Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/KZVhkIICg3g1SuNsSRz-iJAMcVs.roa
File: KZVhkIICg3g1SuNsSRz-iJAMcVs.roa (raw, json)
Hash identifier: vqOmUogwB/0zcaBmLelkGuetlxCfU2rAmHJLqPW9qU4=
Subject key identifier: 29:95:61:90:82:02:83:78:35:4A:E3:6C:49:1C:FE:88:90:0C:71:5B
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C2302C3052EBDF03B2B582D68D44A
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/KZVhkIICg3g1SuNsSRz-iJAMcVs.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48261
IP address blocks: 2a12:4b40::/29 maxlen: 64
2a13:c400::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:23:02:c3:05:2e:bd:f0:3b:2b:58:2d:68:d4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2995619082028378354ae36c491cfe88900c715b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:ea:a7:f1:81:86:55:5a:3e:22:9d:97:81:
05:2d:a2:13:ab:e7:30:60:b5:91:05:89:c5:99:34:
f6:dc:9d:b7:fb:d3:e0:8d:02:49:a7:d0:d9:6a:7f:
5c:6d:22:1f:f1:5e:9a:a8:73:4b:40:52:f5:5e:b9:
77:7a:90:c1:80:90:35:c5:92:70:37:7c:19:2e:87:
82:2d:58:60:3f:c5:d0:73:a0:75:d4:8b:64:37:64:
d6:6f:03:1f:a2:a1:31:95:41:96:24:d7:af:8c:5e:
77:58:cb:a0:67:6f:fa:89:4f:f6:f2:f5:d6:a9:1a:
3b:90:c8:40:c0:80:b2:60:ee:da:09:af:44:22:87:
b2:14:58:af:dc:82:49:4a:2f:f2:6d:80:d3:95:d9:
1b:01:7f:02:5b:53:f6:99:1a:70:4f:85:07:e9:b1:
57:c7:64:37:25:eb:42:46:0b:c3:f5:27:c5:5c:b3:
57:94:fa:31:65:01:71:c1:e0:fd:57:5c:39:60:cc:
d6:ef:ca:8f:4e:dd:13:97:59:a0:9a:6f:29:b1:3b:
7a:58:c0:4a:03:03:5c:ae:76:1f:67:c3:4a:9c:18:
70:8a:e6:01:7b:b0:be:dc:32:b0:17:fa:49:18:7f:
7d:5f:e3:b7:87:a8:ad:90:c8:e8:01:13:bf:b2:08:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:95:61:90:82:02:83:78:35:4A:E3:6C:49:1C:FE:88:90:0C:71:5B
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/KZVhkIICg3g1SuNsSRz-iJAMcVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4b40::/29
2a13:c400::/29
Signature Algorithm: sha256WithRSAEncryption
28:60:38:f2:89:b4:51:5b:50:41:9b:1d:83:ff:a4:c2:e2:49:
3f:06:2e:e8:90:2d:28:be:33:9d:24:07:02:16:61:9f:74:13:
98:7e:12:b7:2f:6b:d7:17:6e:71:6a:63:2a:f7:5f:69:9a:94:
b7:e1:27:ab:97:a2:32:73:14:80:31:54:03:0a:cd:0a:b6:55:
b8:e4:50:28:40:dc:b4:8b:b7:6d:8c:79:85:4a:1d:71:ab:f4:
d7:34:a3:86:57:e1:72:ca:54:68:a6:f8:e8:2e:a5:88:d4:f0:
96:e5:d1:c4:f3:e5:7a:58:8b:23:09:a1:44:c5:90:df:e3:a9:
d0:ce:a6:bf:46:e9:b5:78:c7:8c:cb:52:ce:b8:04:d4:76:52:
a2:cd:5e:85:58:66:0e:59:a4:4f:15:59:e6:37:2e:e5:97:2b:
88:aa:96:c2:5b:ab:eb:ae:ae:c6:61:99:70:5b:e7:39:45:4d:
8d:81:31:f4:ab:6b:d3:fc:72:bb:cb:05:4c:da:0e:de:27:df:
dc:27:fa:47:2b:60:a0:4a:47:78:28:5e:a0:8c:48:ab:8f:66:
c1:df:1a:46:5d:fe:1f:9b:19:62:c0:d5:d7:e3:d7:d2:1d:65:
5a:7b:2d:c7:ab:79:1e:35:54:2c:f2:46:cc:e9:66:eb:1b:c7:
21:f7:52:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:45:43 2025 by rpki-client