Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/1T_bkUuXShTyJO9fZ2-VBIoIFyc.roa
File: 1T_bkUuXShTyJO9fZ2-VBIoIFyc.roa (raw, json)
Hash identifier: JAnmEJA9Ar8LLf52pocf5IlHPxMBo+Dcwul+HLgXC6w=
Subject key identifier: D5:3F:DB:91:4B:97:4A:14:F2:24:EF:5F:67:6F:95:04:8A:08:17:27
Certificate issuer: /CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
Certificate serial: 019422FB0222C482B604B763027B859019A0
Authority key identifier: 27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/1T_bkUuXShTyJO9fZ2-VBIoIFyc.roa
Signing time: Wed 01 Jan 2025 17:47:42 +0000
ROA not before: Wed 01 Jan 2025 17:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57087
IP address blocks: 2a13:8cc0:1f00::/48 maxlen: 48
2a13:8cc0:1f01::/48 maxlen: 48
2a13:8cc0:1f02::/48 maxlen: 48
2a13:8cc0:1f03::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:02:22:c4:82:b6:04:b7:63:02:7b:85:90:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
Validity
Not Before: Jan 1 17:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d53fdb914b974a14f224ef5f676f95048a081727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:52:10:33:6d:1b:e5:d5:b0:3a:60:ac:5e:
87:d2:25:a7:e7:3c:d0:3f:38:54:77:f1:7d:2b:13:
fe:7c:29:57:51:67:fa:a7:a1:f4:85:f8:3a:67:23:
81:ce:fe:b6:f3:23:4c:8d:0d:c3:00:1f:5b:e0:e7:
37:49:e7:f4:27:1f:bf:92:ac:2f:5f:8f:9a:a8:2c:
cf:16:ec:fa:fb:90:0a:46:f7:9c:fb:67:d5:f9:fa:
78:c1:79:e2:51:43:bb:b2:a7:2f:08:f1:6c:5b:fc:
d5:22:c4:b9:da:b7:1d:2d:7a:e3:de:30:53:5c:fa:
d7:1c:bb:c6:ab:a4:ca:53:b5:56:95:94:b4:fb:6d:
c2:64:94:4c:d5:4a:95:ec:be:7c:6c:84:45:c1:88:
be:cd:4e:b1:23:1d:2e:c5:54:74:bf:c2:cd:7f:05:
2c:fe:8a:35:9d:19:f7:82:ea:78:30:55:d7:ea:38:
03:bb:40:6a:13:4a:c6:a7:15:c7:46:81:c6:ae:e8:
20:1c:69:e4:51:9c:6c:47:9f:d0:ac:17:d4:c9:fa:
19:99:7f:23:1c:76:89:6d:4b:a8:db:70:39:be:70:
77:5b:1f:eb:82:a2:f2:95:fd:af:8a:a3:d3:97:c5:
e9:b6:ec:4a:ad:5e:d2:74:69:68:03:95:ca:18:b5:
93:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3F:DB:91:4B:97:4A:14:F2:24:EF:5F:67:6F:95:04:8A:08:17:27
X509v3 Authority Key Identifier:
keyid:27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/1T_bkUuXShTyJO9fZ2-VBIoIFyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8cc0:1f00::/46
Signature Algorithm: sha256WithRSAEncryption
24:f3:4d:39:88:29:88:5b:6d:6a:e5:96:73:36:b4:47:28:f7:
4e:70:5a:7c:b1:69:ca:f1:ff:9a:5d:bb:c4:1d:68:b9:f5:2a:
4d:d6:42:b3:12:46:0a:53:ef:33:4d:63:48:45:ae:f2:25:bf:
67:bf:1d:4c:6a:89:be:93:ed:87:c2:c6:0f:e7:e8:ab:20:92:
48:63:2d:04:4c:da:02:d8:32:dd:36:e8:f5:1b:e7:49:32:47:
f5:d4:0c:1c:d0:b5:44:92:c9:9a:1f:97:48:17:4c:2b:0a:51:
a0:13:6f:b9:da:cf:ed:67:b2:a7:b9:a0:3f:6c:6e:25:cf:58:
a1:fa:a1:60:21:d9:55:19:6f:f8:72:f8:09:25:9d:cb:2b:b9:
bf:93:66:2f:3c:6d:b6:06:47:66:ca:de:ce:ee:01:5a:c3:f7:
99:12:0d:53:41:76:e4:7c:7f:fd:f8:90:f5:4e:ab:82:6d:38:
e8:3e:5f:40:f3:70:4e:38:96:52:5d:8c:c4:7e:bb:b4:ff:af:
3c:e3:ae:cb:51:e5:e3:e6:0e:46:3d:51:bf:a2:4a:0d:a7:38:
47:79:d7:f1:1a:be:95:85:18:c7:34:35:23:9c:06:af:e0:25:
95:2f:74:1e:b9:a4:bb:e2:98:13:e9:d1:9b:92:bd:2f:0b:4a:
8e:2e:e9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:20 2025 by rpki-client