Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/L7vo6n9BgY3fZANo6epe7vbZHts.roa
File: L7vo6n9BgY3fZANo6epe7vbZHts.roa (raw, json)
Hash identifier: Gmx0MV98HD7oOh/xtyqe1DV4s1De/YW1VHipqzOKk8c=
Subject key identifier: 2F:BB:E8:EA:7F:41:81:8D:DF:64:03:68:E9:EA:5E:EE:F6:D9:1E:DB
Certificate issuer: /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial: 019424B266A485CA554CAD346A7CE829AB27
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/L7vo6n9BgY3fZANo6epe7vbZHts.roa
Signing time: Thu 02 Jan 2025 01:47:38 +0000
ROA not before: Thu 02 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56687
IP address blocks: 2a13:d000::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:66:a4:85:ca:55:4c:ad:34:6a:7c:e8:29:ab:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Validity
Not Before: Jan 2 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fbbe8ea7f41818ddf640368e9ea5eeef6d91edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:35:93:1a:e7:26:88:83:86:b3:78:3d:57:71:
a1:e5:08:a5:a1:38:30:76:c2:54:71:c9:e0:59:5a:
c1:d0:3c:4a:14:43:af:93:fd:39:aa:c1:c9:15:e0:
15:bc:57:4e:e7:d2:27:17:87:55:4a:78:ea:9d:64:
a5:f6:6e:6e:13:40:ad:c7:f5:77:2a:c5:64:a2:8f:
95:3a:59:1f:ae:d6:c6:49:15:d5:ab:04:5e:07:9b:
da:24:d8:52:ed:b2:53:ae:f6:65:50:40:34:a7:2f:
9a:1d:c5:9e:e7:07:7d:96:72:00:6e:fa:1f:78:52:
fa:71:bd:22:3a:01:91:39:cc:0e:46:8f:c9:47:5c:
ff:12:11:3c:86:e5:b3:2e:6c:9b:a1:ec:52:6f:92:
7c:b0:05:4d:a4:7d:1a:80:06:47:1c:dc:29:e9:32:
e0:01:b6:e9:74:41:1f:e3:fe:7d:da:cc:cc:bd:9d:
0a:6d:fd:a9:22:12:fd:3d:e4:51:50:bc:fb:2a:4d:
82:12:eb:63:2a:0a:ba:b1:45:74:dd:7e:ae:45:2d:
fd:55:51:da:f8:e8:be:e1:ab:e7:f6:26:cb:a9:a6:
81:d5:34:77:56:82:cc:25:a1:87:4e:b7:46:86:79:
3a:09:b6:a9:d6:71:1e:5e:3e:67:41:b0:d2:91:fc:
43:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BB:E8:EA:7F:41:81:8D:DF:64:03:68:E9:EA:5E:EE:F6:D9:1E:DB
X509v3 Authority Key Identifier:
keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/L7vo6n9BgY3fZANo6epe7vbZHts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d000::/29
Signature Algorithm: sha256WithRSAEncryption
6e:97:7b:02:1e:51:6b:a3:2e:f2:e4:df:6a:4e:3e:ef:b0:48:
62:39:37:ea:28:36:28:47:1d:7f:f1:9e:69:c9:5f:b8:d8:e3:
b5:05:83:d2:4d:42:92:c4:93:d3:1b:d7:c6:49:ea:00:da:2b:
42:52:64:df:83:df:4a:a2:ae:51:b2:8c:5a:e1:0d:4a:ed:b6:
b0:c5:f4:4a:49:29:6c:95:d9:3a:a8:61:27:11:24:60:91:88:
b3:9f:89:a6:ac:c5:32:98:95:af:c1:8d:8a:f0:3e:64:aa:a2:
32:11:78:00:a8:a4:70:d7:00:1f:d5:fc:a1:38:19:7d:b5:e7:
7b:36:c3:d9:4a:b8:76:8c:5c:ae:34:93:1e:1b:78:77:57:dc:
91:48:76:e2:12:ef:a7:5b:f0:6d:82:80:b8:fe:e6:2a:c9:71:
96:63:77:c3:68:55:d7:83:75:ac:90:02:7e:43:eb:71:12:2e:
d3:4a:8c:a3:fe:b5:06:83:99:0d:dc:de:c0:3e:4e:6f:1f:28:
71:6e:8e:45:db:b3:cb:e6:ab:11:86:c0:95:2d:41:3e:e4:05:
5c:60:fb:e2:80:e3:c5:44:8c:ee:65:78:83:80:40:24:dd:c3:
a9:38:58:72:af:3f:a0:5e:f1:11:40:08:e4:b3:82:0e:4c:cf:
e3:6b:6e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:53:53 2025 by rpki-client