Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/TU-4VsvBO_Mi32pl3rXixXJlJbA.roa
File: TU-4VsvBO_Mi32pl3rXixXJlJbA.roa (raw, json)
Hash identifier: azHA5q2mK/usAhSHbrX2N2dhHwwP/yuBFEi98W+lDz0=
Subject key identifier: 4D:4F:B8:56:CB:C1:3B:F3:22:DF:6A:65:DE:B5:E2:C5:72:65:25:B0
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 019457848D973554BA7B39C332B52C9DF94E
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/TU-4VsvBO_Mi32pl3rXixXJlJbA.roa
Signing time: Sat 11 Jan 2025 22:38:12 +0000
ROA not before: Sat 11 Jan 2025 22:38:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215462
IP address blocks: 2a13:a702::/31 maxlen: 31
2a13:da00::/29 maxlen: 29
2a13:e400::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:57:84:8d:97:35:54:ba:7b:39:c3:32:b5:2c:9d:f9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 11 22:38:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d4fb856cbc13bf322df6a65deb5e2c5726525b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5e:a2:3c:f2:be:43:a4:03:7e:cf:08:4e:1b:
57:62:e1:2a:21:9e:54:11:b6:5a:97:5d:a4:b7:55:
4c:da:d2:c0:48:01:5a:24:a3:ef:9b:d3:68:a7:3b:
82:87:21:27:d0:67:d9:ed:a4:1e:f1:6f:61:f5:44:
d7:d6:b0:c8:26:4a:6f:d9:66:e6:05:7f:ee:7a:41:
b6:59:bc:db:c2:94:76:da:4f:ef:d8:5f:2d:3b:03:
09:98:21:b8:32:a4:50:90:c3:ec:fe:28:f2:16:70:
9b:50:78:4e:ed:dd:68:41:b8:94:95:7b:5f:e6:af:
54:47:fd:a1:3b:4e:78:6d:a8:c5:ca:04:fe:1b:19:
8d:1c:15:b5:e0:33:df:15:e9:48:d7:f2:59:21:91:
1f:79:d8:0f:91:c1:74:9f:17:55:c8:77:f4:85:09:
6f:8e:1f:f5:47:26:6e:96:fc:c2:af:ff:62:f2:ac:
ab:ee:96:f8:ab:8c:cf:0b:39:54:d2:ec:de:00:c7:
4b:a0:7b:a8:15:a7:72:07:70:80:00:66:b0:04:b5:
0c:d6:5b:06:eb:ab:28:53:2e:f3:26:be:5e:cd:a6:
69:bb:a7:4c:cd:f4:f9:06:49:f7:fb:e1:c3:3f:02:
c8:b2:28:bb:04:10:e9:d8:e2:03:4a:18:48:c2:bd:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4F:B8:56:CB:C1:3B:F3:22:DF:6A:65:DE:B5:E2:C5:72:65:25:B0
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/TU-4VsvBO_Mi32pl3rXixXJlJbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a702::/31
2a13:da00::/29
2a13:e400::/29
Signature Algorithm: sha256WithRSAEncryption
ae:2e:f1:2b:4b:de:2d:30:d7:1d:3e:76:97:a3:94:46:82:f3:
3f:53:c1:0b:8e:33:62:36:72:a9:16:80:77:4f:fd:13:ad:7d:
c4:8d:d4:36:02:20:c0:10:5f:e3:52:19:0b:5c:da:ac:5f:85:
ca:6b:94:7c:87:40:fa:7e:18:bd:cd:94:ea:da:55:36:9f:13:
a9:2a:df:55:ac:78:44:4a:d4:d6:78:dc:21:0e:19:cb:05:3c:
81:87:32:5f:1f:2e:34:5e:b3:78:90:f1:84:0a:43:c2:60:96:
b8:f7:f9:0f:94:be:01:2b:9f:5b:d4:e1:94:de:c7:79:6e:97:
d6:25:d0:a3:40:2e:d3:19:6d:32:16:a9:98:6a:a3:ef:e0:c8:
c8:90:59:f4:24:2b:d3:80:cb:32:1e:67:23:b6:ef:41:56:f7:
d1:99:89:a6:ec:33:84:ab:5a:ea:08:0a:6f:ab:0e:d2:0f:47:
a4:d6:89:f0:67:59:b2:21:6e:3a:43:ec:80:16:6b:12:34:01:
52:d3:c2:d0:57:42:9b:42:02:ef:ff:da:71:0d:f7:76:00:54:
7e:a3:ad:4b:b5:72:c1:c8:cb:c4:33:54:dc:ee:ec:cb:52:d1:
43:80:45:48:e8:b9:4c:9f:f0:1a:83:0c:e7:11:6f:7a:42:9f:
38:e7:70:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:02:32 2025 by rpki-client on console.sobornost.net