Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/789a81-af21-44ed-8d61-ad5558882a30/1/_4qziCwy0-5brLbRyXE5FVM4Qcw.roa
File: _4qziCwy0-5brLbRyXE5FVM4Qcw.roa (raw, json)
Hash identifier: DVo7lEo2YXrAeiVBkSOW/Tj//cfB8+ZnaTMO+Oa9vp8=
Subject key identifier: FF:8A:B3:88:2C:32:D3:EE:5B:AC:B6:D1:C9:71:39:15:53:38:41:CC
Certificate issuer: /CN=bde07455dff8b0faaa4c89ebcc79c5e907fb7bab
Certificate serial: 01941FFAABFDFF01A0749558883B87049380
Authority key identifier: BD:E0:74:55:DF:F8:B0:FA:AA:4C:89:EB:CC:79:C5:E9:07:FB:7B:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veB0Vd_4sPqqTInrzHnF6Qf7e6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/789a81-af21-44ed-8d61-ad5558882a30/1/_4qziCwy0-5brLbRyXE5FVM4Qcw.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213839
IP address blocks: 2a14:7ec0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ab:fd:ff:01:a0:74:95:58:88:3b:87:04:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde07455dff8b0faaa4c89ebcc79c5e907fb7bab
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff8ab3882c32d3ee5bacb6d1c9713915533841cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:e8:9a:71:cd:89:07:90:47:f8:9f:23:d0:
53:62:2a:70:d3:86:fa:48:36:e9:ad:0d:3d:f2:62:
e8:7c:1c:e2:d5:58:7f:a5:f3:ff:9f:b9:9b:0a:40:
f7:9f:39:91:23:b1:46:19:7c:80:23:51:2c:22:81:
a2:97:cf:c7:74:b9:86:4f:00:7b:a1:f8:b2:cd:05:
24:f4:ba:93:1b:dc:f7:43:37:c4:26:e2:82:ec:2f:
05:f1:a5:46:5b:40:d6:cc:2a:d7:17:70:84:0c:38:
bf:42:1d:4e:46:2a:19:a4:f5:21:2d:96:9e:78:cf:
30:a3:14:66:57:46:69:be:39:67:7b:e0:d9:3b:e1:
a6:52:b8:22:32:84:1d:df:d2:12:75:8f:8e:da:8d:
e7:21:89:c9:14:dd:78:3c:6a:67:f3:4f:71:3b:03:
91:fd:79:85:e2:5f:79:4d:fa:38:36:5b:ef:44:94:
0d:27:35:41:59:59:36:bb:e2:c8:c7:9c:b2:c5:fd:
ea:cb:38:70:fb:aa:8a:05:51:4d:6f:93:a4:1a:f7:
a7:38:bb:1c:90:4d:5a:07:16:ab:ca:2d:79:d7:b0:
52:f6:26:9d:7b:a7:cb:49:2b:36:11:5d:87:52:e6:
08:4e:31:56:db:75:88:db:54:11:eb:c6:46:ec:51:
f5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8A:B3:88:2C:32:D3:EE:5B:AC:B6:D1:C9:71:39:15:53:38:41:CC
X509v3 Authority Key Identifier:
keyid:BD:E0:74:55:DF:F8:B0:FA:AA:4C:89:EB:CC:79:C5:E9:07:FB:7B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veB0Vd_4sPqqTInrzHnF6Qf7e6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/789a81-af21-44ed-8d61-ad5558882a30/1/_4qziCwy0-5brLbRyXE5FVM4Qcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/789a81-af21-44ed-8d61-ad5558882a30/1/veB0Vd_4sPqqTInrzHnF6Qf7e6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7ec0::/29
Signature Algorithm: sha256WithRSAEncryption
0d:bc:49:89:1b:dc:cd:21:03:44:18:55:29:c9:c0:96:cd:bf:
b0:79:7a:0a:a3:f4:64:fc:94:91:17:67:9e:bb:1b:e7:36:16:
b6:5e:8a:64:8e:08:6a:7c:dd:c5:db:74:8c:40:56:1f:c8:0a:
96:f3:92:35:2b:d7:a7:6d:5e:aa:9e:fe:2f:00:c0:4f:c7:03:
12:58:f0:8d:42:61:d6:15:6c:cf:6f:ac:52:c9:3e:45:d2:f9:
2d:5f:03:2f:d3:36:d1:24:2d:a7:96:0d:8e:76:ec:5a:3d:22:
a6:48:3e:a2:a3:96:92:64:81:21:37:3b:d2:6e:90:51:57:7b:
5c:63:41:26:42:f9:b4:c5:dc:bc:7f:99:41:b4:de:1d:10:39:
f3:98:fc:b1:9d:48:e1:fe:0c:32:3f:3e:8d:ad:e1:9f:66:7e:
c7:b3:54:07:96:62:2f:b2:a5:23:56:88:69:5b:33:35:bb:26:
81:84:b0:c7:c3:60:93:75:9a:4c:44:56:44:bf:a1:62:b4:f0:
01:9b:ad:f5:1f:fd:fa:37:31:32:b9:39:e0:ee:ba:83:ea:6a:
5e:d5:58:74:85:1e:4a:38:f9:41:48:cb:8b:f4:e6:bf:9a:5f:
db:3d:c0:4f:6c:00:48:ab:c1:0e:69:a8:db:47:75:33:2c:7f:
c9:6f:83:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:08 2025 by rpki-client