Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/12VbE1YWjpFCjngxlq6k185zSrc.roa
File: 12VbE1YWjpFCjngxlq6k185zSrc.roa (raw, json)
Hash identifier: euHh+BcQH9iLTnCH3fcFvBeQD+Vrc2/P9+6sOSQ6DLw=
Subject key identifier: D7:65:5B:13:56:16:8E:91:42:8E:78:31:96:AE:A4:D7:CE:73:4A:B7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01955CFADFAC6798E95F602040D854704991
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/12VbE1YWjpFCjngxlq6k185zSrc.roa
Signing time: Mon 03 Mar 2025 17:08:19 +0000
ROA not before: Mon 03 Mar 2025 17:08:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6517
IP address blocks: 2a13:540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:fa:df:ac:67:98:e9:5f:60:20:40:d8:54:70:49:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 3 17:08:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7655b1356168e91428e783196aea4d7ce734ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:e1:1a:63:23:1e:6d:d3:bd:c3:b1:7b:5e:
ec:46:dd:ef:44:53:b5:cd:c6:2d:bc:0a:a5:0a:5f:
0c:ce:c1:2d:2d:19:02:3e:25:0d:61:5e:86:51:99:
3e:e2:90:41:27:cb:94:07:f8:be:de:20:7d:fb:23:
a1:b8:9d:eb:a3:d1:37:e0:d9:21:86:05:c2:7f:a9:
b6:eb:96:ca:7b:dd:6b:7b:7b:d6:5e:46:70:19:08:
46:6c:80:d7:69:cc:c1:51:94:12:39:ce:b6:e6:af:
7f:38:b9:c6:b6:88:ae:bc:d0:44:57:56:d1:64:28:
76:55:81:ca:25:64:65:26:c0:b5:48:9a:7d:77:61:
3f:27:fc:46:3a:f6:50:f7:43:f1:ab:3e:a1:8a:6f:
4d:76:75:16:59:58:43:ea:5b:fe:66:9b:8e:9e:a9:
6d:54:9c:54:bb:06:cc:64:5e:d0:94:0e:03:39:9c:
9b:69:01:21:62:e4:dd:fe:51:b1:b8:c0:a7:bc:ed:
ab:c6:49:3d:44:f5:20:df:a6:48:37:85:66:b4:52:
f3:7a:51:9f:32:76:58:ce:e7:75:80:76:66:c9:fe:
58:c9:fe:b6:d8:91:61:3c:f2:bd:1b:db:02:1f:7c:
1e:7d:b5:f8:68:2a:fd:7a:b4:b0:a5:15:cf:1d:39:
c1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:5B:13:56:16:8E:91:42:8E:78:31:96:AE:A4:D7:CE:73:4A:B7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/12VbE1YWjpFCjngxlq6k185zSrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:540::/29
Signature Algorithm: sha256WithRSAEncryption
15:6f:b6:16:d4:51:eb:38:55:cc:7f:a0:e4:e2:7d:09:74:40:
13:f7:b3:dd:2f:20:54:6d:51:e1:c3:53:e2:88:52:df:dd:0d:
bb:32:7c:74:dd:c2:0c:bf:4c:85:f4:5c:e2:8c:1c:f8:52:f9:
7f:65:bf:c5:ca:71:d8:52:94:04:21:c2:0b:4d:36:cb:34:28:
41:92:37:ee:76:8b:7c:dc:b1:6b:b2:af:fc:51:dc:4d:ab:2a:
38:a6:f8:fb:7e:a3:94:3b:13:55:8b:7a:c8:5f:a6:a0:17:4e:
df:79:d3:88:45:6c:54:f5:d2:fb:09:b0:50:7b:3b:99:d8:1a:
11:43:e6:0c:21:1b:3f:23:f1:05:02:29:93:19:f5:f6:fc:09:
72:df:eb:8b:98:a6:aa:3b:8d:f3:fd:85:46:c8:e1:57:af:4c:
0d:7b:5d:31:0b:f2:5e:e4:e0:60:97:cf:8d:bc:22:0c:c8:85:
8c:53:8b:59:94:c6:3c:7f:8b:5c:02:72:74:b4:5b:93:de:d0:
b9:c1:46:17:1e:45:f9:f7:d6:c3:7e:f7:9f:33:14:45:ac:cf:
99:35:3d:73:8d:e3:74:ae:23:09:2e:2e:8a:5d:c3:28:85:81:
c4:37:d9:4d:29:2f:e1:63:cd:1f:ef:30:83:21:ab:0c:b9:2c:
a4:f6:38:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:20 2025 by rpki-client