Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/9Pm_asa_Vw3u27gaBRD7i8TL9EU.roa
File: 9Pm_asa_Vw3u27gaBRD7i8TL9EU.roa (raw, json)
Hash identifier: fYuTOl+DQOrzI8q7otm9pbe4I7lAFHKgzfWFOB4BuJE=
Subject key identifier: F4:F9:BF:6A:C6:BF:57:0D:EE:DB:B8:1A:05:10:FB:8B:C4:CB:F4:45
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01941F8C7190D782020278A1465ED8885338
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/9Pm_asa_Vw3u27gaBRD7i8TL9EU.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213800
IP address blocks: 2a14:67c1:40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:71:90:d7:82:02:02:78:a1:46:5e:d8:88:53:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4f9bf6ac6bf570deedbb81a0510fb8bc4cbf445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d5:e5:f7:b9:16:0c:fa:30:87:da:f6:a6:79:
7e:f0:dd:5c:9a:72:11:f0:b8:dd:b4:d7:fe:59:20:
60:d7:b8:5e:f8:54:c0:60:93:2c:f9:b7:71:fb:48:
ff:ad:7f:ac:de:e0:86:70:98:ba:61:bd:81:e2:da:
1e:36:40:50:1c:62:f3:9a:83:7f:11:af:bb:ed:0c:
06:3a:07:45:bc:f3:8f:29:92:e3:54:d7:8a:0f:1c:
13:4f:53:7a:91:8d:15:95:a8:c6:46:75:75:17:c1:
c5:b1:0d:3e:f4:5c:ad:79:81:79:f7:de:f3:00:31:
3d:df:5a:ec:d6:7a:19:ff:b0:f4:31:13:17:00:c1:
9e:d2:f3:d1:f1:3a:2c:76:57:49:19:75:d5:ad:66:
30:e4:74:6e:b9:f5:1e:45:c9:20:d8:b1:56:ff:0d:
21:0a:f8:ba:ef:d8:b0:bd:78:37:09:b7:06:02:75:
12:1d:11:9e:4d:07:85:37:7b:09:40:fe:72:51:da:
28:33:88:d1:6f:93:44:76:4f:bf:0d:2a:8a:0c:01:
12:a6:d1:4e:c1:a1:aa:77:c7:9f:0c:fb:f3:6f:98:
d8:4b:a3:15:7b:df:14:01:f3:27:e8:d9:94:2f:bb:
af:f1:90:8d:e1:96:57:c8:95:63:49:46:90:95:64:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F9:BF:6A:C6:BF:57:0D:EE:DB:B8:1A:05:10:FB:8B:C4:CB:F4:45
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/9Pm_asa_Vw3u27gaBRD7i8TL9EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:40::/44
Signature Algorithm: sha256WithRSAEncryption
aa:3a:c4:6f:7f:71:70:44:d2:15:6e:a2:1f:72:23:e6:33:03:
ce:29:e2:94:17:a9:53:48:90:0a:a1:9d:a7:14:f6:29:b9:2d:
73:d1:b5:52:e9:54:f5:72:44:cd:21:22:4b:8b:4d:9b:ea:7d:
11:16:11:a5:0e:f4:f8:f9:e8:5b:58:1b:82:d5:29:df:2a:08:
1a:6b:37:ff:23:73:61:3b:91:3a:30:f9:72:e5:0b:66:c8:92:
89:72:ca:b0:52:14:9f:55:9b:e8:11:73:5d:77:df:7a:e4:4c:
42:aa:55:ab:9f:65:51:b4:4f:ef:dc:c3:b7:e5:56:77:45:95:
d5:d5:a0:8c:52:df:0e:c7:1c:c2:35:26:9b:89:b3:fe:04:15:
6f:20:dd:64:ee:72:8f:8d:ba:d1:66:4c:9d:97:a3:c4:88:33:
5f:00:0b:91:0b:82:97:97:9f:e6:ff:05:58:2f:83:0f:d7:9d:
a8:a1:a7:15:1d:61:83:a3:c6:95:3f:c4:ec:3f:c5:9d:b5:1e:
19:43:bd:6f:f8:70:76:52:75:77:07:8f:9d:5e:4a:24:1d:96:
ee:6d:0e:e5:d0:31:1f:cf:c3:98:88:27:7a:2d:b9:80:cd:ae:
b6:fe:87:5f:a8:97:06:27:02:00:b8:e9:16:c6:51:74:8a:c9:
b6:a6:30:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:12 2025 by rpki-client