Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/rwfPHgI2-DSJUQ0hnplUUUwXZYA.roa
File: rwfPHgI2-DSJUQ0hnplUUUwXZYA.roa (raw, json)
Hash identifier: 3rwqzvqdxseMkdjkkd+tuvlSe+1629JshgefbvDP6/Q=
Subject key identifier: AF:07:CF:1E:02:36:F8:34:89:51:0D:21:9E:99:54:51:4C:17:65:80
Certificate issuer: /CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Certificate serial: 0194228DDFFBD5073A78E252AFBB69F9A6E5
Authority key identifier: A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/rwfPHgI2-DSJUQ0hnplUUUwXZYA.roa
Signing time: Wed 01 Jan 2025 15:48:30 +0000
ROA not before: Wed 01 Jan 2025 15:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216219
IP address blocks: 2a13:f740::/48 maxlen: 48
2a13:f740:1::/48 maxlen: 48
2a13:f740:2::/48 maxlen: 48
2a13:f740:3::/48 maxlen: 48
2a13:f740:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:df:fb:d5:07:3a:78:e2:52:af:bb:69:f9:a6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Validity
Not Before: Jan 1 15:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af07cf1e0236f83489510d219e9954514c176580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:67:24:55:69:5c:ec:42:52:d5:34:ae:d4:d0:
56:85:a1:1e:1f:60:50:26:a9:6b:9a:c5:b7:10:14:
02:ce:d9:cb:d0:ba:76:8a:ef:c3:54:2d:db:1b:4d:
52:4f:64:f1:55:14:3b:c6:c8:ec:6e:93:e4:08:9f:
94:2f:2b:3c:98:87:74:70:17:89:4e:51:c3:1b:f6:
87:7e:58:6b:34:df:32:d5:52:a3:66:ca:98:df:97:
66:4f:13:e4:22:35:7a:11:a7:29:6b:f2:04:7e:80:
ad:c9:b7:87:aa:76:39:fe:9b:86:87:de:b3:66:2a:
05:89:d3:85:52:6a:ff:dd:73:59:15:be:2a:29:01:
4a:c4:a6:fd:04:81:bc:bc:af:44:1e:a7:a9:c2:8f:
6c:2f:eb:23:04:7f:71:e7:d4:4e:55:eb:13:a5:5e:
8b:11:18:f7:5c:a3:f4:80:01:79:48:f2:11:35:63:
bc:a1:af:7b:03:3b:75:3b:c3:ba:bf:77:66:07:f1:
c0:9c:4d:e9:e3:51:78:31:71:a0:fa:63:b5:a4:8a:
f1:6f:10:76:c4:56:ff:a3:df:45:51:3c:63:60:4c:
2c:33:27:fe:4a:8e:a2:75:56:82:61:d1:e7:4e:d0:
66:07:42:a5:50:f3:28:ff:7b:c0:41:99:bd:c9:8c:
61:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:07:CF:1E:02:36:F8:34:89:51:0D:21:9E:99:54:51:4C:17:65:80
X509v3 Authority Key Identifier:
keyid:A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/rwfPHgI2-DSJUQ0hnplUUUwXZYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:f740::-2a13:f740:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1e:4e:9b:f1:1e:8f:3c:8e:cb:77:06:e7:74:58:b7:5f:aa:72:
b9:2e:f3:7d:10:34:ce:97:60:b6:06:35:dd:d9:b8:30:88:a8:
62:80:56:04:14:80:26:37:7f:85:f3:03:34:d9:87:44:92:43:
3a:5d:dd:92:6b:db:6e:69:30:bb:47:e9:50:dd:f0:0e:3b:cf:
bb:4e:9e:35:3a:f0:91:39:78:eb:c9:c9:ba:77:34:32:b8:d1:
bd:9b:14:37:a1:4b:fd:d2:b3:d2:64:39:34:75:db:8a:61:fb:
51:45:8a:8a:40:b7:6c:0c:86:a5:78:c2:e2:95:91:46:e1:3c:
0f:2b:b4:90:b7:dc:ad:df:81:63:1e:41:e8:5a:7a:06:17:ca:
e5:f7:d9:f3:34:53:17:c5:79:e5:41:7b:05:72:b1:28:a3:dc:
63:90:ba:4e:2f:4b:d8:71:bf:25:09:23:92:6b:ac:45:a1:14:
8d:f1:a0:97:35:14:cc:ad:d1:58:f5:37:0e:c2:88:18:88:d0:
61:6d:b9:60:5a:f0:c4:a8:7b:54:ea:5b:6a:03:95:7a:53:c0:
0e:7f:31:5c:b3:06:5a:06:cb:d4:e2:85:bf:7c:06:e9:cb:38:
75:c4:98:f3:9b:d3:5d:7e:a4:78:73:5f:aa:3a:1d:32:6d:03:
52:2f:fc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:17:03 2025 by rpki-client on console.sobornost.net