Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/Jl24RpiWW2mnZnbXdVkHkwv5Ym0.roa
File: Jl24RpiWW2mnZnbXdVkHkwv5Ym0.roa (raw, json)
Hash identifier: 9jibyw+e0hpTaQ/C5dcgmcHW+Sc46nG49PYel1M3f7w=
Subject key identifier: 26:5D:B8:46:98:96:5B:69:A7:66:76:D7:75:59:07:93:0B:F9:62:6D
Certificate issuer: /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial: 01953E30D613BFED51A440ECD0C39A3283E2
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/Jl24RpiWW2mnZnbXdVkHkwv5Ym0.roa
Signing time: Tue 25 Feb 2025 17:39:02 +0000
ROA not before: Tue 25 Feb 2025 17:39:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30860
IP address blocks: 2a13:df40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:30:d6:13:bf:ed:51:a4:40:ec:d0:c3:9a:32:83:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Validity
Not Before: Feb 25 17:39:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=265db84698965b69a76676d7755907930bf9626d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:27:ef:c5:87:b6:ea:55:e5:f2:8b:03:2c:
27:2b:3f:39:f8:5f:5d:d6:e4:ec:e5:1a:d5:36:fc:
98:a1:e2:e0:7e:e0:74:58:cf:1b:e7:f7:e6:a3:5c:
76:27:04:c0:b4:6b:26:f1:8a:21:4c:4c:7c:47:b5:
0e:ec:bf:8f:50:d1:cb:e7:b5:b6:55:cc:0b:ce:5a:
7a:04:85:1b:2b:9b:02:97:12:c5:a4:c6:64:59:57:
79:b4:04:6d:0f:9d:8f:22:35:f1:28:d6:d1:a6:fb:
d8:ec:c1:b1:e5:36:33:d5:66:dd:df:ac:89:01:ad:
7c:55:59:c4:03:99:03:5f:9e:86:db:7f:ad:65:da:
0a:e7:0b:82:a3:32:76:27:bf:aa:aa:46:15:7f:19:
ed:40:52:dd:a3:ba:4e:76:b1:69:26:27:22:a4:1c:
a3:95:09:8d:1e:4c:0d:91:d0:eb:be:b4:08:4a:8b:
77:c4:1e:ae:a7:7d:29:81:b5:04:16:d3:3a:b9:79:
f2:a9:af:c6:c0:52:c1:4a:a8:46:df:79:30:ab:2a:
85:93:bd:ec:21:ac:d9:1a:49:e4:8a:7e:df:d3:f6:
f1:49:4f:c7:a8:b2:6d:49:ec:a7:c7:c8:8d:b5:ef:
4f:60:64:8e:e1:56:c9:9a:5f:dd:28:e1:ff:e8:8c:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:5D:B8:46:98:96:5B:69:A7:66:76:D7:75:59:07:93:0B:F9:62:6D
X509v3 Authority Key Identifier:
keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/Jl24RpiWW2mnZnbXdVkHkwv5Ym0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df40::/29
Signature Algorithm: sha256WithRSAEncryption
3f:04:9c:b0:09:0a:02:7d:88:62:e6:a3:ea:bd:ed:38:bc:89:
78:29:af:ad:19:e3:32:4f:73:be:06:85:3e:71:ae:fc:cd:9a:
d1:f9:c8:94:bf:06:4a:69:e3:89:cc:4a:b6:82:01:13:48:cc:
0a:44:89:2b:84:83:21:d5:f6:f6:5f:49:5a:12:e6:a5:a9:a2:
8b:2b:ce:5a:90:5a:3e:9d:e2:44:fe:7a:45:4e:ab:73:0c:a1:
24:c3:2a:ce:b3:c7:3a:69:3d:bc:39:21:7d:72:79:b3:cf:ee:
a5:02:56:3e:36:6c:4c:1b:45:22:e7:3f:0b:1e:93:7d:59:a2:
5b:6f:0c:6d:2d:7e:f6:0e:cf:b1:29:f4:e4:a0:a0:6b:ee:7c:
29:0e:7a:7e:1d:e4:5c:3f:5d:1a:4a:c1:5f:6a:91:fa:ff:4f:
a6:f9:1e:ce:ca:53:0a:b7:91:d5:7f:51:2e:9f:aa:4f:a2:0c:
9a:3f:0a:a7:f7:35:6b:60:ac:e1:cb:78:35:64:ee:85:ce:15:
b2:dc:13:28:cf:a0:04:e2:94:94:b9:fa:e5:28:dd:dc:9f:15:
10:52:05:1f:2c:e9:3a:3b:1d:de:c7:fb:d5:04:81:55:ec:54:
8a:ba:b5:45:4a:a2:09:76:fd:a1:0c:ec:1f:9b:39:c7:40:c3:
9a:90:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:11 2025 by rpki-client