Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/BEs4jr5ihG6iRqRU5cUSDL5kRog.roa
File: BEs4jr5ihG6iRqRU5cUSDL5kRog.roa (raw, json)
Hash identifier: cWYPPJkN2Kgx8P4ZXPtPBFDG5DzBZcOtlwsZBu+Q2cQ=
Subject key identifier: 04:4B:38:8E:BE:62:84:6E:A2:46:A4:54:E5:C5:12:0C:BE:64:46:88
Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial: 0194266AE66055B2E629F7D4BA51228CA3C3
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/BEs4jr5ihG6iRqRU5cUSDL5kRog.roa
Signing time: Thu 02 Jan 2025 09:48:47 +0000
ROA not before: Thu 02 Jan 2025 09:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212027
IP address blocks: 2a14:1740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:e6:60:55:b2:e6:29:f7:d4:ba:51:22:8c:a3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
Validity
Not Before: Jan 2 09:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=044b388ebe62846ea246a454e5c5120cbe644688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:b4:26:5f:d2:62:c8:08:50:29:6d:1e:21:
e9:0d:6d:c8:77:7b:ea:ca:2c:8d:a7:27:ae:2e:07:
6a:6f:24:db:00:0c:8e:a8:a2:c0:ef:04:df:8b:6a:
67:e6:8a:45:db:a3:99:fa:8c:e1:1c:65:b2:85:2b:
b2:b3:92:d9:fb:d6:5d:ec:81:9b:9b:6d:14:ae:84:
36:49:80:20:14:24:5f:04:6b:dc:ba:a9:5c:19:f2:
a3:dd:3c:ad:ab:1b:4e:4a:78:3a:f7:c2:b7:49:ee:
b4:45:31:42:64:67:71:5d:1d:31:78:04:08:fb:f8:
4c:07:c4:90:01:03:06:de:8b:af:de:70:88:65:8d:
dc:24:8b:cd:bb:b8:a5:f5:15:f8:d0:3b:3c:cc:bd:
94:d3:a1:ef:75:5e:87:49:9d:7c:99:a6:9c:e3:b7:
0d:37:41:2e:58:8c:6f:07:dc:2a:e6:f2:6a:12:31:
5f:c6:e1:c0:4f:23:5f:31:d7:d3:41:cc:96:7f:b6:
85:07:45:9f:82:d5:54:63:96:f5:a6:64:d0:2c:30:
e2:5d:bd:d4:61:cb:e6:16:88:9d:b9:89:63:67:77:
0c:99:5b:8a:c3:ac:da:30:7d:dd:60:04:d4:df:0d:
30:bd:be:6b:ed:1f:8f:b1:6e:b5:09:d4:db:56:38:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4B:38:8E:BE:62:84:6E:A2:46:A4:54:E5:C5:12:0C:BE:64:46:88
X509v3 Authority Key Identifier:
keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/BEs4jr5ihG6iRqRU5cUSDL5kRog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1740::/29
Signature Algorithm: sha256WithRSAEncryption
94:33:1a:88:17:76:b4:95:5f:3b:af:bf:91:f6:ee:17:f3:40:
9e:4f:c3:d1:be:5a:64:d0:bd:4a:87:e1:7f:0d:91:5c:48:a1:
e7:67:6b:23:53:69:f1:f9:16:f8:ed:dc:ee:77:7a:e1:7d:00:
ed:dd:77:c0:74:d1:17:8b:63:06:57:78:45:34:d1:b3:bf:a5:
b1:e4:89:25:f3:6f:a0:9b:2d:0a:43:f8:bf:3b:ec:c6:c8:b7:
d5:f9:25:37:bd:c7:15:db:bc:5b:50:b4:09:01:a7:f5:bc:0d:
85:2b:4a:63:d4:c4:b6:81:77:aa:20:c1:95:1e:11:cf:31:57:
2a:96:60:38:a6:fe:34:4b:56:d7:58:9f:40:db:35:0b:2b:d6:
eb:6c:88:53:d7:37:67:1f:9f:d9:00:d5:9b:fe:dd:e8:ee:ec:
3c:7d:70:9a:9f:f5:6f:ad:84:a1:36:01:81:4f:e0:17:51:33:
04:6f:cf:86:1e:57:04:5d:60:9e:29:3e:e0:b6:8b:4e:8e:bf:
99:e1:b0:dc:89:15:a1:a8:d8:e7:92:f7:f2:a0:94:29:bc:97:
f2:2d:0f:20:6b:11:fe:04:2a:29:40:6b:69:ce:56:0a:bb:14:
be:0d:02:12:c8:fd:51:05:19:1c:45:58:d4:03:da:0c:ea:6b:
e5:0c:56:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:34 2025 by rpki-client