Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/kycUHqIJSzwMzWjLm8-WVZuJ2Qw.roa
File: kycUHqIJSzwMzWjLm8-WVZuJ2Qw.roa (raw, json)
Hash identifier: Bj1VYT/0qMuyjXzxb76czCHfvVoPo2W9ZKDIzYtKikE=
Subject key identifier: 93:27:14:1E:A2:09:4B:3C:0C:CD:68:CB:9B:CF:96:55:9B:89:D9:0C
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C25CEB980C31FD4F79C0584C0D0EA
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/kycUHqIJSzwMzWjLm8-WVZuJ2Qw.roa
Signing time: Thu 02 Jan 2025 09:50:09 +0000
ROA not before: Thu 02 Jan 2025 09:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197598
IP address blocks: 2a13:c800::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:25:ce:b9:80:c3:1f:d4:f7:9c:05:84:c0:d0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9327141ea2094b3c0ccd68cb9bcf96559b89d90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:37:82:b7:d9:b0:a4:09:ae:be:95:c0:58:
e3:af:33:a7:fe:60:d7:27:f3:f8:63:40:4b:26:d8:
ab:84:28:99:fd:3d:25:69:d2:34:0f:b0:99:9d:d4:
bd:03:bf:24:8f:1d:aa:3d:f5:b0:78:d0:83:c7:90:
b6:a1:b7:cd:e4:f9:fc:b7:f6:16:1f:f1:5e:4f:88:
34:35:12:eb:20:ec:41:4c:09:f9:b3:da:42:5b:1c:
09:78:26:5d:95:27:44:42:fd:6d:55:06:b9:e6:d6:
ba:64:f9:77:d2:08:81:a2:bc:9d:46:81:1b:02:27:
fe:d2:c7:f4:4a:b5:51:c2:90:1e:56:91:c2:53:ad:
39:6b:57:e2:ec:8f:66:a3:6a:f8:d2:7f:db:53:da:
54:82:06:8c:9d:1f:80:bd:17:c0:48:7f:d9:fa:d7:
b2:80:68:b9:cc:e8:2d:60:dc:88:86:4d:9b:3e:04:
7c:88:0f:88:36:99:e2:67:a5:87:fb:75:a0:b9:d7:
30:94:c8:86:e1:7b:d0:9d:ea:ed:12:fb:f3:27:cf:
dc:06:b4:fe:75:af:03:56:f1:46:b4:c5:c5:e9:47:
14:53:c9:e4:76:4c:e4:10:9e:49:9b:47:cb:ba:e2:
eb:ee:0f:ce:f4:b0:87:1e:5b:33:dd:37:27:81:3a:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:27:14:1E:A2:09:4B:3C:0C:CD:68:CB:9B:CF:96:55:9B:89:D9:0C
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/kycUHqIJSzwMzWjLm8-WVZuJ2Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c800::/29
Signature Algorithm: sha256WithRSAEncryption
cb:81:88:26:01:06:52:80:70:82:ae:96:c9:be:63:b1:be:9e:
54:ef:dd:b0:d7:c8:e1:9e:51:f6:21:5a:83:43:d6:82:df:14:
44:93:b7:07:fc:67:28:74:be:ab:a8:18:ca:14:c7:16:9e:05:
07:01:97:ec:fb:f5:3a:11:3e:00:0c:ab:e2:d7:ac:0c:2e:0f:
28:d7:27:5a:81:b3:c3:8f:5a:73:25:28:2f:ca:e6:bd:30:9e:
5c:dc:84:4d:62:3e:15:50:30:0b:28:65:24:76:ba:b4:3e:df:
ed:e9:b9:88:88:ad:b9:00:e1:ae:63:c5:ef:54:1a:83:2a:88:
35:82:80:76:96:97:c9:ab:0e:9a:c3:d9:5d:f2:ca:b5:44:9f:
65:c6:34:c4:f0:68:4a:93:52:87:d1:19:02:03:26:fb:75:cf:
66:a0:f3:e1:38:64:c9:da:6e:0a:49:fc:6a:6f:fb:2a:db:c4:
95:ae:ce:fc:f5:86:bf:22:30:4f:b2:88:18:3c:59:cf:76:51:
47:77:64:c0:e2:8a:63:79:cf:3d:9e:3f:9b:00:7a:c0:b7:37:
6e:44:9c:5d:dc:4b:cd:fd:b3:5e:d7:3d:9e:00:01:e6:96:12:
41:0c:77:4f:39:97:18:67:9d:b4:a0:31:3c:f4:84:d6:1e:82:
e0:9c:81:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:04 2025 by rpki-client