Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/Lqf90vgMlAVPYS00auCGpKe0GWU.roa
File: Lqf90vgMlAVPYS00auCGpKe0GWU.roa (raw, json)
Hash identifier: Ajp65V4Dlui7s/0q+3qpY0FtCRGwwSiN5MFc5fq9PH0=
Subject key identifier: 2E:A7:FD:D2:F8:0C:94:05:4F:61:2D:34:6A:E0:86:A4:A7:B4:19:65
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 0193F5BD505ED9F857B80E39D03760777707
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/Lqf90vgMlAVPYS00auCGpKe0GWU.roa
Signing time: Mon 23 Dec 2024 22:57:25 +0000
ROA not before: Mon 23 Dec 2024 22:57:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a14:2500::/29 maxlen: 29
2a14:2700::/29 maxlen: 29
2a14:2b00::/29 maxlen: 29
2a14:2d00::/29 maxlen: 29
2a14:2f00::/29 maxlen: 29
2a14:3300::/29 maxlen: 29
2a14:3500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f5:bd:50:5e:d9:f8:57:b8:0e:39:d0:37:60:77:77:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Dec 23 22:57:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ea7fdd2f80c94054f612d346ae086a4a7b41965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:05:10:63:7b:23:bf:50:0d:42:fc:b7:ab:
4f:f7:20:2f:98:ba:77:2c:12:dc:5e:e9:17:78:c1:
bd:21:e8:50:b5:54:6f:07:c3:68:6b:b3:fe:46:9d:
30:0d:99:08:09:82:22:9c:2e:fa:f4:b3:bc:c7:ed:
f0:55:30:c0:5a:90:23:dd:40:0e:b9:99:f1:64:7d:
34:f4:05:df:3c:5c:64:1f:ea:d2:b6:2f:e7:74:e5:
f3:75:63:80:5e:d6:f7:ab:9e:00:65:c9:53:26:37:
68:e0:3e:79:2f:08:66:1d:81:25:fa:99:35:4e:1b:
67:21:69:91:47:84:65:fc:12:54:0e:0b:34:e1:34:
48:2e:b5:36:02:5f:9c:91:7f:65:b4:5a:d4:83:e7:
f6:17:b1:2f:fb:c5:fd:49:70:f4:5a:0d:d4:0c:1b:
d3:df:20:fe:34:18:1c:00:08:84:18:7c:b9:ac:a3:
bd:f4:00:67:da:22:2c:3d:c6:83:ff:50:0c:8f:04:
de:e0:1d:4a:d5:41:87:b9:fa:61:53:94:49:7d:da:
be:65:f1:20:f5:9f:95:20:a1:11:9b:fa:f0:e4:34:
52:ce:0f:90:dc:fe:55:44:ba:fb:4b:b1:de:2c:ff:
b7:59:93:72:44:66:77:57:21:53:fd:c5:bc:85:ab:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A7:FD:D2:F8:0C:94:05:4F:61:2D:34:6A:E0:86:A4:A7:B4:19:65
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/Lqf90vgMlAVPYS00auCGpKe0GWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2500::/29
2a14:2700::/29
2a14:2b00::/29
2a14:2d00::/29
2a14:2f00::/29
2a14:3300::/29
2a14:3500::/29
Signature Algorithm: sha256WithRSAEncryption
92:65:77:63:88:5a:2f:7e:bd:3e:68:38:e2:81:59:e5:c9:03:
86:6f:5f:73:c1:81:18:26:c0:06:a3:82:72:5d:51:e5:8d:e1:
51:2e:ea:06:c6:88:4b:19:14:57:c2:79:77:70:16:7f:59:06:
71:22:cc:bd:65:0c:35:d4:ec:dd:1d:5b:d8:4b:ac:29:8a:c1:
ea:4b:4b:13:e8:ac:dc:8a:11:61:12:24:a5:e6:cd:a2:5e:9a:
47:ba:95:f1:06:b7:3e:f0:6c:e3:f0:25:b4:35:be:fb:6b:fe:
69:44:7e:eb:24:6e:0f:ac:51:81:20:0f:60:ae:8a:d0:73:23:
50:66:10:11:ee:6e:5d:6d:79:37:57:ef:c3:a4:f7:1f:98:c8:
4b:6b:11:2a:a1:f5:c3:45:aa:bc:3e:70:d2:b9:9d:40:da:c4:
f3:18:d8:98:11:ee:31:58:e3:84:18:ee:ba:96:7b:e2:07:30:
74:8c:b6:3b:51:87:83:9a:e9:fb:0d:5f:b9:0e:9d:7e:68:2e:
09:d9:04:40:90:85:f9:02:13:3e:9c:7b:3a:1f:66:73:1b:5a:
1a:94:58:07:8f:32:5c:85:8e:41:ca:48:e2:42:68:4f:23:3f:
1d:3d:e7:3e:2f:19:58:75:ad:58:33:ca:bc:1f:52:78:57:dd:
e8:87:6d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:25:50 2025 by rpki-client