Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/f00necdCYsOtLA09vtcvA-KOmsA.roa
File: f00necdCYsOtLA09vtcvA-KOmsA.roa (raw, json)
Hash identifier: Ln1z19NPMKA7PbsbJsMQ04rbx28+DicO/rDcVFYN3W8=
Subject key identifier: 7F:4D:27:79:C7:42:62:C3:AD:2C:0D:3D:BE:D7:2F:03:E2:8E:9A:C0
Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial: 0194236A0CC45288E3E2E24E50D9D0D7059E
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/f00necdCYsOtLA09vtcvA-KOmsA.roa
Signing time: Wed 01 Jan 2025 19:48:59 +0000
ROA not before: Wed 01 Jan 2025 19:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200443
IP address blocks: 2a13:5f40::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0c:c4:52:88:e3:e2:e2:4e:50:d9:d0:d7:05:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Validity
Not Before: Jan 1 19:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f4d2779c74262c3ad2c0d3dbed72f03e28e9ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:3a:b7:c0:68:4d:11:34:4a:83:d8:f8:bb:
86:a6:e7:f8:9d:ec:70:ca:3e:b4:9f:9f:03:cd:5c:
6d:89:42:59:1a:e1:4b:2d:0a:02:e7:6e:dd:87:d5:
10:12:e0:96:1f:09:5c:fa:60:48:6f:f4:45:86:93:
6b:7c:2f:ca:cf:a5:41:9f:4a:c7:df:62:18:1b:16:
89:09:5a:04:eb:df:79:d5:6f:42:aa:dd:b6:70:03:
c1:cb:0f:60:d3:95:bf:05:3d:e8:9e:aa:cb:7a:0e:
b8:e3:dc:a7:00:28:f0:84:eb:26:d7:6b:23:07:8a:
4b:93:ad:0f:83:47:ea:36:60:16:2c:be:d4:3c:b7:
c7:2b:f0:b6:26:a6:99:14:9c:72:3f:cc:7e:36:d4:
3a:c8:19:0f:fb:97:7d:3d:70:b0:21:fa:b2:ce:fa:
97:85:20:f9:4e:73:82:c1:b6:77:7d:fd:9e:6a:4e:
86:f4:95:c2:c7:3f:3f:3b:da:b1:36:a2:1e:74:ef:
de:44:5f:3a:66:99:a1:5e:88:12:2a:f0:01:5c:c6:
f0:db:3c:2b:88:3f:24:ca:6c:9c:cc:1d:db:1f:e8:
2d:f1:00:50:22:76:3b:6a:db:79:b8:97:8f:00:c0:
68:b1:5a:f1:bb:02:f4:50:15:3b:cf:84:0d:63:05:
4d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4D:27:79:C7:42:62:C3:AD:2C:0D:3D:BE:D7:2F:03:E2:8E:9A:C0
X509v3 Authority Key Identifier:
keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/f00necdCYsOtLA09vtcvA-KOmsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5f40::/30
Signature Algorithm: sha256WithRSAEncryption
4e:1a:6a:f8:3b:96:da:a8:0c:1e:93:d3:a6:46:5e:e8:75:b4:
e9:36:79:0c:f1:44:5f:0b:cd:e0:27:ac:59:20:6e:15:8a:6e:
74:03:c5:81:f1:75:a2:6f:0b:f8:b4:30:a3:a3:e6:6b:45:d9:
7f:53:11:eb:36:cb:47:10:c6:1f:a7:5d:51:34:bf:a1:fe:7f:
f5:4a:be:a2:9f:b6:5e:01:c9:92:f0:f5:6e:26:9a:ee:2e:16:
c9:59:15:c9:dc:cc:fe:77:98:c3:17:8d:e1:87:39:af:f7:37:
c9:c5:a2:0d:51:7d:79:9f:32:ba:cb:a7:48:1b:48:11:9f:e9:
bf:85:d7:72:6b:bc:85:aa:83:18:4a:42:f5:61:10:fb:67:a2:
fd:cf:99:f1:34:68:88:c0:4c:ae:4d:81:0e:cd:ad:32:6b:ea:
12:f5:85:1a:30:fa:78:e9:82:0f:43:c7:d4:0e:97:81:bd:56:
c9:28:e9:5f:57:62:81:ad:2d:72:52:ab:88:fd:fc:84:d2:f0:
8d:eb:23:56:74:a7:47:fe:d3:72:61:00:18:28:50:9f:46:ff:
9c:0a:be:b9:45:3e:4a:1c:1a:44:8f:9b:a3:04:6e:0d:d8:4b:
66:4d:3a:a1:4f:cc:af:56:55:95:96:3a:8d:f5:5c:a0:4e:b6:
66:0f:d8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:30 2025 by rpki-client