Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/i14FMCCtmyNi7Q0Q8ZQ9tyY91As.roa
File: i14FMCCtmyNi7Q0Q8ZQ9tyY91As.roa (raw, json)
Hash identifier: lnF6bsP0n/QwtQ70N0z3Vrq3srYbi1zZZHLkg+ahEbw=
Subject key identifier: 8B:5E:05:30:20:AD:9B:23:62:ED:0D:10:F1:94:3D:B7:26:3D:D4:0B
Certificate issuer: /CN=c47a8f5e9491f61bd281925380a951cf7f40b2c6
Certificate serial: 019518D9D017910892A91C4D85D02AA1DDA1
Authority key identifier: C4:7A:8F:5E:94:91:F6:1B:D2:81:92:53:80:A9:51:CF:7F:40:B2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqPXpSR9hvSgZJTgKlRz39AssY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/i14FMCCtmyNi7Q0Q8ZQ9tyY91As.roa
Signing time: Tue 18 Feb 2025 11:38:02 +0000
ROA not before: Tue 18 Feb 2025 11:38:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28773
IP address blocks: 2a13:e780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:d9:d0:17:91:08:92:a9:1c:4d:85:d0:2a:a1:dd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c47a8f5e9491f61bd281925380a951cf7f40b2c6
Validity
Not Before: Feb 18 11:38:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b5e053020ad9b2362ed0d10f1943db7263dd40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:73:e1:40:5a:a9:27:f3:89:77:fb:0c:c9:
7a:0e:bf:d0:13:a3:88:80:9e:50:b6:06:52:11:ce:
d9:33:b8:b3:d5:a1:8f:71:e7:74:d5:5d:57:8a:8d:
a5:fb:c4:47:2b:dc:71:3c:2d:92:fd:13:a1:fa:44:
c1:78:bc:17:4a:eb:50:3d:aa:3e:96:8a:e0:e8:f8:
6f:f9:1b:18:69:2c:aa:da:c7:b0:54:c9:7a:99:ff:
ec:e8:74:5d:2e:ca:4c:19:92:28:bc:38:c9:45:90:
88:3c:8b:21:ea:f1:1a:ea:d4:16:c1:00:a4:66:a5:
14:0a:fb:38:3f:b0:a1:55:5f:72:aa:bd:af:86:a7:
cf:9e:0a:fb:5c:df:f3:9b:83:b4:27:cc:c0:36:c2:
be:40:66:f2:bc:40:1c:ea:1a:9c:c3:cd:2b:ce:7d:
d2:f5:4a:47:9d:9d:e1:6f:46:70:ba:8c:73:66:3a:
05:af:4d:c6:b1:79:67:e7:a2:85:4e:72:ed:3c:d9:
b8:bf:d9:32:6b:41:a9:bb:4a:9d:b9:2f:d6:88:aa:
3d:c0:8b:ad:28:fa:33:bd:aa:85:a9:e2:00:c2:52:
5e:ba:5f:99:d2:8e:90:f2:ef:33:a4:eb:ab:d3:5e:
da:36:ff:90:46:e7:97:34:ba:ca:d6:7f:b9:99:34:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5E:05:30:20:AD:9B:23:62:ED:0D:10:F1:94:3D:B7:26:3D:D4:0B
X509v3 Authority Key Identifier:
keyid:C4:7A:8F:5E:94:91:F6:1B:D2:81:92:53:80:A9:51:CF:7F:40:B2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqPXpSR9hvSgZJTgKlRz39AssY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/i14FMCCtmyNi7Q0Q8ZQ9tyY91As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ec5ce4-5893-4a0e-98c5-69be2acbed8e/1/xHqPXpSR9hvSgZJTgKlRz39AssY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e780::/29
