Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/7-NvAjzZCDNIKTeDDn1z2wnsySM.roa
File: 7-NvAjzZCDNIKTeDDn1z2wnsySM.roa (raw, json)
Hash identifier: ha7JC+Qd7+z1dgl9rMcZhtfsQI4xudXeagPgQxWUyhc=
Subject key identifier: EF:E3:6F:02:3C:D9:08:33:48:29:37:83:0E:7D:73:DB:09:EC:C9:23
Certificate issuer: /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial: 019426D9B5062959D930E9340EB417E72DAC
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/7-NvAjzZCDNIKTeDDn1z2wnsySM.roa
Signing time: Thu 02 Jan 2025 11:49:49 +0000
ROA not before: Thu 02 Jan 2025 11:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205771
IP address blocks: 2a13:740::/32 maxlen: 32
2a13:741::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b5:06:29:59:d9:30:e9:34:0e:b4:17:e7:2d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efe36f023cd90833482937830e7d73db09ecc923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:6e:af:b8:ab:0c:8e:25:d3:d0:11:72:22:
0c:e5:d4:56:5a:35:4d:12:70:52:e3:7d:34:c1:74:
93:f4:2f:18:e8:bf:0b:68:84:43:0e:98:23:bb:cc:
7c:39:05:f4:c9:90:d5:a2:0f:2f:2c:30:2f:22:7e:
1f:df:4a:38:b4:1d:1e:64:92:14:2a:c3:10:de:e6:
be:2e:87:71:8b:8d:4e:91:3d:8f:ba:88:a7:8a:ae:
52:b2:43:5e:02:ec:45:55:92:93:20:a8:5b:20:84:
69:ac:93:6e:a7:13:8e:8a:1f:8e:73:64:64:4d:b6:
ff:24:80:90:1d:c7:81:24:3b:07:2e:0d:5e:0e:c8:
92:b5:12:cb:02:55:76:0f:c1:c1:3c:ef:20:9d:6f:
b1:4d:94:65:4b:a0:7f:e2:13:e1:1c:10:ab:89:6f:
8f:3a:92:fe:f5:e4:99:1d:25:f0:71:08:13:93:13:
aa:8f:1e:3a:c4:10:8d:bc:1e:61:7f:0a:8f:e6:05:
c5:23:9e:fb:98:10:64:5a:b9:b9:3e:5e:50:c9:42:
4c:33:0d:6a:73:5a:39:68:68:8e:41:d2:cb:35:d3:
86:f0:63:23:1b:f6:89:c5:72:84:d0:cb:99:24:ac:
55:a1:56:34:c6:c6:88:89:49:f3:02:ed:1b:d2:80:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E3:6F:02:3C:D9:08:33:48:29:37:83:0E:7D:73:DB:09:EC:C9:23
X509v3 Authority Key Identifier:
keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/7-NvAjzZCDNIKTeDDn1z2wnsySM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:740::/31
Signature Algorithm: sha256WithRSAEncryption
46:f1:2f:fa:d8:c0:72:f6:3e:a2:c5:a5:b4:23:1d:16:aa:f1:
5e:08:b9:0d:6c:62:b0:b9:ad:3b:ec:b9:58:79:d3:74:3c:1d:
f6:26:17:45:da:ab:6b:04:e3:27:50:e8:74:76:fd:dc:4c:13:
3e:25:a7:07:1c:4a:7a:30:d2:74:61:d3:04:34:17:6d:f1:49:
e7:64:ca:c9:61:fb:0d:95:1c:16:9b:ee:10:d1:9c:1a:ef:40:
3f:ae:bc:2f:e0:98:aa:8f:26:3f:dd:3b:62:ba:ee:26:df:75:
4b:d5:5f:f3:66:d7:d6:52:06:d5:f3:20:0f:08:dd:02:22:ee:
a6:ee:0a:cb:ae:43:10:db:e6:97:1f:a9:2c:5b:c3:c1:b6:59:
6e:89:af:31:69:87:80:72:3a:b5:8e:99:5a:fc:61:7d:51:32:
65:a8:90:67:02:a7:05:59:85:33:74:83:48:bf:1c:4f:05:0b:
c3:fe:e3:a4:72:9b:37:f7:ce:7e:d8:76:bc:5d:0b:e2:ad:39:
fc:61:f4:a6:28:37:15:50:7e:da:de:c8:39:f7:5f:40:46:d4:
8b:63:31:74:6b:94:c3:87:f9:71:11:0b:db:1a:6a:90:64:ef:
10:90:44:ff:3f:ad:ea:5f:f1:5d:1e:b0:c8:87:7e:20:a2:b4:
cc:13:05:9a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQm2bUGKVnZMOk0DrQX5y2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxOWVkZGIzNjY5MTllZDc1ZjQ2NjBjZmIwZTBiNmU1ZmM0
MDE2MTMwHhcNMjUwMTAyMTE0OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmUzNmYwMjNjZDkwODMzNDgyOTM3ODMwZTdkNzNkYjA5ZWNjOTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwxur7irDI4l09ARciIM5dRWWjVN
EnBS4300wXST9C8Y6L8LaIRDDpgju8x8OQX0yZDVog8vLDAvIn4f30o4tB0eZJIU
KsMQ3ua+Lodxi41OkT2Puoiniq5SskNeAuxFVZKTIKhbIIRprJNupxOOih+Oc2Rk
Tbb/JICQHceBJDsHLg1eDsiStRLLAlV2D8HBPO8gnW+xTZRlS6B/4hPhHBCriW+P
OpL+9eSZHSXwcQgTkxOqjx46xBCNvB5hfwqP5gXFI577mBBkWrm5Pl5QyUJMMw1q
c1o5aGiOQdLLNdOG8GMjG/aJxXKE0MuZJKxVoVY0xsaIiUnzAu0b0oCu5QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFO/jbwI82QgzSCk3gw59c9sJ7MkjMB8GA1UdIwQY
MBaAFDGe3bNmkZ7XX0Zgz7DgtuX8QBYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85YTM2Y2MtNmRjYS00YTJhLWJmNmYt
ZDQ3YmQ3ZDAxOTJmLzEvNy1OdkFqelpDRE5JS1RlRERuMXoyd25zeVNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS85YTM2Y2MtNmRjYS00YTJhLWJmNmYtZDQ3YmQ3ZDAxOTJm
LzEvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKhMHQDAN
BgkqhkiG9w0BAQsFAAOCAQEARvEv+tjAcvY+osWltCMdFqrxXgi5DWxisLmtO+y5
WHnTdDwd9iYXRdqrawTjJ1DodHb93EwTPiWnBxxKejDSdGHTBDQXbfFJ52TKyWH7
DZUcFpvuENGcGu9AP668L+CYqo8mP907YrruJt91S9Vf82bX1lIG1fMgDwjdAiLu
pu4Ky65DENvmlx+pLFvDwbZZbomvMWmHgHI6tY6ZWvxhfVEyZaiQZwKnBVmFM3SD
SL8cTwULw/7jpHKbN/fOfth2vF0L4q05/GH0pig3FVB+2t7IOfdfQEbUi2MxdGuU
w4f5cREL2xpqkGTvEJBE/z+t6l/xXR6wyId+IKK0zBMFmg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:55:50 2025 by rpki-client