Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/KdSwh2FfuPzcZ06W9i3PJCdcHak.roa
File: KdSwh2FfuPzcZ06W9i3PJCdcHak.roa (raw, json)
Hash identifier: ltlTRz8IBOKO8PjpLqE2f7RluQUBUJ2kuF+4H0lOQhA=
Subject key identifier: 29:D4:B0:87:61:5F:B8:FC:DC:67:4E:96:F6:2D:CF:24:27:5C:1D:A9
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194887F88E9F1BF28236C90848B204AEF63
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/KdSwh2FfuPzcZ06W9i3PJCdcHak.roa
Signing time: Tue 21 Jan 2025 10:54:06 +0000
ROA not before: Tue 21 Jan 2025 10:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215420
IP address blocks: 2a13:a700::/31 maxlen: 31
2a13:da00::/29 maxlen: 32
2a13:e400::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:7f:88:e9:f1:bf:28:23:6c:90:84:8b:20:4a:ef:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 21 10:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29d4b087615fb8fcdc674e96f62dcf24275c1da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:70:b7:22:ab:31:26:74:e5:66:5f:ed:c7:3f:
72:a0:34:ae:b0:74:4e:4f:3c:c9:54:44:73:76:c8:
56:97:d5:2c:0f:e4:d9:c5:59:82:d7:3c:91:d5:bf:
62:18:12:92:77:e2:05:f0:b5:a0:78:95:04:b1:45:
99:9e:84:d1:ad:90:73:7e:01:49:8e:a8:ad:b8:53:
68:22:6c:23:d8:d8:09:22:d4:80:11:4a:ee:c1:45:
20:b5:68:aa:13:9d:8f:c3:00:60:1e:c8:28:17:72:
67:fa:34:e4:4b:14:58:e2:06:3f:00:60:2d:a1:35:
fa:26:a0:8d:79:70:c0:ed:b4:64:a4:cf:58:53:09:
a3:24:ef:c6:a0:3c:8d:e4:20:03:3a:5a:d8:87:e5:
6b:e6:99:c7:07:a2:fb:fc:3a:bb:51:93:c4:8b:67:
ee:b9:2a:42:d7:f4:7e:18:12:cc:cf:ec:23:fa:7c:
cb:bd:c6:00:52:f4:bc:c9:1a:34:a7:ef:43:d2:c0:
17:57:2c:21:7d:28:20:a3:4f:b5:3a:da:eb:1a:59:
84:d7:c3:e9:91:92:e2:f8:f0:37:24:85:36:ff:a8:
4d:d0:a2:b9:50:07:83:75:b9:7b:79:d0:32:1d:2e:
6f:82:0b:8d:6f:a1:55:34:3f:41:71:51:ae:ca:42:
45:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D4:B0:87:61:5F:B8:FC:DC:67:4E:96:F6:2D:CF:24:27:5C:1D:A9
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/KdSwh2FfuPzcZ06W9i3PJCdcHak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a700::/31
2a13:da00::/29
2a13:e400::/29
Signature Algorithm: sha256WithRSAEncryption
59:44:a3:cf:31:48:ea:f5:a8:b5:86:18:94:5f:0d:a2:38:41:
a6:84:3d:65:a4:83:ef:c0:5f:b4:00:6f:9a:9a:51:3e:2d:39:
ec:52:0d:88:94:5e:b5:94:70:f1:bf:09:69:14:ac:94:a1:5d:
93:97:62:67:97:39:da:3d:9a:67:4e:db:04:39:76:4e:40:9d:
d4:5f:4c:27:ba:40:ae:c3:da:75:f8:76:5b:99:5c:a6:a0:58:
63:49:a0:46:98:3a:32:e4:b4:1b:10:be:d0:4c:ce:cb:dc:b8:
98:2e:f2:eb:57:bf:d4:a7:0f:ea:17:80:a9:a5:2e:4d:ef:d2:
e2:68:3a:3b:6e:31:33:57:5a:62:1b:0c:e4:8b:7f:58:74:a5:
2f:f6:dd:98:fb:1d:84:05:a0:85:04:87:ee:d7:92:76:b8:2b:
2d:18:30:d8:cf:11:3e:8b:de:9a:a7:c8:a8:74:44:ac:03:1d:
f2:2a:ef:8a:2d:f7:08:70:f0:8b:96:62:41:3a:fc:5b:71:c6:
dd:82:9d:b1:a9:a8:e0:56:ca:85:f9:fa:2a:ad:fd:37:aa:6a:
4b:b8:67:61:a9:bc:be:5c:0b:23:3f:cc:ae:86:24:b4:59:82:
30:ae:b9:44:28:bc:ee:1f:8c:20:1b:75:9b:d6:36:48:65:31:
06:5e:15:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:33 2025 by rpki-client