Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/1sLqq7zmfuSrtDrRa_lotySUMLE.roa
File: 1sLqq7zmfuSrtDrRa_lotySUMLE.roa (raw, json)
Hash identifier: EUSykeio3UByPxKvUwzrOqb4sSP9VgYc493bpj9cmHE=
Subject key identifier: D6:C2:EA:AB:BC:E6:7E:E4:AB:B4:3A:D1:6B:F9:68:B7:24:94:30:B1
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 019539EF5BC66D81D929B2DA457679E2F9B4
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/1sLqq7zmfuSrtDrRa_lotySUMLE.roa
Signing time: Mon 24 Feb 2025 21:49:02 +0000
ROA not before: Mon 24 Feb 2025 21:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 2a13:b900::/32 maxlen: 32
2a13:b902::/32 maxlen: 32
2a13:b904::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:39:ef:5b:c6:6d:81:d9:29:b2:da:45:76:79:e2:f9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Feb 24 21:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6c2eaabbce67ee4abb43ad16bf968b7249430b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:1e:fb:8a:41:29:c7:71:f0:5f:d9:5a:8b:
84:06:84:18:de:15:ec:1d:28:74:0c:0d:08:91:42:
36:9d:f6:44:e9:1a:b4:1f:a3:07:e3:2f:b1:69:f4:
73:0e:5e:2a:ff:14:e2:8d:92:88:fc:d1:60:99:11:
a2:1d:9a:98:bb:92:8c:2c:b0:d2:d6:b7:53:84:34:
2e:a0:bb:86:79:44:d8:38:f2:db:f0:f0:8b:75:80:
65:19:4d:84:02:2f:d8:fa:ff:20:72:2f:54:b1:69:
43:86:8f:60:8a:0c:81:36:33:89:b9:8b:9d:eb:89:
d3:6a:69:74:de:c4:0e:de:ee:e9:8f:e8:93:1a:00:
3f:3e:fd:9b:52:b9:2b:6b:7b:bc:43:de:70:80:ae:
46:e0:c0:2a:e9:f6:e1:aa:2a:13:e3:33:7a:c2:9c:
18:ef:6f:67:9d:e6:ae:d0:e1:66:a6:58:d2:58:64:
a1:b8:17:dc:e4:39:c4:b5:f8:79:85:c7:6c:34:3c:
88:a7:e9:be:19:db:fe:78:5d:c4:e0:31:ab:cc:33:
7e:26:9f:dd:75:3c:58:7e:ca:c7:23:01:07:df:7f:
e6:16:d5:a8:3b:a1:a9:42:37:c7:7a:90:e9:8a:c7:
78:d0:8b:66:4d:ad:e6:1e:83:fe:40:c6:5f:68:a3:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C2:EA:AB:BC:E6:7E:E4:AB:B4:3A:D1:6B:F9:68:B7:24:94:30:B1
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/1sLqq7zmfuSrtDrRa_lotySUMLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b900::/32
2a13:b902::/32
2a13:b904::/32
Signature Algorithm: sha256WithRSAEncryption
ca:12:5e:b9:65:70:06:d3:88:cf:c4:e8:fb:63:ad:4a:35:74:
25:da:35:ed:5b:7d:53:e8:71:2c:72:34:85:cb:78:25:cc:9c:
d4:2a:72:35:27:4e:b8:95:fb:b3:c7:5a:6d:51:46:27:ff:df:
6a:a3:6e:e8:15:7f:26:bf:bc:c5:25:ef:d8:6e:1d:af:a9:d2:
1b:46:14:36:30:8d:89:b0:e5:0f:ce:06:a6:12:dc:d5:7e:cc:
34:9e:e9:ec:a7:fe:96:a5:5b:cd:1a:b9:86:11:1e:9a:e4:8d:
91:d3:d0:38:f4:d5:1a:b1:a3:2b:c9:a7:d7:23:20:95:5f:62:
9e:7a:0f:95:79:4f:be:85:cb:19:be:d2:aa:fc:3f:86:35:e1:
a6:ce:e0:09:81:a3:63:09:64:2b:fe:d2:dd:06:a6:f8:39:a4:
54:22:24:33:8f:ed:36:41:2a:7a:0e:fc:74:98:27:ab:88:97:
b6:f9:46:44:4a:49:b7:4b:59:66:20:32:f2:e0:b3:1b:33:8f:
9a:50:58:e9:0f:d8:99:e5:8c:d2:15:5b:0e:e6:4b:fb:aa:89:
56:01:48:de:be:ac:38:9d:a8:81:73:0b:64:2d:70:3f:c1:f6:
0d:96:96:da:98:04:38:4d:d6:7b:75:84:58:10:35:b5:06:c2:
dc:6a:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:47:36 2025 by rpki-client on console.sobornost.net