Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/SLLUMAJKxJq045JCLVs9H5nC9nw.roa
File: SLLUMAJKxJq045JCLVs9H5nC9nw.roa (raw, json)
Hash identifier: /PN9Q7dD2zRwVKc/oYOK+/gsSuS6rWI59nDYoZCCVJI=
Subject key identifier: 48:B2:D4:30:02:4A:C4:9A:B4:E3:92:42:2D:5B:3D:1F:99:C2:F6:7C
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 019425219E0FF9969F3E58E04436131248B6
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/SLLUMAJKxJq045JCLVs9H5nC9nw.roa
Signing time: Thu 02 Jan 2025 03:49:07 +0000
ROA not before: Thu 02 Jan 2025 03:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200078
IP address blocks: 2a13:a5c3:f200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9e:0f:f9:96:9f:3e:58:e0:44:36:13:12:48:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 03:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48b2d430024ac49ab4e392422d5b3d1f99c2f67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:ca:77:c9:96:7d:14:af:04:7f:ac:4f:c1:
b9:a1:c8:cb:06:dd:e2:70:cf:ca:f8:02:85:f4:84:
f9:74:3b:8d:0a:9e:73:3f:15:bb:7c:7f:ab:a0:11:
a7:f0:e5:ec:1e:b4:19:e4:aa:d6:61:ed:39:9e:64:
c1:43:aa:6a:05:72:bf:98:49:4f:c8:d4:4e:56:09:
a5:75:e2:7d:da:4f:78:24:f6:be:dc:cd:a8:04:6e:
86:c0:e8:79:27:ca:1c:a0:b9:95:c7:f9:31:5e:d8:
86:95:0f:7a:86:f3:7d:bb:8e:e0:83:5b:a3:5c:23:
40:16:b9:03:b3:50:73:c5:79:f1:d7:f4:a6:cc:ca:
41:c4:13:02:66:8f:5f:7e:d8:55:cb:49:cb:28:be:
77:88:28:6b:7f:64:33:83:2d:d1:a2:bc:12:aa:a2:
0f:19:89:4c:48:88:72:11:a9:79:1d:1d:7e:8c:38:
09:17:4b:93:f6:93:de:4a:00:a0:ce:45:5c:e5:5b:
e7:26:bf:cc:e3:da:2d:17:a7:57:2d:eb:0a:d1:72:
1a:b7:24:5b:30:7c:82:5b:1d:2d:ef:a6:ef:07:ab:
14:fc:d0:89:ef:ae:10:6c:c4:e7:3b:02:31:7c:41:
af:5b:15:9e:17:37:8c:80:d1:ad:29:7c:2b:88:26:
0c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B2:D4:30:02:4A:C4:9A:B4:E3:92:42:2D:5B:3D:1F:99:C2:F6:7C
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/SLLUMAJKxJq045JCLVs9H5nC9nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c3:f200::/40
Signature Algorithm: sha256WithRSAEncryption
14:c0:24:17:cc:02:f0:b7:7b:0b:f6:76:0f:7e:1c:6f:b7:b0:
c5:ce:de:92:22:2e:55:ea:a4:75:72:7b:e1:0f:ca:f3:b3:9b:
01:ba:c8:a8:52:8e:d7:72:4b:96:80:5a:41:86:c2:6d:58:17:
d6:89:e0:b3:98:2a:c8:10:82:e5:af:b6:a0:9f:e1:16:ed:60:
a8:48:5f:39:00:18:ff:17:31:52:23:56:f3:1f:6b:89:cf:ee:
44:e6:6b:35:48:a6:02:4e:00:4f:62:a1:3f:37:f5:3d:2e:89:
ec:73:18:8d:ec:0b:f6:8d:50:c1:e7:5a:08:24:46:ae:43:0f:
0e:5d:79:5e:c3:f1:53:f0:e6:47:2e:9e:cf:77:90:11:e1:24:
c4:51:e8:0f:fd:04:ac:e8:00:c0:a0:e5:80:78:f4:8f:84:97:
28:88:13:e5:7c:66:2b:e9:c1:8c:39:7b:b8:0d:12:b4:8e:9b:
63:6f:b2:b3:33:5f:86:a2:e7:ba:b8:9c:b5:bb:20:d7:ff:25:
02:22:95:04:43:24:c8:69:85:fd:14:03:fa:bf:d6:54:16:a6:
22:a7:69:90:63:a4:0a:1f:f2:5f:40:44:8e:cd:7f:a7:bc:86:
36:3d:5b:c8:22:a6:ff:22:8e:5a:aa:1a:56:95:2f:93:e6:aa:
04:0e:e8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:12:20 2025 by rpki-client