Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/PY6tEZc2nfvVexKugs8XwtnDDss.roa
File: PY6tEZc2nfvVexKugs8XwtnDDss.roa (raw, json)
Hash identifier: y745EAaSNKqwRUJCF7mBwxX5XoPlEb2IitJeDeZn2fQ=
Subject key identifier: 3D:8E:AD:11:97:36:9D:FB:D5:7B:12:AE:82:CF:17:C2:D9:C3:0E:CB
Certificate issuer: /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial: 0194B965886517F77901A1B85E012B08F9F5
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/PY6tEZc2nfvVexKugs8XwtnDDss.roa
Signing time: Thu 30 Jan 2025 22:47:06 +0000
ROA not before: Thu 30 Jan 2025 22:47:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213579
IP address blocks: 2a14:47c0:e000::/40 maxlen: 40
2a14:47c0:e000::/48 maxlen: 48
2a14:47c0:e001::/48 maxlen: 48
2a14:47c0:e002::/48 maxlen: 48
2a14:47c0:e003::/48 maxlen: 48
2a14:47c0:e004::/48 maxlen: 48
2a14:47c0:e0ff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:65:88:65:17:f7:79:01:a1:b8:5e:01:2b:08:f9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Validity
Not Before: Jan 30 22:47:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d8ead1197369dfbd57b12ae82cf17c2d9c30ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:ac:31:c4:e0:dc:3e:6d:19:64:ae:78:dd:
68:16:3b:47:e9:ad:b0:93:18:83:74:54:8f:ab:48:
7e:8b:d8:20:54:f9:39:d1:91:fc:42:69:7c:98:36:
fd:72:6f:2a:78:d9:ee:c4:1b:ff:f5:a3:2b:8f:b5:
40:a8:bf:58:a7:05:5e:66:68:20:0d:93:c2:d7:e6:
4a:31:a1:54:34:87:ab:df:15:8d:1c:81:b1:43:90:
2b:60:7e:40:c2:f8:c1:7d:23:b0:11:38:f0:9c:be:
40:1a:0f:fd:16:b2:c9:e2:53:b5:c5:69:f4:bc:8e:
94:f8:8f:08:8a:60:71:60:14:2f:19:29:b1:af:b2:
ee:69:84:bb:fc:e3:ba:03:97:6d:fb:24:ba:e4:6a:
1e:91:ca:ff:8d:46:fc:01:7d:70:7a:96:21:20:7f:
ed:c3:74:92:2e:8f:db:0e:1f:5f:d6:be:80:32:47:
3e:89:17:6c:27:f6:e8:9a:44:c2:d9:cd:2b:4a:0d:
0f:9f:e4:c5:9d:de:9a:18:2d:4a:5e:ae:75:9e:04:
60:a0:bd:44:fb:d6:9d:07:ff:90:b8:a1:f9:81:0e:
ff:5e:b7:82:ef:d9:4a:a7:02:f0:c4:57:e0:ca:a9:
28:f9:85:16:56:20:88:a8:ed:b2:10:76:91:01:1f:
d4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8E:AD:11:97:36:9D:FB:D5:7B:12:AE:82:CF:17:C2:D9:C3:0E:CB
X509v3 Authority Key Identifier:
keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/PY6tEZc2nfvVexKugs8XwtnDDss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:47c0:e000::/40
Signature Algorithm: sha256WithRSAEncryption
15:b0:4d:99:b2:b4:f0:8a:f3:6d:df:86:4e:ee:79:11:a7:b9:
c9:ad:db:32:bd:62:6e:fa:d2:34:c0:38:c3:f0:c4:84:84:b1:
e2:13:06:75:36:44:90:2a:9c:4b:6e:e8:0a:d0:e2:5e:b7:de:
13:fb:60:ec:7c:50:f2:8e:14:8f:6a:aa:00:43:de:95:9d:71:
a5:86:e2:3c:26:a0:04:44:f9:b7:90:a5:a8:fd:c5:77:26:4e:
0d:b3:b5:bb:09:f5:6f:e7:b6:a0:06:af:e1:d6:b8:19:5b:cd:
c3:5f:2d:bc:36:15:5f:2c:1b:4d:6b:92:72:84:ec:56:98:fd:
d3:63:80:d9:15:d8:2e:47:e7:c0:35:af:6f:44:1b:36:99:c0:
92:ca:2c:cd:e3:c5:92:96:84:9c:56:90:c6:71:ed:67:36:c7:
51:0f:8b:f7:24:a7:6d:fe:76:82:28:53:60:16:60:c1:d3:b0:
76:57:2d:ae:19:3d:fb:37:24:62:b1:f3:0b:3f:dd:98:40:d8:
a5:07:0e:2e:da:94:b9:b0:1c:b5:11:91:b5:5e:c0:d4:9e:6c:
50:29:0b:d1:94:1e:45:6d:0d:f1:59:7b:86:33:5d:0a:0f:f0:
80:c2:ad:84:0f:42:8f:65:8b:a1:fd:9c:f6:a0:0c:f8:e0:7e:
41:4d:c3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:55 2025 by rpki-client