Signature Algorithm: sha256WithRSAEncryption
21:d4:ff:66:9d:49:a4:0c:26:09:68:e9:b9:3c:0c:be:67:0c:
89:24:4f:13:81:90:db:29:c7:54:2b:f5:2e:fd:b4:ff:d1:f6:
41:87:f8:da:a0:fc:13:3b:75:09:a1:d6:f5:b0:91:7f:10:d5:
f2:14:b8:28:c4:8a:7c:30:f3:e3:9a:56:45:7b:01:9c:ed:3a:
0c:a3:5c:6c:cf:47:57:7c:1b:a5:10:48:28:28:93:87:39:39:
7c:85:55:8e:e6:fa:e2:36:d5:55:78:30:13:71:9d:48:d2:9d:
ec:27:c5:d8:32:a7:70:98:dc:99:69:5a:84:38:01:a3:14:46:
40:a3:79:2d:30:61:2b:ac:7c:54:3c:a7:53:99:f2:18:96:d8:
32:fc:df:e5:de:a5:67:c5:0a:e8:7e:1b:9a:18:d0:40:4f:89:
52:30:f8:8d:6f:e3:e9:29:76:e9:c9:12:1e:01:0a:af:54:90:
db:2e:90:66:c6:8a:4e:a1:a7:e5:24:2a:ba:c3:ab:48:b5:41:
50:73:fd:2e:9b:b9:3d:98:b0:01:d2:a5:1b:33:90:91:f2:2c:
61:9c:c1:0c:b9:4b:f9:00:82:a6:cc:2f:be:26:d0:5d:ca:f5:
b4:bb:a7:03:d8:56:e3:30:b4:74:f6:73:6a:23:0c:77:0f:d0:
59:47:74:3b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZUY2dAXkQiSqRxNhdAqod2hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0N2E4ZjVlOTQ5MWY2MWJkMjgxOTI1MzgwYTk1MWNmN2Y0
MGIyYzYwHhcNMjUwMjE4MTEzODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjVlMDUzMDIwYWQ5YjIzNjJlZDBkMTBmMTk0M2RiNzI2M2RkNDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri9z4UBaqSfziXf7DMl6Dr/QE6OI
gJ5QtgZSEc7ZM7iz1aGPced01V1Xio2l+8RHK9xxPC2S/ROh+kTBeLwXSutQPao+
lorg6Phv+RsYaSyq2sewVMl6mf/s6HRdLspMGZIovDjJRZCIPIsh6vEa6tQWwQCk
ZqUUCvs4P7ChVV9yqr2vhqfPngr7XN/zm4O0J8zANsK+QGbyvEAc6hqcw80rzn3S
9UpHnZ3hb0ZwuoxzZjoFr03GsXln56KFTnLtPNm4v9kya0Gpu0qduS/WiKo9wIut
KPozvaqFqeIAwlJeul+Z0o6Q8u8zpOur017aNv+QRueXNLrK1n+5mTTi2QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIteBTAgrZsjYu0NEPGUPbcmPdQLMB8GA1UdIwQY
MBaAFMR6j16UkfYb0oGSU4CpUc9/QLLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEhxUFhwU1I5aHZTZ1pKVGdLbFJ6MzlBc3NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lYzVjZTQtNTg5My00YTBlLTk4YzUt
NjliZTJhY2JlZDhlLzEvaTE0Rk1DQ3RteU5pN1EwUThaUTl0eVk5MUFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lYzVjZTQtNTg5My00YTBlLTk4YzUtNjliZTJhY2JlZDhl
LzEveEhxUFhwU1I5aHZTZ1pKVGdLbFJ6MzlBc3NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhPngDAN
BgkqhkiG9w0BAQsFAAOCAQEAIdT/Zp1JpAwmCWjpuTwMvmcMiSRPE4GQ2ynHVCv1
Lv20/9H2QYf42qD8Ezt1CaHW9bCRfxDV8hS4KMSKfDDz45pWRXsBnO06DKNcbM9H
V3wbpRBIKCiThzk5fIVVjub64jbVVXgwE3GdSNKd7CfF2DKncJjcmWlahDgBoxRG
QKN5LTBhK6x8VDynU5nyGJbYMvzf5d6lZ8UK6H4bmhjQQE+JUjD4jW/j6Sl26ckS
HgEKr1SQ2y6QZsaKTqGn5SQqusOrSLVBUHP9Lpu5PZiwAdKlGzOQkfIsYZzBDLlL
+QCCpswvvibQXcr1tLunA9hW4zC0dPZzaiMMdw/QWUd0Ow==
-----END CERTIFICATE-----
Generated at Thu May 15 15:29:59 2025 by rpki-client