Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/pAzvrIoWwcHpcNO5iNiHfwLiAJA.roa
File: pAzvrIoWwcHpcNO5iNiHfwLiAJA.roa (raw, json)
Hash identifier: DLnt9qWRp3EI4stZNmwt/HobGa97g3RTR8iRLREX4YA=
Subject key identifier: A4:0C:EF:AC:8A:16:C1:C1:E9:70:D3:B9:88:D8:87:7F:02:E2:00:90
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 019426D9A86EC3D50ADB616DC2A84304184F
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/pAzvrIoWwcHpcNO5iNiHfwLiAJA.roa
Signing time: Thu 02 Jan 2025 11:49:46 +0000
ROA not before: Thu 02 Jan 2025 11:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198571
IP address blocks: 2a13:3f81::/32 maxlen: 32
2a13:3f82::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a8:6e:c3:d5:0a:db:61:6d:c2:a8:43:04:18:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Jan 2 11:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a40cefac8a16c1c1e970d3b988d8877f02e20090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:69:e0:f3:56:33:b4:fd:2c:ad:39:38:70:
54:63:5d:83:3f:50:66:6e:14:34:f9:b5:49:e6:cf:
a2:dc:23:97:07:cd:8c:ee:41:a4:8f:fe:da:76:df:
11:7f:d9:d6:c4:3d:11:d2:c2:8b:1f:dd:b2:cf:a9:
f7:f6:35:08:04:cf:34:04:4c:8d:71:5e:2b:2b:50:
0e:f4:66:8e:90:4b:3a:b5:ea:11:0c:ca:59:0f:ae:
de:e4:a9:39:37:a8:9d:b0:23:d5:67:f2:3d:ae:c6:
81:39:74:78:29:c8:a3:d6:3d:19:eb:d0:d9:b7:3b:
5c:f1:e2:9c:c4:99:13:d3:8a:94:09:6c:64:00:f6:
4c:27:81:e2:e9:d6:f0:98:4b:f2:e7:93:91:65:01:
63:3a:b2:a5:66:df:bf:c1:ef:0b:6d:9b:26:6e:73:
cb:9f:39:58:fb:e0:02:03:23:1b:7f:bd:8b:c9:2b:
0c:62:19:37:f0:df:a7:3c:3c:1e:99:41:30:2e:b8:
16:51:2a:17:d5:46:22:4f:33:f4:9c:e8:80:1e:66:
ca:3b:a5:87:18:5c:93:b4:32:79:07:4a:7c:b7:bf:
a7:15:92:a1:0c:8c:3a:29:c5:ca:64:09:25:ad:bc:
8d:50:23:63:1d:45:79:0a:cf:9b:52:de:4e:28:f7:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0C:EF:AC:8A:16:C1:C1:E9:70:D3:B9:88:D8:87:7F:02:E2:00:90
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/pAzvrIoWwcHpcNO5iNiHfwLiAJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3f81::-2a13:3f82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4b:46:25:a8:94:d2:b1:16:02:6e:87:f0:ac:a8:67:26:9b:22:
6e:32:7e:af:19:8b:d1:9d:d4:53:da:43:61:fb:7e:63:46:fe:
39:ff:0b:4c:d1:43:4a:25:91:85:69:8a:3f:53:da:97:d2:9f:
14:25:6f:a8:a0:f7:d4:17:ac:73:af:b8:f3:0f:3c:35:24:27:
16:c2:bb:ff:c0:22:64:21:11:0b:9c:a4:1e:5a:87:6b:ca:2b:
86:6f:ff:da:8a:f5:2f:34:24:f8:ed:58:b8:87:b4:5a:73:eb:
f0:63:2e:09:00:9b:9c:f1:d0:11:70:e6:97:9d:a6:c6:43:76:
6f:30:58:a0:31:1d:12:4f:6b:de:07:86:57:0e:c2:e1:7c:fc:
30:74:6b:b6:e2:9a:0b:62:b6:96:b7:92:ba:d1:01:10:b6:c7:
ae:27:d3:07:b8:15:0d:40:c9:a0:21:48:87:f2:ba:b6:a7:3a:
59:27:36:dd:be:51:4e:60:28:57:2f:5c:63:98:03:1f:31:72:
94:24:e1:b4:55:26:5c:e6:8f:c5:c0:42:b1:ff:d1:91:1f:7d:
c2:ab:b2:7f:96:08:b7:99:5d:1a:dc:52:73:d6:5c:40:74:4a:
b9:97:85:23:c5:f8:14:f9:8e:86:51:0c:bf:9d:da:97:b2:b7:
5e:a6:80:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:45 2025 by rpki-client