b1:a2:f0:51:
49:d4:67:56:12:e7:54:9b:c0:e0:4a:26:a1:aa:b0:b0:68:1e:
50:45:ec:0a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY4NL9CEHQujLY+YcFQHj1umMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMjljZjIzZmM5Y2U2ZTJiOGMzOTMyM2QyNzBjZTUyZTg5
Mzg3MDIwHhcNMjQwMzA1MDU1NzAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTNlOGQxNjlkZTBhYTBmZTUxMjc1NzA2NWMyZWZhMzUxYzg1Y2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm21TN73DUgNL7z/ExjXpFZNYArxj
wwh1ZS+dYybmZv5sAdtReNc7QMukQ8eXoQ58K91TX/S2qYtaFOUmYEs7ixWtcA7C
1nVMRRNG3t+UxjglYwv0U5srkort0DxYZeEIOQT8tofvSAHTCRnjhfU8bw8DngD7
SvdTke5t7j6AJmpERwIlqmfSTaTXaddc/3oPeh15lVT7ENnBLIw96Ct47cY1MdOS
Vk652TGGVOo7iAyXPcVNywca6g540aXQrRiXuJ3Rp6uBBKjqpzKSBOx6I4Tkmybb
oyqsskFr4GmHH2fOnD9nwGLyk2QqYZ9QKubOGS2QAiTcKhDPtRnSIi2hQQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFME+jRad4KoP5RJ1cGXC76NRyFzTMB8GA1UdIwQY
MBaAFPspzyP8nObiuMOTI9JwzlLok4cCMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15blBJX3ljNXVLNHc1TWowbkRPVXVpVGh3SS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvOWZkMDAzLTA2ZjctNDVkOC1hNWRk
LTA3NmJmMDJkY2RkOS8xL3dUNk5GcDNncWdfbEVuVndaY0x2bzFISVhOTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjAvOWZkMDAzLTA2ZjctNDVkOC1hNWRkLTA3NmJmMDJkY2Rk
OS8xLzEteW5QSV95YzV1SzR3NU1qMG5ET1V1aVRod0kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQMqE1BA
MA0GCSqGSIb3DQEBCwUAA4IBAQCkrXbd1Q5GyT3f1Py0Q1A/YvO91L0Muu+YyrHG
IQ9Td65XuZCSKmEx6Hx1OJdwO83AUO9FvLDmdFw2FNJPdHRycmPKpPkIM1af+66i
9Xcs7XdUOrhpZWA40caJU+IK23gkKQGLhPCjX0ZkP5gZRiqnzu92t9eVS+/1fpqr
afDAGk0n6faD6rVp7Kl/NOTb3069vBgH1wUiPK3XwgoWbEXdiyPwBlOwpf3XOaFn
vkeGKpGqDNkDsSN/qjfG1cO+mG/RtSphEouo9XgLyABxse1oKXPqyr0r6NYBnJ6R
PJla0Emin5j/O7Gi8FFJ1GdWEudUm8DgSiahqrCwaB5QRewK
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:07 2025 by rpki-client