Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/DAhkHIU5KT7cYT6FoHdCoN4wLsc.roa
File: DAhkHIU5KT7cYT6FoHdCoN4wLsc.roa (raw, json)
Hash identifier: prNqG8/Lqb8HlCJTOAKboTtvelNNuyCGXDSE6N09/90=
Subject key identifier: 0C:08:64:1C:85:39:29:3E:DC:61:3E:85:A0:77:42:A0:DE:30:2E:C7
Certificate issuer: /CN=603b31bc6e7f42f6303870f0234b40def71fa03d
Certificate serial: 019424B3A24D0C4CABF38C193DA08003EDCD
Authority key identifier: 60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/DAhkHIU5KT7cYT6FoHdCoN4wLsc.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214436
IP address blocks: 2a14:37c0:f000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a2:4d:0c:4c:ab:f3:8c:19:3d:a0:80:03:ed:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603b31bc6e7f42f6303870f0234b40def71fa03d
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c08641c8539293edc613e85a07742a0de302ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:fd:b3:d4:0c:d8:0f:d5:14:7e:33:57:0c:
28:91:56:73:c9:5d:be:d9:80:d5:c4:7c:d2:fe:d1:
09:dc:02:7a:ee:19:c8:a3:ed:9a:86:91:78:da:5f:
e3:c3:31:c1:5c:be:69:00:c3:66:1e:f9:6d:71:d2:
55:58:8f:95:c3:95:6f:62:ef:02:18:cc:37:c7:77:
b9:99:1f:a0:95:39:23:66:25:63:81:b5:48:56:8d:
70:e1:61:28:d5:36:d0:bf:43:40:01:87:e3:0e:22:
4a:4f:b7:17:0a:c0:33:19:7a:12:2d:29:cc:5f:be:
42:90:fd:cd:2e:59:26:fa:7c:8a:ec:e4:6a:e1:b5:
d1:4d:54:ba:81:52:ca:61:19:98:ee:ab:f6:b9:9b:
f7:06:dc:95:0c:43:32:9d:c6:ab:19:2b:94:48:88:
75:56:f8:42:a3:0f:b8:3d:bb:e6:36:77:a6:64:a4:
da:ec:8f:89:17:56:2b:0f:d6:68:40:8c:0f:4d:85:
27:db:c9:f3:c3:6e:7c:fa:13:cc:15:83:bd:ed:ea:
8c:84:43:79:7c:fd:96:c1:c9:7b:49:a9:93:c4:53:
c5:57:0a:fc:06:f8:b4:a4:ae:1d:14:8f:d2:99:c7:
b2:aa:1b:64:a2:02:63:3c:15:20:98:6d:32:ee:25:
69:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:08:64:1C:85:39:29:3E:DC:61:3E:85:A0:77:42:A0:DE:30:2E:C7
X509v3 Authority Key Identifier:
keyid:60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/DAhkHIU5KT7cYT6FoHdCoN4wLsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:37c0:f000::/48
Signature Algorithm: sha256WithRSAEncryption
46:05:e5:87:73:77:30:c3:cb:25:f7:35:b7:68:21:e1:74:c7:
22:6d:a3:eb:06:7f:5e:38:63:56:f9:42:0f:35:ec:68:95:5c:
b8:7f:a6:18:13:b6:65:dd:49:3d:c1:d8:60:a2:8c:a9:ab:d2:
3d:82:29:5d:07:ad:25:95:d9:22:be:f2:42:9c:fc:50:b1:56:
0f:68:67:9d:3b:9d:17:c9:b2:a8:b9:36:c0:c1:ff:5d:f5:7a:
54:95:b8:20:75:48:06:49:58:93:bf:c8:7b:11:64:25:0b:bd:
16:fa:e1:70:d4:3e:a0:d3:c5:e8:46:3b:4f:dc:1a:4b:54:ae:
78:aa:ac:c7:83:fd:ef:ba:33:07:a3:fa:96:9a:18:a9:57:cc:
0b:5e:93:74:fa:86:a8:d2:a8:2e:0e:19:16:37:af:e4:c1:cb:
6e:12:8a:2b:0b:72:2b:8d:4f:e5:90:a1:5e:7d:ee:09:74:9d:
a6:18:1b:d5:3b:8f:20:84:cc:26:42:96:5f:28:87:88:45:bd:
73:4f:ca:4c:b8:cf:20:63:82:a2:1c:97:7c:9c:3b:1a:29:c8:
a9:df:7a:8e:a7:b8:de:47:23:2c:fb:95:69:fd:f7:ac:b7:fa:
0d:20:c5:17:f5:e6:b1:36:04:23:90:ab:4b:a7:ad:8f:2a:40:
ad:5b:37:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:13:30 2025 by rpki-client