Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/J84DjEhi_gEyD8-a87brecsYsNM.roa
File: J84DjEhi_gEyD8-a87brecsYsNM.roa (raw, json)
Hash identifier: A66a3xMstZT0T3ni5nfFwwrP4QVYA3zVnvHKSfI3TDI=
Subject key identifier: 27:CE:03:8C:48:62:FE:01:32:0F:CF:9A:F3:B6:EB:79:CB:18:B0:D3
Certificate issuer: /CN=f3211d2ecd60924ef2276f86939b070c0081574b
Certificate serial: 0195AE369E26C241EC695D85781CC756ED6A
Authority key identifier: F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/J84DjEhi_gEyD8-a87brecsYsNM.roa
Signing time: Wed 19 Mar 2025 11:42:49 +0000
ROA not before: Wed 19 Mar 2025 11:42:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211895
IP address blocks: 2a14:bc80:102::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:36:9e:26:c2:41:ec:69:5d:85:78:1c:c7:56:ed:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3211d2ecd60924ef2276f86939b070c0081574b
Validity
Not Before: Mar 19 11:42:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27ce038c4862fe01320fcf9af3b6eb79cb18b0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:3c:c7:ce:1d:81:5f:af:03:d8:8f:a8:de:
3f:13:10:34:43:ac:44:1a:eb:86:81:88:4e:83:83:
f4:49:5f:58:54:9d:f3:49:9e:2c:94:b9:9a:f8:80:
6f:0a:60:98:5e:2f:8b:4b:32:be:15:36:c9:1d:fe:
26:80:95:98:ba:00:9b:47:c1:2e:44:5a:e2:ae:39:
e8:15:94:b5:13:f9:e3:9b:c8:d5:3a:49:7e:a6:c6:
ea:91:24:ed:a0:9d:bc:15:83:1c:57:92:25:3b:32:
73:a7:6d:6a:bb:29:19:08:8d:40:d6:d5:47:2e:e1:
2e:5a:0d:b7:3a:40:4f:ec:da:19:fd:3e:51:5e:18:
15:37:b6:55:97:51:78:52:9d:24:85:97:28:7d:ff:
6b:a4:3d:81:50:11:d6:0e:f1:eb:d9:e3:95:a3:45:
6c:10:01:57:16:4d:82:14:62:f5:97:b8:c8:e8:bd:
5b:a9:e3:de:26:2e:a8:5b:5c:77:77:29:36:6e:14:
80:fc:36:eb:fe:f5:93:b4:83:9a:8e:1d:32:52:7b:
63:ff:2a:a4:35:45:c4:35:84:f1:30:94:a6:b1:d2:
30:b1:e1:a5:a8:b3:5b:bf:74:8c:5d:24:47:cf:9d:
54:41:70:a4:97:f6:71:a7:b0:0d:21:ec:a3:94:e4:
98:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CE:03:8C:48:62:FE:01:32:0F:CF:9A:F3:B6:EB:79:CB:18:B0:D3
X509v3 Authority Key Identifier:
keyid:F3:21:1D:2E:CD:60:92:4E:F2:27:6F:86:93:9B:07:0C:00:81:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/J84DjEhi_gEyD8-a87brecsYsNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/034960-9fe3-4f74-b9cd-c5cf08eedb9c/1/8yEdLs1gkk7yJ2-Gk5sHDACBV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:bc80:102::/48
Signature Algorithm: sha256WithRSAEncryption
c7:04:14:de:ad:e7:c3:d5:05:2b:e5:d4:8d:8c:e0:4c:4a:2f:
d0:38:45:f1:59:60:b1:04:e4:48:4e:af:23:8f:93:a5:dd:49:
d9:71:2d:27:8c:94:ad:ec:c0:89:6b:20:17:f8:55:89:23:b7:
bb:83:3b:eb:f6:25:46:49:41:68:9e:55:cb:dc:58:bb:c0:93:
0e:8c:78:39:00:80:9e:8f:74:cb:ca:cf:2a:7d:48:c2:b7:a3:
f1:e9:31:4b:08:cd:27:df:77:8f:95:e7:63:5b:c0:67:1b:19:
64:94:91:76:8c:43:1f:78:8a:d7:a7:d8:57:1f:e9:62:ad:fa:
87:00:a3:77:78:c1:66:a6:b6:b6:7e:87:b5:db:1f:d8:f3:17:
44:55:e8:dd:f6:c3:f8:ee:5d:22:ab:fe:ff:97:0d:9b:b0:af:
15:36:65:83:a7:4f:66:1b:18:c2:de:9e:bd:f0:a3:43:4d:99:
a4:26:ca:97:e7:ce:a7:11:7c:1f:8f:14:09:aa:3c:5e:43:ac:
4e:62:a1:3b:77:6b:ab:89:5f:f1:ec:3d:14:aa:d1:cf:fc:04:
57:e7:21:f9:f8:08:85:73:83:ce:6b:a4:0a:02:c1:82:3f:33:
92:b6:6b:57:6d:54:04:d9:6f:ae:4a:7a:77:85:aa:48:8f:ac:
7b:30:d2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:51 2025 by rpki-client