Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/Wodeb2G-O5hfE1AaXUEi32kwtug.roa
File: Wodeb2G-O5hfE1AaXUEi32kwtug.roa (raw, json)
Hash identifier: z94g78TEECa8iSMDLgSVgEG9oWcHvy77HVxXhtUZH3M=
Subject key identifier: 5A:87:5E:6F:61:BE:3B:98:5F:13:50:1A:5D:41:22:DF:69:30:B6:E8
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C2B7EB4FB1994677B1360E101CF13
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/Wodeb2G-O5hfE1AaXUEi32kwtug.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216289
IP address blocks: 2a13:9304::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2b:7e:b4:fb:19:94:67:7b:13:60:e1:01:cf:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a875e6f61be3b985f13501a5d4122df6930b6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:55:d7:4a:51:7a:c0:24:cb:d9:25:b4:31:
92:c3:a6:c7:4f:d8:f6:55:44:3b:b7:a4:3e:7c:45:
2d:84:f9:a5:f3:a4:21:6e:13:12:c3:60:19:20:e2:
76:d9:cf:b0:46:9c:32:08:3b:66:00:a2:f4:7c:2f:
95:53:f5:5f:8e:11:d9:a1:8d:9c:dd:05:e7:a0:9c:
39:e5:f8:e4:38:73:7c:d6:f5:ed:6a:15:c1:e8:eb:
c4:70:78:4c:8d:b5:59:d9:05:da:fb:60:27:05:62:
a2:3d:20:ee:fd:0b:d5:f4:c6:a3:3d:9e:79:11:91:
31:4f:76:50:8d:a3:d6:34:78:61:cc:57:46:46:ab:
31:37:49:c1:be:ea:24:3d:4d:af:fd:02:20:1f:61:
40:77:d9:d3:a6:ac:be:4e:46:d5:0a:9d:7c:cf:a4:
f6:3f:ff:b8:f6:3d:43:b3:a8:94:cd:a3:16:39:e7:
8c:75:f5:25:da:87:9b:cb:c3:61:74:2e:78:68:70:
3e:9a:dd:0a:28:d5:d4:8b:bb:4a:62:51:ed:51:d8:
64:50:46:9f:61:0b:bb:97:4a:84:a7:83:fc:5e:58:
68:af:ed:58:58:af:22:d5:9c:75:ea:73:02:c0:cd:
90:1e:3d:2e:47:56:c0:b3:e4:9c:f1:f2:fa:64:68:
4f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:87:5E:6F:61:BE:3B:98:5F:13:50:1A:5D:41:22:DF:69:30:B6:E8
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/Wodeb2G-O5hfE1AaXUEi32kwtug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9304::/31
Signature Algorithm: sha256WithRSAEncryption
31:0c:66:37:5c:50:b3:8f:24:0f:6f:76:09:1c:12:46:7c:5a:
36:5f:47:21:b3:91:c8:36:de:82:12:f4:0a:90:8b:77:5c:65:
46:d6:e3:1c:e8:1c:8f:54:43:12:d0:a3:97:a0:22:77:32:26:
ff:e7:e1:f0:70:67:4e:7d:41:b2:1c:2b:b8:ef:2d:91:f0:a1:
74:5e:fd:41:77:0e:17:76:69:26:57:b6:dd:25:26:73:76:35:
99:35:8d:40:c5:8a:ef:7c:9c:db:81:5d:38:3c:7f:ef:f1:df:
bd:58:e8:7f:48:42:d9:25:43:7d:7b:a0:4a:94:b8:9e:d1:92:
6f:62:0c:16:61:bd:13:d6:a9:87:3a:56:90:d2:7c:d6:92:52:
a3:40:0a:aa:58:18:57:e7:d5:be:1d:7c:4e:2f:ef:35:dd:e2:
11:41:47:d6:79:0b:60:d8:76:8c:6c:a8:6d:10:bf:09:97:f2:
3a:42:a1:b5:6f:86:52:a1:5d:3e:34:f6:47:7f:cd:18:e7:77:
4f:f4:fd:02:94:d6:33:9b:71:cb:23:04:de:24:90:46:c2:10:
47:45:17:6b:90:b8:b8:7e:eb:0f:57:84:60:24:02:62:2f:1c:
e8:a5:8e:dc:3f:8e:e4:b1:75:45:c9:37:cf:53:27:3c:78:99:
fe:94:e5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:36 2025 by rpki-client