Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/f_RmFPEU1O2n7MMy6ki3eo7W9s8.roa
File: f_RmFPEU1O2n7MMy6ki3eo7W9s8.roa (raw, json)
Hash identifier: q2CQAvcAtco0XR3u2eZv/Ddzu9JjgCP++LkCVXGQyT0=
Subject key identifier: 7F:F4:66:14:F1:14:D4:ED:A7:EC:C3:32:EA:48:B7:7A:8E:D6:F6:CF
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0195BF318AE6A85BC6650AB9378D7C1EBA21
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/f_RmFPEU1O2n7MMy6ki3eo7W9s8.roa
Signing time: Sat 22 Mar 2025 18:50:49 +0000
ROA not before: Sat 22 Mar 2025 18:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205745
IP address blocks: 2a13:b4c0::/29 maxlen: 29
2a14:1101::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bf:31:8a:e6:a8:5b:c6:65:0a:b9:37:8d:7c:1e:ba:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 22 18:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ff46614f114d4eda7ecc332ea48b77a8ed6f6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:70:4a:b7:1d:f7:98:db:6e:7e:fc:0a:e4:
0e:e2:f8:b4:c7:7f:c6:b2:7b:81:b4:57:47:9f:19:
03:64:08:3b:7c:10:51:30:d5:64:bc:08:a1:66:51:
bd:17:57:3d:30:63:53:47:6c:fe:05:ce:05:4a:3f:
a6:26:1e:60:40:aa:69:9d:8f:72:1b:13:b2:4d:b0:
5a:29:c5:54:12:80:69:80:bf:a1:ab:f7:d4:9b:4c:
15:83:bb:7b:5d:f7:01:ce:2e:28:53:fe:93:71:5f:
ad:b8:cb:33:ac:14:72:30:bc:d2:a2:0c:d8:72:da:
d3:d3:db:27:bd:c7:9e:31:2b:e9:19:26:a1:08:30:
80:be:ac:f1:c8:af:7c:26:04:ba:ef:c9:16:d9:25:
b3:3c:70:cc:d6:d2:b0:0d:e9:2d:f5:f0:4e:95:d5:
9b:e4:20:b0:ab:c9:87:c1:d1:f5:aa:33:a2:36:c3:
61:0f:f3:ee:e3:11:0e:52:23:0c:5d:a7:1c:f3:60:
96:8f:9a:f3:c6:ad:4f:de:bd:13:a0:bd:ff:45:98:
e5:d8:f4:30:47:5a:ad:15:fb:26:2a:8f:f7:6d:d3:
ca:02:f4:02:2e:40:dd:1e:8a:d6:9c:77:9c:e4:ae:
9d:48:27:27:3e:a2:95:75:ff:25:c5:4d:04:ac:1b:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F4:66:14:F1:14:D4:ED:A7:EC:C3:32:EA:48:B7:7A:8E:D6:F6:CF
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/f_RmFPEU1O2n7MMy6ki3eo7W9s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b4c0::/29
2a14:1101::/33
Signature Algorithm: sha256WithRSAEncryption
43:98:70:71:7b:0a:55:06:93:4f:72:38:66:1e:42:80:10:64:
bd:86:28:f6:84:6f:80:0c:cb:bd:8a:42:3d:5a:e6:59:76:8b:
87:ac:68:fc:8a:88:6e:49:68:03:2c:89:65:ae:7b:df:55:9a:
64:03:c7:c4:9e:f8:fa:84:28:9c:3c:02:6d:cf:d2:d5:74:a1:
a8:5a:89:2e:ed:28:42:e9:19:e0:6e:6e:1e:31:7e:37:25:07:
43:d7:5e:91:d8:d6:c4:09:a0:56:a9:ea:de:ef:a2:90:c4:62:
29:7d:99:4a:b0:a0:49:e5:30:16:f8:af:7e:a0:2f:c9:3c:b9:
ff:fe:d1:4f:5e:14:56:7f:4e:aa:01:fc:91:5f:f0:80:d5:cd:
53:dc:7a:41:1b:43:3e:24:da:49:c1:bc:36:93:5e:ef:e5:fe:
ca:bd:31:99:ca:92:5e:ee:06:c5:e7:21:b1:e3:d6:b8:76:d7:
74:dd:3c:28:53:f1:6a:0d:cb:09:83:97:ea:a9:9f:c7:9e:95:
63:65:f1:f5:ea:11:51:05:3a:57:b9:e7:99:96:90:5e:2f:b4:
4b:64:c1:5a:e1:dc:cb:c5:63:4b:89:14:ff:27:b8:2c:6d:52:
5c:06:1f:d4:6d:03:95:ae:23:eb:62:6f:96:22:cc:c4:d9:3a:
e0:5e:a4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:06:21 2025 by rpki-client