Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/TvveOuJ78JN7_Bxixoyy3yJ2XvE.roa
File: TvveOuJ78JN7_Bxixoyy3yJ2XvE.roa (raw, json)
Hash identifier: ic2ks2h1rk9qT+cLkckdSWxzORnyQ2dmMXB7UujG98k=
Subject key identifier: 4E:FB:DE:3A:E2:7B:F0:93:7B:FC:1C:62:C6:8C:B2:DF:22:76:5E:F1
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194887F8887AE72A5400D731923E388106E
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/TvveOuJ78JN7_Bxixoyy3yJ2XvE.roa
Signing time: Tue 21 Jan 2025 10:54:06 +0000
ROA not before: Tue 21 Jan 2025 10:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215310
IP address blocks: 2a13:a704::/31 maxlen: 31
2a13:da00::/29 maxlen: 32
2a13:e400::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:7f:88:87:ae:72:a5:40:0d:73:19:23:e3:88:10:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 21 10:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4efbde3ae27bf0937bfc1c62c68cb2df22765ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:d9:ec:a3:de:6d:57:bf:59:53:84:d8:b8:
8a:1c:17:97:0e:d3:ac:23:c0:0e:31:6b:99:91:9d:
39:16:41:3f:cf:fb:bd:c5:0f:db:78:8a:2f:d7:bf:
0e:26:48:3c:44:87:14:a4:01:fc:04:9c:3a:49:a4:
f6:41:3d:9f:79:31:50:f4:d5:d1:77:ba:f6:f6:89:
8b:56:28:ff:08:b5:57:6e:95:db:58:2d:ea:0a:cb:
b9:d9:7e:68:12:2b:bd:98:9c:46:6e:c1:07:9c:18:
3f:79:5f:9b:cf:41:52:af:5f:65:b9:48:b5:97:a4:
3e:57:54:6c:52:3c:09:12:59:3e:d7:03:c2:e8:24:
0b:d6:20:c8:87:0d:d6:ab:7d:51:c3:52:d8:0c:eb:
ea:6a:85:cd:71:c7:ee:30:07:ee:9b:e2:7c:37:d9:
f6:d7:f9:1e:bd:5c:70:46:0f:fb:e3:5c:09:98:5c:
cb:f4:fe:44:75:74:2d:65:a5:0a:fd:8a:c9:e6:47:
36:b6:b5:2b:ed:b6:28:e8:04:d8:40:bc:e3:28:a5:
36:cd:5c:24:e9:4c:76:f2:19:ce:8a:3b:7a:b0:cc:
97:b5:0d:31:12:50:4c:ed:1f:2f:e7:bf:c6:80:48:
9c:0e:94:93:a8:f0:41:2e:8d:5c:5f:ef:ef:12:f9:
9f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FB:DE:3A:E2:7B:F0:93:7B:FC:1C:62:C6:8C:B2:DF:22:76:5E:F1
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/TvveOuJ78JN7_Bxixoyy3yJ2XvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a704::/31
2a13:da00::/29
2a13:e400::/29
Signature Algorithm: sha256WithRSAEncryption
70:48:64:51:62:59:f6:6c:c1:b8:85:be:df:a1:44:71:56:4d:
32:29:72:6a:28:9f:b5:f6:e0:78:16:1c:d8:fc:d0:96:fa:3d:
23:fc:3e:54:a0:f6:56:78:d7:33:7e:69:45:92:18:65:1b:0f:
0d:90:75:b7:21:61:16:0a:a8:8e:1b:3f:30:68:8e:ef:ae:70:
54:7a:a2:34:a9:10:de:98:3c:60:37:2b:40:bb:ae:31:95:8a:
f0:eb:3c:2b:e5:f8:53:8d:d2:24:51:01:e0:21:7f:42:65:27:
5a:2d:8c:69:02:1d:a4:16:bb:71:c1:7b:b5:cf:91:02:87:09:
4a:54:6f:68:37:c3:84:57:7d:2f:5e:7d:a0:4d:e7:04:b7:06:
db:74:ee:e0:7f:79:9d:76:6b:07:0d:c4:60:f9:45:c6:0b:b3:
c8:cb:7e:7a:16:08:08:8e:2e:c3:06:6a:8d:86:07:e7:55:fa:
2d:59:32:52:10:2d:7d:9c:84:79:3d:4c:9b:c5:d3:b9:05:00:
26:2e:cb:b5:d5:1d:68:96:bf:be:ec:7a:25:67:c4:1f:03:f3:
a2:94:c4:0d:65:34:65:95:64:67:a5:a6:d6:f2:37:a0:e3:36:
9a:de:55:be:39:06:f5:9e:85:6f:82:9b:8c:d3:66:75:3b:75:
6b:58:3f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:41:15 2025 by rpki-client