Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/F9JrVraLyMVnFa5WewWKqEk58Z8.roa
File: F9JrVraLyMVnFa5WewWKqEk58Z8.roa (raw, json)
Hash identifier: HDM5tx94GGzJitG4z0EFA2VGBpL6vQ5NHJ5bG3Fv7N8=
Subject key identifier: 17:D2:6B:56:B6:8B:C8:C5:67:15:AE:56:7B:05:8A:A8:49:39:F1:9F
Certificate issuer: /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial: 0194221F9EA25665A705426D5B38A9744C84
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/F9JrVraLyMVnFa5WewWKqEk58Z8.roa
Signing time: Wed 01 Jan 2025 13:48:04 +0000
ROA not before: Wed 01 Jan 2025 13:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202044
IP address blocks: 2a13:c40::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9e:a2:56:65:a7:05:42:6d:5b:38:a9:74:4c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
Validity
Not Before: Jan 1 13:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17d26b56b68bc8c56715ae567b058aa84939f19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ab:cf:ed:f6:40:0e:60:08:1b:9a:b3:3a:2a:
93:38:a2:4f:d3:02:52:f2:9e:4c:cf:ed:50:ae:fb:
c4:85:63:96:9e:c7:d7:3e:5a:3c:62:ee:5e:fe:81:
34:30:b7:89:d6:d9:bc:06:8b:fc:d8:35:d7:21:ce:
f6:f9:94:d2:21:b3:0a:c9:a0:30:6e:87:37:83:bb:
3e:21:e5:f9:7f:68:a8:51:6d:ae:e2:0c:07:77:d0:
b7:11:80:02:0f:59:e7:3f:ba:34:f3:0a:a0:0f:80:
47:bb:60:d3:70:68:eb:ab:33:fd:8b:7a:9e:56:99:
0f:c8:30:e6:8d:bc:da:fb:09:0d:a5:d0:ec:69:40:
48:75:32:71:5d:fa:52:7d:ec:74:2c:f5:e4:77:ad:
72:06:33:7d:19:6c:31:9c:12:e3:83:22:aa:22:5e:
08:0d:dd:fa:f5:d5:6d:34:58:14:18:32:52:7a:de:
3a:1d:c7:00:99:a5:9b:32:e8:14:18:46:dd:88:8d:
82:74:68:5f:18:77:3b:47:b7:bb:2d:48:22:74:8d:
ae:9d:00:fb:9f:20:d9:67:44:65:a5:c3:d1:35:56:
7c:02:37:2e:38:bd:db:8a:84:d9:e2:2a:8c:e9:be:
0d:a1:79:1e:6d:a2:06:c4:cb:d7:3f:1b:a0:1f:97:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D2:6B:56:B6:8B:C8:C5:67:15:AE:56:7B:05:8A:A8:49:39:F1:9F
X509v3 Authority Key Identifier:
keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/F9JrVraLyMVnFa5WewWKqEk58Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c40::/30
Signature Algorithm: sha256WithRSAEncryption
af:a2:55:b1:9d:d6:26:37:70:c2:de:b7:83:f2:6e:ab:5a:17:
dc:cd:1e:cb:1a:c0:2d:96:fe:18:dc:f7:56:da:b2:7e:8b:3f:
3d:c6:90:18:49:b5:7b:67:8a:be:cc:4d:c9:8d:eb:13:85:35:
57:a3:a2:d2:45:86:f5:be:90:20:6c:9c:49:33:9c:c0:e7:61:
e9:cc:5f:55:a0:96:79:81:15:6a:45:c4:a9:31:84:fe:d6:59:
dd:f3:83:ab:9a:22:5f:19:ba:4d:31:09:a3:06:07:76:60:6c:
dd:20:e4:d1:15:57:bc:3a:f7:d0:5f:aa:45:6c:bd:3e:2d:a6:
a4:cb:24:15:a1:be:cd:91:95:19:e3:ff:23:d3:f6:ae:9d:1f:
a4:3b:94:8c:09:c5:35:3a:11:a5:b8:6d:3b:b4:46:76:ca:6a:
f1:0f:8a:17:39:0f:d9:f0:8b:45:d3:88:16:66:bf:8e:3b:ce:
1e:01:cf:1d:db:c0:5d:77:75:ba:76:bd:3f:6f:7a:b7:b4:03:
2f:26:30:58:c9:df:e9:34:28:ea:be:37:9d:03:38:ea:db:b7:
da:9b:ae:82:46:23:c1:3b:dc:65:5a:24:57:78:61:f3:91:2c:
06:64:ff:bc:a3:5b:b0:2b:87:90:66:08:92:ec:42:a5:97:f9:
f9:39:bb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:11:21 2025 by rpki-client