Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/KaGQMMaxkcemu0SGVhSpbaNwlds.roa
File: KaGQMMaxkcemu0SGVhSpbaNwlds.roa (raw, json)
Hash identifier: lNS7yAqtQ/9vxo2hn8CgIY4PS9SEeWeeHquKBc07fvg=
Subject key identifier: 29:A1:90:30:C6:B1:91:C7:A6:BB:44:86:56:14:A9:6D:A3:70:95:DB
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01951FAFB7D7F2A413201422DACD07CC6812
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/KaGQMMaxkcemu0SGVhSpbaNwlds.roa
Signing time: Wed 19 Feb 2025 19:29:24 +0000
ROA not before: Wed 19 Feb 2025 19:29:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134351
IP address blocks: 2a13:c340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1f:af:b7:d7:f2:a4:13:20:14:22:da:cd:07:cc:68:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Feb 19 19:29:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29a19030c6b191c7a6bb44865614a96da37095db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:9c:fd:e7:0e:63:ad:8c:dc:81:fa:89:72:
f4:a1:62:99:c3:0e:2b:84:0f:63:b1:74:37:dd:95:
7f:6b:e8:33:53:a1:ca:c9:85:30:2b:17:17:c6:eb:
3a:90:45:d8:da:82:0c:72:ab:7c:17:7d:85:ab:b0:
80:84:e7:5c:5a:25:db:bb:f6:32:c4:67:d9:e3:53:
b1:6c:c3:d3:7f:4a:42:f3:db:a3:00:28:a1:0e:91:
9a:3f:ed:2c:ec:bf:42:51:0a:b3:05:ee:a7:98:72:
e9:00:31:25:92:b7:99:a6:20:e1:12:64:b9:33:ae:
4e:a2:20:0a:0c:5a:a1:00:5c:46:37:75:8b:39:8f:
3d:44:ab:a3:28:23:6e:3d:f0:da:36:26:72:39:39:
0e:94:11:f9:8d:cf:23:d5:f6:c3:64:27:4d:f0:44:
d5:66:5f:46:7b:b2:08:80:8a:b1:fb:53:11:25:7b:
1b:01:3a:7b:5d:76:22:c2:59:bd:35:1e:fb:85:70:
fc:0b:85:18:92:20:3c:7b:13:af:81:2a:de:70:62:
c1:ca:2b:15:9d:f5:1c:99:e8:99:17:9e:f0:a5:02:
a7:05:6c:80:07:d9:db:01:f0:12:c5:2d:ac:d1:9d:
ea:8e:36:52:a8:80:86:0c:09:05:86:eb:61:29:7a:
4a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A1:90:30:C6:B1:91:C7:A6:BB:44:86:56:14:A9:6D:A3:70:95:DB
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/KaGQMMaxkcemu0SGVhSpbaNwlds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c340::/29
Signature Algorithm: sha256WithRSAEncryption
2a:39:11:d2:05:6f:a0:bb:87:05:18:86:22:46:c0:9f:61:ff:
77:44:90:29:ce:63:4d:9c:8e:50:6a:3b:a4:d1:a3:e7:1a:b9:
e6:cf:08:ab:65:92:fe:5f:49:4f:96:ca:ef:29:fc:03:19:f6:
d2:46:57:0b:87:56:c0:d0:ab:7f:4b:38:0a:56:94:a8:fb:8f:
1a:a1:e0:3a:21:d1:95:55:27:c2:38:12:d5:b5:ce:02:e2:26:
26:87:a8:53:fe:02:44:be:6a:bb:6b:f7:05:4f:23:43:97:51:
6a:cb:c5:e2:82:22:f3:af:16:06:81:a5:29:d4:f5:03:d3:aa:
94:0e:b4:19:e5:75:a5:fc:8d:b5:87:72:6d:5a:28:87:87:d9:
52:81:f6:a7:03:d1:a5:6b:13:64:6b:9b:68:4a:23:e8:f5:b4:
d7:b5:76:12:59:f7:59:b6:3f:22:ad:ed:12:b8:b0:30:c8:43:
4f:ed:4d:c4:03:6f:6f:4b:6b:0b:ee:a8:e5:94:b0:34:c4:4f:
57:f2:f5:11:7d:7a:81:9a:9d:15:d6:cf:ab:82:12:19:8e:f2:
d6:26:e2:6e:fd:d7:ff:87:3c:ae:e0:f8:20:5b:44:26:c1:ce:
e9:f1:a6:03:4d:ce:e9:4c:e9:e8:b9:12:b2:9f:1f:fa:90:4d:
dc:4c:7c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:38:51 2025 by rpki-client