Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/wDuJvOlZaOo8Epkil686w3gJsto.roa
File: wDuJvOlZaOo8Epkil686w3gJsto.roa (raw, json)
Hash identifier: 73Hf4s3WrV0+uOuIELUGtDk9/Kp+8P4NYxn8dFXAlzY=
Subject key identifier: C0:3B:89:BC:E9:59:68:EA:3C:12:99:22:97:AF:3A:C3:78:09:B2:DA
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194887F897CD22D7124FB936346894ABA3D
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/wDuJvOlZaOo8Epkil686w3gJsto.roa
Signing time: Tue 21 Jan 2025 10:54:07 +0000
ROA not before: Tue 21 Jan 2025 10:54:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215462
IP address blocks: 2a13:a702::/31 maxlen: 31
2a13:da00::/29 maxlen: 32
2a13:e400::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:7f:89:7c:d2:2d:71:24:fb:93:63:46:89:4a:ba:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 21 10:54:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c03b89bce95968ea3c12992297af3ac37809b2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:6b:1a:f1:c1:c4:87:d2:85:93:d3:5f:7e:
45:b8:3a:d4:25:92:b7:66:c7:09:dc:95:5b:23:d6:
df:83:a6:7b:8d:c3:c6:25:57:f3:c1:f8:3a:3e:e7:
5e:42:f2:e1:e1:25:7b:f7:ff:55:3b:db:d3:93:d6:
53:82:6f:d3:ed:6b:b4:ef:82:49:75:40:28:04:c8:
91:1a:9e:b6:2b:2f:b9:bf:60:3e:45:3b:00:a9:5d:
aa:d0:95:45:87:19:24:5d:70:b7:49:b7:c8:72:fc:
25:73:e3:57:c7:b0:6f:a1:7e:13:97:49:97:d3:d5:
75:66:3a:70:6f:da:28:a4:76:c6:33:f7:64:e1:ab:
74:a8:2c:20:f6:5b:da:e8:21:28:4f:07:16:7c:64:
b5:42:f8:37:5c:d9:5d:73:e6:6c:87:02:8d:b2:16:
89:eb:3e:58:95:e9:ba:85:23:75:9d:b3:91:08:13:
09:3a:00:58:b3:51:52:2d:95:fa:12:65:c9:bc:a0:
1c:47:63:9b:3e:21:59:44:e3:89:12:35:8e:8f:e8:
89:10:10:10:2b:97:24:7c:35:f4:80:d4:47:e3:e7:
3d:a6:98:8d:d3:d5:52:07:56:6f:12:f4:3a:e3:11:
0e:15:ee:29:e1:d5:59:f5:b5:a0:c8:8c:5d:d7:d9:
54:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3B:89:BC:E9:59:68:EA:3C:12:99:22:97:AF:3A:C3:78:09:B2:DA
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/wDuJvOlZaOo8Epkil686w3gJsto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a702::/31
2a13:da00::/29
2a13:e400::/29
Signature Algorithm: sha256WithRSAEncryption
a8:6e:a7:76:87:c2:5a:03:71:f4:6b:ba:a1:29:31:02:16:4b:
e8:b5:0e:18:c0:69:41:a9:e5:0e:67:ab:52:7c:bf:3b:d5:63:
47:33:40:07:12:00:a3:9b:6a:c7:5c:80:55:53:97:73:98:1e:
93:61:52:fa:5a:38:f7:e7:7d:5c:10:16:ad:58:94:35:66:bb:
9d:c5:d4:d7:94:d2:de:e7:7e:ba:10:10:a5:5e:7e:d3:7d:4e:
82:5e:a3:a2:83:6e:26:bd:2e:45:60:9f:6a:cb:aa:d8:73:ff:
23:7e:32:c3:a3:81:ab:7f:58:f3:4e:83:45:20:d4:8a:03:aa:
33:e7:6e:cf:1a:b2:41:59:19:7f:61:3f:f2:22:21:88:e2:8d:
41:38:b7:a4:26:66:2d:b7:25:16:e2:ee:27:73:31:cc:8a:c4:
4f:61:1d:f6:b2:76:ed:78:b6:f7:c7:ad:58:2d:98:8e:bc:3d:
34:0e:78:0f:e4:26:7c:aa:53:94:d4:2f:9d:f7:6e:84:57:10:
6b:15:5c:e0:d7:32:07:87:18:0b:3f:26:99:4e:68:85:41:1a:
2e:40:70:c7:54:e7:0d:a4:2e:62:ea:29:e9:c3:d1:4a:ec:89:
e4:9f:94:c1:6a:a1:af:f3:1e:43:9e:44:2a:ee:fb:43:04:f7:
84:11:ed:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:59 2025 by rpki-client