Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/pIyB-_gyKX0yvojv_cOEmJKX5J0.roa
File: pIyB-_gyKX0yvojv_cOEmJKX5J0.roa (raw, json)
Hash identifier: 6GJsY/2bnSWYmzzHAcqWL7RY9KRAzWBexFN6xzvXMgc=
Subject key identifier: A4:8C:81:FB:F8:32:29:7D:32:BE:88:EF:FD:C3:84:98:92:97:E4:9D
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194887F8839230EB4894811590C87FCF2EF
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/pIyB-_gyKX0yvojv_cOEmJKX5J0.roa
Signing time: Tue 21 Jan 2025 10:54:06 +0000
ROA not before: Tue 21 Jan 2025 10:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214967
IP address blocks: 2a13:9306::/31 maxlen: 31
2a13:da00::/29 maxlen: 32
2a13:e400::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:7f:88:39:23:0e:b4:89:48:11:59:0c:87:fc:f2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 21 10:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a48c81fbf832297d32be88effdc384989297e49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:22:1a:14:c6:55:9a:8f:ee:3b:e1:3f:c3:b9:
84:09:5c:28:ca:78:7e:17:f1:ee:69:d4:67:c8:3b:
dd:8d:5e:2d:7b:b5:67:ee:ad:ea:df:af:e5:a8:b1:
31:b4:43:e0:47:47:65:87:73:26:57:7d:9b:44:3f:
ff:55:d9:09:b8:14:80:f7:0c:cd:7e:fd:f7:e3:a3:
8f:87:d5:a4:c1:9a:87:71:9f:99:0e:7b:4a:10:d4:
85:2f:3a:34:69:78:c5:23:f9:cf:dd:32:54:eb:ec:
77:92:02:49:3e:3d:27:a6:d4:fe:a6:17:32:85:40:
8e:c7:35:77:bd:6f:6d:3a:83:d4:f2:fe:c7:af:e9:
7a:3b:8d:06:3e:fe:38:ec:1a:5b:d7:7c:7d:29:8f:
cc:ef:ff:d5:57:83:2b:a7:11:3e:9b:12:ab:28:f8:
10:5a:e1:3b:6f:b6:b9:6d:b9:52:73:d7:f8:f7:38:
f5:9a:8d:a4:65:4e:44:53:98:ad:ee:e3:6a:e0:bd:
00:02:d0:8e:b4:2c:3f:5f:6e:f3:f9:d0:95:6d:99:
6e:44:7a:fb:f7:55:cf:60:a2:87:a3:51:91:24:3e:
36:dd:e6:23:f6:71:88:79:3c:b5:08:25:e5:ed:48:
bd:d8:f8:38:07:df:68:7a:d0:4d:a1:0d:0d:8d:e3:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8C:81:FB:F8:32:29:7D:32:BE:88:EF:FD:C3:84:98:92:97:E4:9D
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/pIyB-_gyKX0yvojv_cOEmJKX5J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9306::/31
2a13:da00::/29
2a13:e400::/29
Signature Algorithm: sha256WithRSAEncryption
8f:21:3d:20:5e:02:d3:87:5c:89:13:52:92:6d:02:6a:22:b6:
96:b0:4b:cf:a3:ba:c0:33:45:ca:49:67:c2:32:bf:e8:05:b5:
24:1c:73:a5:98:e2:6e:0d:cb:e2:58:51:74:6d:bb:12:cf:bc:
a2:79:89:2a:17:ce:66:df:17:1f:47:bc:4a:9c:a2:4f:5b:43:
d3:9c:20:c5:7c:ae:4b:85:26:74:39:aa:b7:19:49:6b:8e:a9:
36:d4:7c:de:60:48:73:21:ed:c4:a7:42:8c:86:12:d7:22:be:
8b:04:f7:f6:8b:a7:8c:78:a5:f5:ea:6f:38:1a:4c:ca:3a:c9:
f0:24:91:25:a6:8e:66:2f:95:d6:d4:4c:00:a1:8e:f6:f4:1e:
22:f3:1e:ec:06:b9:1e:d2:83:1a:b6:ec:77:ec:c5:ee:0c:c6:
ba:d4:01:fe:12:e0:8a:1a:4b:91:b8:1d:e9:51:b8:0c:03:35:
ba:4a:75:8b:36:20:ac:4a:98:59:36:e0:06:3f:43:b0:e1:c9:
76:60:b5:87:bd:a6:70:ce:29:86:f4:70:3f:22:6d:21:fa:69:
a1:b4:00:20:24:9f:83:fb:0a:a3:c0:88:fd:4d:f3:28:d1:77:
ef:14:57:7e:c6:75:fd:f7:99:e1:d3:95:f2:42:4a:05:96:02:
d9:d7:c8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:17 2025 by rpki-client