Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/f9PiBsdXGMaiketrG3G5PjbB6oI.roa
File: f9PiBsdXGMaiketrG3G5PjbB6oI.roa (raw, json)
Hash identifier: OKMBW/Wn+8xzvLZOORxBkZ/Gr6+Ikl3rSLUfT+IRWSA=
Subject key identifier: 7F:D3:E2:06:C7:57:18:C6:A2:91:EB:6B:1B:71:B9:3E:36:C1:EA:82
Certificate issuer: /CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Certificate serial: 01942369B43B9186029F235158BD2EA45B20
Authority key identifier: 40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/f9PiBsdXGMaiketrG3G5PjbB6oI.roa
Signing time: Wed 01 Jan 2025 19:48:37 +0000
ROA not before: Wed 01 Jan 2025 19:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204774
IP address blocks: 2a13:5000::/29 maxlen: 48
2a13:5000::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:b4:3b:91:86:02:9f:23:51:58:bd:2e:a4:5b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Validity
Not Before: Jan 1 19:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fd3e206c75718c6a291eb6b1b71b93e36c1ea82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:98:14:c5:0b:d7:e3:06:d2:e5:b0:3e:76:
f4:27:1e:b8:69:33:86:b4:36:18:21:f5:08:b0:0d:
e5:ca:0a:f0:e2:55:7e:46:87:98:14:a8:83:86:07:
7e:9f:9d:e8:fd:24:4a:2b:50:7f:31:32:2c:9e:c2:
6e:db:8e:13:12:55:fc:20:48:7b:58:27:e7:83:35:
8f:2e:cb:63:6f:30:22:71:91:67:aa:b2:af:8f:95:
44:a6:b8:23:43:6f:90:e8:85:3b:51:f4:d0:cc:29:
24:d1:3e:fc:e8:36:05:0d:04:d5:f0:63:af:52:10:
1d:5d:12:f7:18:f6:fa:c5:e9:f2:52:a7:0d:06:99:
16:b5:85:96:6e:1e:02:bd:cc:48:99:0f:af:e2:b7:
ed:a1:75:dc:80:e6:a6:14:eb:bd:48:eb:e3:3a:68:
47:82:a0:93:d2:23:0a:b1:cf:72:a0:16:8b:2d:08:
d7:af:81:d9:24:87:28:17:c4:68:7f:ed:d7:9e:87:
94:58:13:6e:ad:ae:98:e7:f9:17:03:73:8c:bd:ea:
f3:23:9d:55:11:7d:e9:94:e9:00:e9:8f:ed:33:d0:
ed:50:f3:5d:2f:64:2f:af:bd:f2:c5:1e:9a:6a:02:
f5:96:1d:04:73:15:15:73:40:cd:f4:5b:1a:a8:2c:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D3:E2:06:C7:57:18:C6:A2:91:EB:6B:1B:71:B9:3E:36:C1:EA:82
X509v3 Authority Key Identifier:
keyid:40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/f9PiBsdXGMaiketrG3G5PjbB6oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5000::/29
Signature Algorithm: sha256WithRSAEncryption
58:96:a5:63:35:16:8f:34:12:eb:cb:9e:ea:9c:db:a5:e6:ab:
de:e7:b6:7a:da:fb:3b:f5:d6:fc:cd:16:28:05:1e:48:53:06:
b7:d6:b2:2d:19:b0:56:62:3b:b9:40:28:d8:76:f6:2f:bc:47:
94:44:56:ec:ec:11:7a:a9:78:79:0d:74:1f:2f:d9:d3:80:fb:
ff:97:43:49:76:fc:16:f3:83:ae:b5:10:d7:a4:f5:a3:d0:76:
89:89:bf:79:b5:25:ae:5e:4f:31:f4:7a:db:e7:b2:a8:99:4f:
37:ec:1c:88:5e:4a:a5:27:24:bd:05:c5:e9:57:94:2f:bc:71:
0a:a8:e9:9d:b5:bb:b3:8a:3e:5f:16:6f:49:da:dc:6d:04:d7:
67:f4:5b:bb:e5:32:b7:ec:d5:e2:bb:d6:c6:64:bc:f5:ed:44:
aa:4d:68:8d:6a:4b:ef:bd:c2:fd:c8:d9:d2:a3:3d:79:b7:95:
fe:d8:c9:c3:41:0c:e6:9f:76:33:70:da:79:d6:ff:ca:41:79:
44:30:59:03:06:b3:d4:59:0f:2f:d6:9d:db:68:da:0e:9c:6a:
cc:3f:bd:b7:53:d5:f8:0f:2f:be:08:6f:1e:c1:f8:09:43:29:
41:23:60:5f:da:e6:9e:a3:a4:23:45:b4:eb:8f:6c:b2:59:50:
46:90:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:37 2025 by rpki-client