Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/wfeH5shQb9p8-APifaQwZCuXjuw.roa
File: wfeH5shQb9p8-APifaQwZCuXjuw.roa (raw, json)
Hash identifier: i3m8mYv5PGE+aCaz85jAgzkj3ipmT/iJy2vmh07ZehU=
Subject key identifier: C1:F7:87:E6:C8:50:6F:DA:7C:F8:03:E2:7D:A4:30:64:2B:97:8E:EC
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 0194206805A17DFCD42BD1110EBB66BF94EE
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/wfeH5shQb9p8-APifaQwZCuXjuw.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212027
IP address blocks: 2a14:1c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:05:a1:7d:fc:d4:2b:d1:11:0e:bb:66:bf:94:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1f787e6c8506fda7cf803e27da430642b978eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8f:b8:cd:fa:49:c5:53:fe:82:ef:b8:84:0b:
c3:fa:0d:54:51:52:86:af:60:85:b8:8d:6b:90:f1:
67:3c:08:bc:a2:f0:1b:3a:27:ae:1c:f0:0d:3c:ec:
78:9f:f3:d3:9c:4b:2d:f5:ba:3b:95:34:1f:f0:59:
2c:22:97:9e:b1:3f:fa:fa:c5:ba:cc:94:cf:a4:a8:
26:fe:da:27:ff:4c:32:8f:b5:39:2e:e3:07:f8:d8:
ba:59:52:93:84:ea:f9:40:f5:17:af:9d:79:37:48:
1c:8a:78:eb:a7:44:8c:69:45:f5:70:f1:01:53:c2:
47:53:cb:71:8b:77:ca:b3:57:7b:2d:a4:02:21:0d:
2d:40:2d:46:59:42:12:5d:cc:b4:4b:44:47:8f:e3:
b1:d1:4c:af:3c:c1:36:41:f4:05:af:19:1f:91:c6:
03:0a:93:b7:a2:9f:37:cc:6a:13:a8:57:28:6d:a2:
7a:54:b1:f4:ba:f2:f3:9b:c3:24:1c:42:5c:d1:ab:
92:26:53:e2:e6:8e:38:92:f0:2c:88:b7:21:b0:6a:
ad:19:da:ae:6e:ad:8e:67:5b:51:fd:60:95:79:64:
a1:21:59:33:61:5d:c8:64:25:59:43:d9:69:bc:90:
66:0b:2b:40:43:77:17:10:4d:5d:44:5f:6f:f4:91:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F7:87:E6:C8:50:6F:DA:7C:F8:03:E2:7D:A4:30:64:2B:97:8E:EC
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/wfeH5shQb9p8-APifaQwZCuXjuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
88:bb:af:4b:14:87:41:ee:98:96:30:fe:fb:b4:f9:17:b8:44:
cd:63:1d:26:e6:c2:ab:dc:a2:8f:d3:96:43:85:30:6a:9c:d6:
90:5d:f0:39:06:b0:65:78:49:50:a8:2c:70:91:68:49:b6:4f:
cb:e8:8b:b1:28:98:94:85:de:d1:5c:10:79:e5:b1:8a:3d:b4:
3b:e5:82:1a:05:12:ff:2a:77:c6:a6:ba:93:e7:87:de:80:de:
6b:c0:2a:bf:f5:f7:d9:56:b3:38:04:51:e6:16:86:15:d5:ab:
85:ee:32:59:7b:09:02:96:95:de:e3:94:1b:98:9a:7c:a8:94:
64:01:07:ae:b1:ba:00:42:c2:0b:3f:49:52:48:6b:55:ba:3c:
94:4f:dd:7f:f0:a5:66:97:9d:76:28:74:90:c2:bc:75:ec:95:
58:4d:fb:4a:f3:9d:fd:de:96:e7:9a:e3:44:f1:5d:91:da:21:
9a:b0:63:2c:18:f9:e5:a8:a9:83:1d:a9:9b:ec:1a:80:f3:56:
f0:aa:27:0f:7b:bf:f8:f4:2e:0b:b6:17:f0:b0:cf:f8:46:77:
c6:8e:68:42:cc:8a:79:83:84:06:50:54:d4:3f:ae:87:cf:15:
cf:b0:41:3c:c9:9c:df:94:20:d6:4f:b8:1d:5b:68:23:0d:0e:
6a:ff:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:52:23 2025 by rpki-client