Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/5-1KyKdgOvf-v0i5Q--gRxEaKOU.roa
File: 5-1KyKdgOvf-v0i5Q--gRxEaKOU.roa (raw, json)
Hash identifier: CFB3Tk4A4y8uE8VOVfDEmfW7mZ5LP/tWUHQQdkRAggA=
Subject key identifier: E7:ED:4A:C8:A7:60:3A:F7:FE:BF:48:B9:43:EF:A0:47:11:1A:28:E5
Certificate issuer: /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial: 01949585E0CA9BB156EDCA189CE152B8B561
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/5-1KyKdgOvf-v0i5Q--gRxEaKOU.roa
Signing time: Thu 23 Jan 2025 23:36:06 +0000
ROA not before: Thu 23 Jan 2025 23:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213527
IP address blocks: 2a14:47c0:e::/48 maxlen: 48
2a14:47c0:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:95:85:e0:ca:9b:b1:56:ed:ca:18:9c:e1:52:b8:b5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Validity
Not Before: Jan 23 23:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7ed4ac8a7603af7febf48b943efa047111a28e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:5d:17:c7:44:8e:2a:3d:a1:93:0d:84:d9:
ad:90:44:ba:29:87:ed:fe:82:91:3a:88:5d:78:8c:
aa:d8:8c:81:ef:ab:f4:af:3e:de:16:b7:90:9d:26:
2e:67:66:f7:b5:07:0e:03:8e:3d:0d:1a:b3:0f:bc:
d1:0f:bd:bf:bc:89:39:49:9a:89:af:50:0f:7b:5d:
6d:aa:88:6b:53:77:ac:ee:b7:36:32:73:a4:78:8d:
f4:c5:b7:68:e6:d2:3b:cc:51:1d:74:de:74:06:62:
a8:6a:cd:88:05:c5:4f:f0:9f:b1:2f:2c:fc:4a:78:
56:fa:e8:4b:7e:43:09:a6:85:86:e5:93:b8:3c:ea:
de:c3:fe:59:56:7f:c3:08:21:99:af:f5:cc:7d:d1:
89:c1:e9:2e:f9:f1:6b:02:be:cf:cf:e7:e8:de:60:
ad:23:3d:fb:b4:d1:8e:8e:8b:b5:48:20:e9:c6:b7:
66:f7:fa:e8:88:4c:00:fd:b4:3e:e2:86:0a:5c:9f:
fc:6d:f9:11:4f:04:ee:cf:3e:ff:2f:47:9a:73:78:
9d:97:22:ec:c5:bd:90:45:3a:dd:39:f4:21:6c:6e:
e9:f9:53:ad:fe:c9:83:8c:a3:ef:a5:36:52:bc:d8:
8c:8d:47:4f:7c:3f:50:53:5e:df:dc:0e:a1:44:88:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:ED:4A:C8:A7:60:3A:F7:FE:BF:48:B9:43:EF:A0:47:11:1A:28:E5
X509v3 Authority Key Identifier:
keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/5-1KyKdgOvf-v0i5Q--gRxEaKOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:47c0:e::/48
2a14:47c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
57:6f:dd:bd:d8:d7:49:df:32:85:ae:80:c0:4c:71:88:87:49:
37:62:64:62:43:3d:6f:e8:e6:89:ce:c9:63:9a:8e:f6:b2:47:
95:55:f8:03:d2:a4:a8:b5:ac:db:7e:ab:a6:9e:74:c5:bb:ec:
a7:68:f9:36:cf:4b:0e:b0:a0:a9:ba:68:b1:ef:75:64:fa:9a:
84:80:57:ba:18:04:8c:e4:d0:4a:cf:f8:93:80:80:bc:a8:55:
32:22:7a:33:f9:74:ca:a8:bc:15:71:6a:43:6a:70:66:5e:e5:
da:6e:07:3c:f8:be:3f:01:af:ed:e8:b2:f4:ee:a4:ec:8c:d7:
cd:d5:cd:b2:3d:5a:dd:76:b0:a6:51:7d:2b:d4:3b:71:08:ee:
28:4a:08:e9:f9:0c:9f:42:c2:a1:1c:d1:1f:bc:46:e9:33:c9:
70:db:9e:ad:8b:12:5c:a8:39:31:30:e5:0d:02:6b:33:48:c1:
fa:74:09:41:65:55:a0:5a:7f:aa:e6:fb:25:c0:02:02:ed:3d:
60:e9:a1:0f:f7:52:61:f7:f6:e6:40:e3:a4:6d:eb:1e:cc:9b:
5b:b5:a7:cf:bd:1c:ea:6e:22:1d:98:fe:59:6d:3c:64:f3:3d:
93:b5:de:d9:be:0d:a2:1c:d0:7b:91:ff:11:12:08:73:77:c0:
26:e6:98:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:58 2025 by rpki-client