Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/pmkxyhZ2loC4W11pXJs2b9z9EIA.roa
File: pmkxyhZ2loC4W11pXJs2b9z9EIA.roa (raw, json)
Hash identifier: 9/nVFjbY/ge5Clzjp1ly9o+JbYhqZ2wFZvU3KkgL2vA=
Subject key identifier: A6:69:31:CA:16:76:96:80:B8:5B:5D:69:5C:9B:36:6F:DC:FD:10:80
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 019457848CF27E05EF3A68855458968EA680
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/pmkxyhZ2loC4W11pXJs2b9z9EIA.roa
Signing time: Sat 11 Jan 2025 22:38:12 +0000
ROA not before: Sat 11 Jan 2025 22:38:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215310
IP address blocks: 2a13:a704::/31 maxlen: 31
2a13:da00::/29 maxlen: 29
2a13:e400::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:57:84:8c:f2:7e:05:ef:3a:68:85:54:58:96:8e:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 11 22:38:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a66931ca16769680b85b5d695c9b366fdcfd1080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:93:68:ca:bc:28:09:ad:bb:06:6f:59:a5:a3:
92:e7:9c:7d:ce:10:4e:29:0d:f7:ce:0e:a1:df:76:
1f:f5:0b:ce:44:32:48:b0:da:8b:17:e8:37:65:dc:
29:7a:d4:3b:0f:4e:90:50:ac:dd:2f:47:a1:bc:ba:
89:95:c8:39:10:1a:68:7c:f0:4d:03:c0:07:02:9f:
d5:32:a3:50:23:18:00:2d:9c:c9:15:dd:9d:12:48:
50:ad:45:ff:77:b2:61:f5:e6:ab:57:51:16:d3:40:
d9:a5:e9:15:24:bf:e8:5c:5e:24:bc:d9:59:f1:44:
04:04:1f:c6:f0:39:4d:3a:90:c2:b8:d5:75:4c:9e:
f4:15:09:38:53:79:09:71:c9:99:73:32:98:73:db:
57:5e:11:49:c7:f6:9d:fc:48:00:47:35:73:7c:8d:
be:c9:4f:30:29:aa:9b:c3:90:71:d4:b7:09:3e:1e:
3c:94:93:28:e9:e3:8f:ea:2f:be:0e:e9:9b:db:8e:
cc:52:3d:62:cc:04:bd:c9:f4:be:16:52:84:bf:6a:
47:07:bc:db:8c:0b:13:52:00:9f:66:ef:5e:6b:6a:
f8:52:d8:61:4d:f5:f4:ba:ff:89:97:38:60:61:1a:
56:ee:f2:ac:c8:8f:3e:69:9d:51:77:c5:7c:09:36:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:69:31:CA:16:76:96:80:B8:5B:5D:69:5C:9B:36:6F:DC:FD:10:80
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/pmkxyhZ2loC4W11pXJs2b9z9EIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a704::/31
2a13:da00::/29
2a13:e400::/29
Signature Algorithm: sha256WithRSAEncryption
47:6b:1a:40:bc:91:a3:0c:b3:7b:55:e4:29:13:b1:57:73:46:
65:dc:8b:6a:b7:35:6b:1f:13:c6:5e:8f:15:cb:c1:7d:65:6d:
9f:5a:71:db:4d:c2:74:f2:5d:4b:4c:2f:aa:cf:97:58:2c:d2:
ba:76:32:f2:5d:bc:1d:c2:c2:ce:c1:a9:3a:c5:f9:6a:5a:42:
10:41:cf:02:d0:2d:d8:06:7d:40:a4:94:cb:9d:2b:15:cf:41:
88:25:8d:05:ef:0e:43:39:a7:18:dd:db:ab:2d:11:42:e4:20:
9b:ad:25:1c:63:b5:23:eb:a8:b6:ca:66:f7:3d:cf:f2:62:ec:
bc:97:24:2d:83:08:47:f2:84:15:2e:52:ae:1a:43:ef:fb:44:
9b:c6:d7:cc:6e:3e:83:aa:f7:88:80:13:f3:2e:8f:b3:37:db:
5d:6f:f5:4f:4c:a0:84:37:7d:1e:46:39:03:0e:23:e6:8c:2f:
72:f8:88:ad:62:60:9e:38:c8:f5:fe:bc:68:2d:73:a4:dc:b1:
76:44:eb:1c:2f:5d:b1:17:b3:84:db:d7:10:b4:4f:3e:a0:d5:
f6:26:ba:a3:ef:ed:e4:81:ca:cf:bd:e1:2b:0d:13:d7:1a:77:
43:64:90:dd:61:02:41:9f:d1:c5:3c:c9:11:d9:00:28:0a:12:
20:26:20:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:02:32 2025 by rpki-client on console.sobornost.net