Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/9Cor9nA5STtdeNAPJ4EF2UhIUNY.roa
File: 9Cor9nA5STtdeNAPJ4EF2UhIUNY.roa (raw, json)
Hash identifier: 2Xypo5/I10KMSVc6sd5OAZl2260JQAWQGDIcFZqWthg=
Subject key identifier: F4:2A:2B:F6:70:39:49:3B:5D:78:D0:0F:27:81:05:D9:48:48:50:D6
Certificate issuer: /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial: 0194236A11B97FC4DFC88115CFECB6D6633F
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/9Cor9nA5STtdeNAPJ4EF2UhIUNY.roa
Signing time: Wed 01 Jan 2025 19:49:01 +0000
ROA not before: Wed 01 Jan 2025 19:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52209
IP address blocks: 2a13:9600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:11:b9:7f:c4:df:c8:81:15:cf:ec:b6:d6:63:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
Validity
Not Before: Jan 1 19:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f42a2bf67039493b5d78d00f278105d9484850d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:76:77:7d:d8:09:3d:7a:5a:b3:e8:bf:88:
0c:47:46:16:10:6f:fc:af:6f:18:d2:9e:1b:54:3a:
7a:99:54:e6:0d:a1:ff:9d:0f:fd:28:ab:9a:bd:ec:
3a:ca:1b:a4:fd:d3:6f:c8:b5:22:d6:30:5c:82:3c:
2b:6a:8a:6d:82:92:df:5f:df:28:e3:af:0b:3f:28:
87:15:5c:2d:52:69:11:95:1f:50:80:0c:ac:43:31:
8a:81:08:fd:cd:cd:89:7c:d3:12:50:ad:9b:44:fb:
b9:c8:13:bd:0e:2d:f9:48:e6:1b:2c:41:a3:02:32:
60:af:ce:ab:c3:a5:48:46:a7:7e:bb:a8:d5:29:77:
9a:6c:10:d7:61:3e:45:da:bf:0b:34:df:63:a1:32:
c4:97:43:9e:8a:21:a6:8a:4b:3c:b4:6a:25:f9:9a:
67:6c:22:15:9e:02:95:71:f2:a7:28:52:45:e5:5d:
3a:11:f5:33:2b:a2:3e:25:04:c8:5a:b9:14:b3:56:
f0:4e:c4:06:9b:46:28:30:3c:93:50:4d:2a:e8:2f:
15:c2:94:80:eb:43:e3:4a:33:7c:08:95:5f:ed:a1:
08:75:58:1b:04:ea:16:9f:03:8f:67:60:70:e5:f7:
e0:44:cd:52:d0:99:f4:90:c7:4a:04:12:99:35:a2:
85:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2A:2B:F6:70:39:49:3B:5D:78:D0:0F:27:81:05:D9:48:48:50:D6
X509v3 Authority Key Identifier:
keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/9Cor9nA5STtdeNAPJ4EF2UhIUNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9600::/29
Signature Algorithm: sha256WithRSAEncryption
94:1a:d3:9c:6b:1e:72:6f:c8:26:0e:87:7d:ff:b8:5c:40:4d:
d8:37:a0:b0:4f:7d:d1:9b:a1:42:9b:0b:bd:42:2b:40:bc:ca:
bc:8d:84:10:da:c3:fb:41:c6:3e:5c:9d:e6:85:b1:37:f5:55:
41:00:95:4d:aa:4f:5d:56:4d:0a:5d:be:c8:8f:f3:21:67:7f:
5c:ca:22:df:54:54:5c:b9:c2:e6:6b:2d:4a:b8:af:50:1c:2c:
f7:02:21:0e:93:cc:26:f5:d5:70:38:59:4d:89:b7:dc:16:7e:
a3:60:76:45:5d:ff:78:45:f8:5c:7a:8b:41:f2:60:c7:11:b4:
76:cf:a5:50:53:18:33:34:a3:b6:c3:6f:51:11:04:5f:e7:a3:
93:af:0b:96:2b:43:4d:57:e8:37:ee:1e:d5:f1:bf:2c:ca:42:
a6:f1:32:87:70:6f:38:0b:e1:eb:c6:dc:88:ce:32:19:4f:61:
76:1c:99:72:e6:b5:88:8c:32:88:5a:0c:3d:6b:ee:31:20:cb:
1c:b6:42:fc:af:7b:0a:13:e3:52:04:46:a5:28:5d:e7:8e:7d:
34:cf:5b:3a:f7:63:a8:d8:9f:a1:0a:3c:06:47:2d:9d:50:58:
46:ef:a9:33:c1:21:69:98:7b:81:8c:45:c4:a0:dc:13:c2:ce:
7a:d1:6e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:43 2025 by rpki-client