Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/zf7G8dw177J1cqxfCOTnq7s5mzk.roa
File: zf7G8dw177J1cqxfCOTnq7s5mzk.roa (raw, json)
Hash identifier: Ktcb96xFdLO9HtBDwmDCXkYKr2TSGUfY6gJWnDIeWaY=
Subject key identifier: CD:FE:C6:F1:DC:35:EF:B2:75:72:AC:5F:08:E4:E7:AB:BB:39:9B:39
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194887F880AA8752AAFA91D41C174361670
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/zf7G8dw177J1cqxfCOTnq7s5mzk.roa
Signing time: Tue 21 Jan 2025 10:54:06 +0000
ROA not before: Tue 21 Jan 2025 10:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214940
IP address blocks: 2a13:da00::/29 maxlen: 32
2a13:e400::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:7f:88:0a:a8:75:2a:af:a9:1d:41:c1:74:36:16:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 21 10:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdfec6f1dc35efb27572ac5f08e4e7abbb399b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:99:e5:94:e7:4b:f2:ea:c4:65:01:ad:2f:
3d:b6:f6:84:10:41:66:83:6c:f2:6b:d7:d8:5e:e3:
15:d0:7e:c2:9d:ee:59:1d:ab:5b:22:17:17:3c:7c:
9b:64:f5:7a:45:93:24:2f:60:88:f8:a4:8f:31:49:
94:6e:c7:ac:7f:61:26:c1:d7:95:df:97:5e:e9:c7:
7a:15:4d:45:95:89:74:3d:49:02:80:bb:9a:b0:fa:
a3:68:d2:fc:ca:ec:2f:94:ce:46:d5:81:f0:22:13:
38:dc:5c:e5:7c:3a:13:3c:97:ea:a8:b9:80:81:6c:
ed:ad:62:a0:2c:33:c8:78:79:9a:5a:35:4a:d7:a1:
5e:88:7d:5e:1a:b9:f2:11:a0:86:29:c0:80:73:b1:
46:60:dd:d0:b5:b6:88:66:d9:9d:13:fe:f5:f2:35:
51:11:09:2f:df:a2:b9:22:16:7e:89:76:59:66:a4:
77:51:e7:14:97:4a:ee:89:e8:ae:88:e7:9a:f1:87:
bb:43:63:92:2b:76:2e:3d:ca:ea:c1:bd:15:0f:6a:
ec:03:31:95:9b:4a:b9:f1:0f:1e:d3:f8:ee:2e:95:
d1:c3:a9:14:d5:56:8d:3d:58:04:f6:4c:6f:87:95:
86:f5:20:f9:8b:b3:0c:b3:9a:ae:ae:e7:25:bf:5a:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FE:C6:F1:DC:35:EF:B2:75:72:AC:5F:08:E4:E7:AB:BB:39:9B:39
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/zf7G8dw177J1cqxfCOTnq7s5mzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:da00::/29
2a13:e400::/29
Signature Algorithm: sha256WithRSAEncryption
ab:fd:59:6b:ef:b7:89:4a:df:08:7b:a3:ff:f3:e0:69:d4:0f:
73:1f:35:09:5a:a0:9c:4a:db:ba:96:f9:f0:8c:7e:e6:46:91:
ad:6c:a4:a6:d2:16:5f:b3:24:05:53:24:93:ee:b8:2d:34:6e:
db:8c:3b:b6:8f:e5:9c:96:fd:5a:8b:1d:8d:6a:58:d4:1a:f4:
74:bb:94:45:bb:43:61:ab:0c:08:05:6e:8b:6c:5c:69:e1:79:
e7:b4:9d:cd:2e:fc:f0:55:31:67:22:c0:7d:92:ad:d9:e8:4c:
f8:e6:7e:f4:1a:eb:d1:8d:83:7c:c7:13:7b:0a:07:a9:a1:85:
e6:67:e4:cb:81:09:0f:86:1b:a2:47:95:f8:8e:3d:33:ea:79:
f6:8a:a8:12:09:e5:a9:72:17:34:fd:b8:e9:d5:07:55:49:eb:
a8:21:cb:eb:c9:39:f2:f9:a2:2f:20:5a:61:f2:40:05:c0:8b:
66:84:85:e4:b9:5c:6c:42:5b:15:88:5e:bb:b4:6e:7e:c4:35:
1f:ff:cc:1f:98:0a:00:9b:8d:c6:65:07:96:54:44:75:40:b5:
09:36:c3:78:44:e0:9c:58:fd:9a:8d:0c:53:75:54:88:88:01:
03:48:d0:c2:54:7f:70:20:9b:9d:e9:70:9a:be:36:39:28:36:
a0:29:92:44
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZSIf4gKqHUqr6kdQcF0NhZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjIxM2JmMTYyNzU0OGVmZGZiMWIyZTI2NDViYWFmMWQ5
ODNhYTAwHhcNMjUwMTIxMTA1NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGZlYzZmMWRjMzVlZmIyNzU3MmFjNWYwOGU0ZTdhYmJiMzk5YjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywuZ5ZTnS/LqxGUBrS89tvaEEEFm
g2zya9fYXuMV0H7Cne5ZHatbIhcXPHybZPV6RZMkL2CI+KSPMUmUbsesf2EmwdeV
35de6cd6FU1FlYl0PUkCgLuasPqjaNL8yuwvlM5G1YHwIhM43FzlfDoTPJfqqLmA
gWztrWKgLDPIeHmaWjVK16FeiH1eGrnyEaCGKcCAc7FGYN3QtbaIZtmdE/718jVR
EQkv36K5IhZ+iXZZZqR3UecUl0ruieiuiOea8Ye7Q2OSK3YuPcrqwb0VD2rsAzGV
m0q58Q8e0/juLpXRw6kU1VaNPVgE9kxvh5WG9SD5i7MMs5quruclv1om+wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFM3+xvHcNe+ydXKsXwjk56u7OZs5MB8GA1UdIwQY
MBaAFIiyE78WJ1SO/fsbLiZFuq8dmDqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxJVHZ4WW5WSTc5LXhzdUprVzZyeDJZT3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zYzAyNjktYzE5NC00ZTZkLWFiY2Ut
NzI3MzVlMTE4ZDUxLzEvemY3RzhkdzE3N0oxY3F4ZkNPVG5xN3M1bXprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zYzAyNjktYzE5NC00ZTZkLWFiY2UtNzI3MzVlMTE4ZDUx
LzEvaUxJVHZ4WW5WSTc5LXhzdUprVzZyeDJZT3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKhPaAAMF
AyoT5AAwDQYJKoZIhvcNAQELBQADggEBAKv9WWvvt4lK3wh7o//z4GnUD3MfNQla
oJxK27qW+fCMfuZGka1spKbSFl+zJAVTJJPuuC00btuMO7aP5ZyW/VqLHY1qWNQa
9HS7lEW7Q2GrDAgFbotsXGnheee0nc0u/PBVMWciwH2SrdnoTPjmfvQa69GNg3zH
E3sKB6mhheZn5MuBCQ+GG6JHlfiOPTPqefaKqBIJ5alyFzT9uOnVB1VJ66ghy+vJ
OfL5oi8gWmHyQAXAi2aEheS5XGxCWxWIXru0bn7ENR//zB+YCgCbjcZlB5ZURHVA
tQk2w3hE4JxY/ZqNDFN1VIiIAQNI0MJUf3Agm53pcJq+NjkoNqApkkQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:24 2025 by rpki-client