Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/VOi6P1t1QSVZ8Cfoa3-sgZtJXOc.roa
File: VOi6P1t1QSVZ8Cfoa3-sgZtJXOc.roa (raw, json)
Hash identifier: EarpdlaxI3BAXLFAsjiM9ZfIRPCnpSlKdq4TrAewDA8=
Subject key identifier: 54:E8:BA:3F:5B:75:41:25:59:F0:27:E8:6B:7F:AC:81:9B:49:5C:E7
Certificate issuer: /CN=ae3f617259f0ea1aa795a823a4107971d550ad5a
Certificate serial: 0185C6CC0DF61B9D272A9F402F02FBE6F0E4
Authority key identifier: AE:3F:61:72:59:F0:EA:1A:A7:95:A8:23:A4:10:79:71:D5:50:AD:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rj9hclnw6hqnlagjpBB5cdVQrVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/VOi6P1t1QSVZ8Cfoa3-sgZtJXOc.roa
Signing time: Wed 18 Jan 2023 21:32:19 +0000
ROA not before: Wed 18 Jan 2023 21:32:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202044
IP address blocks: 2a13:8006::/31 maxlen: 31
2a13:8002::/31 maxlen: 31
2a13:8000::/31 maxlen: 31
2a13:8004::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c6:cc:0d:f6:1b:9d:27:2a:9f:40:2f:02:fb:e6:f0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3f617259f0ea1aa795a823a4107971d550ad5a
Validity
Not Before: Jan 18 21:32:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54e8ba3f5b75412559f027e86b7fac819b495ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:24:ce:80:10:7a:9e:4e:0c:b5:b4:e9:04:
d7:31:91:00:9a:e0:61:02:e8:12:5f:18:fa:31:0c:
b8:7a:ec:f1:6d:b3:b9:6c:13:5e:1b:5d:a3:21:c1:
23:4a:35:36:30:85:70:66:a4:ae:cd:27:3e:71:23:
5f:31:34:ea:c3:88:0a:c9:ae:61:76:22:c0:9c:af:
15:27:e3:0b:c0:99:a4:7d:e9:c8:47:59:4e:86:ac:
22:f1:18:88:7c:25:6f:5b:c9:8b:c0:ff:1c:90:3e:
30:cd:50:53:ba:a0:72:7a:97:06:d9:9a:38:eb:11:
0e:80:74:c4:7f:f7:02:5f:21:35:a8:54:02:24:a8:
ec:d4:08:07:e8:a3:c6:90:7b:dd:bb:34:2f:7c:9f:
b2:c7:7a:f8:09:85:63:93:7a:2f:18:51:65:8a:9a:
6f:c7:59:b1:06:f8:9e:44:8c:e5:3b:65:9e:60:17:
b9:79:9e:64:72:6f:50:0b:dd:92:c6:8a:eb:50:ec:
a2:2d:83:f6:63:da:2b:3e:10:12:ec:25:67:7f:1f:
21:d8:98:c7:32:19:50:f4:7a:5d:dd:f9:5e:39:33:
2d:66:da:44:7c:59:8c:aa:04:75:ac:c8:0b:32:bf:
3b:12:16:e9:4b:d4:a0:41:6e:f0:86:32:a6:15:f4:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E8:BA:3F:5B:75:41:25:59:F0:27:E8:6B:7F:AC:81:9B:49:5C:E7
X509v3 Authority Key Identifier:
keyid:AE:3F:61:72:59:F0:EA:1A:A7:95:A8:23:A4:10:79:71:D5:50:AD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rj9hclnw6hqnlagjpBB5cdVQrVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/VOi6P1t1QSVZ8Cfoa3-sgZtJXOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/rj9hclnw6hqnlagjpBB5cdVQrVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8000::/29
Signature Algorithm: sha256WithRSAEncryption
38:3d:c3:24:d0:a7:20:55:65:c4:f8:0b:59:c4:2d:54:c6:26:
f9:1f:66:59:35:49:66:f3:13:61:a4:60:38:1a:e0:29:e4:55:
20:55:6d:0f:8a:04:de:53:db:aa:2b:3b:4e:ea:37:52:df:d1:
af:de:c9:5a:0b:66:9f:79:7e:5c:78:33:61:63:ad:80:7b:5a:
05:fc:2e:89:64:db:d9:f3:2e:e7:9c:5c:ca:42:0a:11:1d:db:
3b:ab:4c:9a:7b:c1:04:be:b2:bf:b8:95:dd:87:29:f1:19:49:
0e:93:07:42:75:1d:02:b5:88:9c:e8:b2:72:6e:70:a5:3d:5b:
31:42:da:cd:99:73:11:8e:a7:a6:da:94:30:67:19:b8:28:5e:
a9:db:a8:7f:95:f5:c7:41:a6:0f:ee:d0:80:3e:b8:dc:5f:8a:
74:18:cf:7d:ec:7e:f6:aa:6c:0b:3c:0a:51:86:08:d8:ef:f3:
f8:12:4e:63:95:33:2b:a3:ae:89:f1:d8:f2:e3:37:db:4f:83:
d8:86:8d:4e:b9:aa:b6:d7:32:d2:e3:60:c0:c3:74:0d:ee:0b:
dc:e5:a6:18:d8:17:42:0f:e3:be:10:86:1d:da:aa:29:4e:6f:
3a:dd:29:17:25:bd:74:be:20:2a:a1:83:1b:e7:e0:4b:86:10:
f0:b5:e8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:32 2025 by rpki-client