Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tUWVc7YQhaiKLRx4iA3ATcy6cYw.roa
File: tUWVc7YQhaiKLRx4iA3ATcy6cYw.roa (raw, json)
Hash identifier: npccvjOj27DKdsXpi9Y0SLzBXKOZIsVSTQjdreiFWNI=
Subject key identifier: B5:45:95:73:B6:10:85:A8:8A:2D:1C:78:88:0D:C0:4D:CC:BA:71:8C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194479A8F20B7B9BBCABA0A08A72C6BA359
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tUWVc7YQhaiKLRx4iA3ATcy6cYw.roa
Signing time: Wed 08 Jan 2025 20:28:19 +0000
ROA not before: Wed 08 Jan 2025 20:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36832
IP address blocks: 2a13:c900:fdff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:47:9a:8f:20:b7:b9:bb:ca:ba:0a:08:a7:2c:6b:a3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 8 20:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5459573b61085a88a2d1c78880dc04dccba718c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:ec:3e:eb:3f:c4:d1:11:af:f1:16:7c:90:
9a:19:43:07:11:e5:2a:6a:dd:c1:fc:4c:c9:36:e0:
e2:5b:96:0f:59:aa:91:44:cd:c9:97:4f:85:d9:c0:
1c:41:70:ee:53:01:de:c2:85:6f:84:b3:51:63:e0:
12:de:62:f5:74:b7:47:6a:28:c4:3d:b2:7e:a7:10:
88:d7:f2:f7:37:7b:c2:3c:ac:70:f5:b8:ee:cd:2a:
bd:77:d4:37:94:d2:79:be:6f:b4:f7:70:ef:17:ab:
8d:60:2b:03:1b:6b:60:13:20:ba:2b:6f:41:bd:a4:
f5:7f:08:dd:8b:1f:31:a5:64:ab:e0:98:08:a1:d0:
5e:3f:59:f7:50:fa:53:37:f4:d2:91:d1:8a:fc:b5:
61:c0:a8:ee:b7:25:2f:4c:86:ea:8b:ae:00:a8:51:
61:a5:14:7b:6a:77:c5:c1:f0:9e:33:8c:c3:21:1d:
38:c8:e0:bd:9c:4e:a0:95:fc:78:af:bc:36:d7:77:
ca:af:ed:4d:1c:b3:cc:0d:d3:fa:7d:99:6f:5e:27:
d2:15:f3:e5:d7:25:3c:a0:96:db:98:8d:d6:d6:08:
20:3f:c2:6d:3f:f6:f6:fd:c0:d9:31:dd:f6:f1:3e:
37:00:df:ff:e5:9a:b7:68:1f:a0:2d:6c:05:3b:2d:
29:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:45:95:73:B6:10:85:A8:8A:2D:1C:78:88:0D:C0:4D:CC:BA:71:8C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tUWVc7YQhaiKLRx4iA3ATcy6cYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c900:fdff::/48
Signature Algorithm: sha256WithRSAEncryption
88:45:79:ee:2f:e4:ae:50:33:50:77:04:1e:99:5e:66:94:b5:
66:62:38:6c:a2:ad:70:fb:99:54:0a:c9:f0:f5:c0:40:6c:63:
60:0b:4b:43:3f:ee:09:ef:e7:d7:fd:3b:50:f9:46:a0:e1:03:
53:b4:54:65:6b:99:5a:8b:0b:66:9a:3c:77:97:4f:87:cd:94:
26:c5:24:27:ee:f0:c5:6d:9d:49:b7:c9:7a:e2:1d:56:f6:7f:
60:70:13:d2:3c:3a:79:68:e4:f2:cf:84:f4:ab:a2:73:a7:8a:
b4:de:72:b2:4e:2c:ac:de:9f:02:e3:9d:8c:93:e9:fd:04:0d:
3a:bd:3f:51:3d:72:90:5b:26:7d:5d:6c:91:aa:b0:58:2b:8a:
9b:23:31:2a:28:2b:95:45:82:c0:78:51:c7:92:52:31:7e:d2:
a2:ac:58:9d:d9:84:a4:64:16:09:54:5e:90:25:3e:59:79:09:
37:36:23:f2:50:b9:ab:f6:92:a0:b7:7b:87:7d:86:2f:69:18:
59:66:7d:dc:45:05:a1:9d:a6:da:d0:52:51:3b:1d:43:dd:8f:
a2:85:9c:4e:e7:13:36:87:88:64:23:bd:20:02:b7:73:af:ef:
2c:14:5a:5d:70:e5:f8:ef:00:8a:d3:a9:da:c1:7a:f4:cd:bf:
84:a6:35:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:24:07 2025 by rpki-client