Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/dVwX-cCmOxrn9_gsdwOdsiWFkY0.roa
File: dVwX-cCmOxrn9_gsdwOdsiWFkY0.roa (raw, json)
Hash identifier: Vs+r4/uqJb40X1RP1KHDHIrHsJL+2YTLULkN+N2HJCM=
Subject key identifier: 75:5C:17:F9:C0:A6:3B:1A:E7:F7:F8:2C:77:03:9D:B2:25:85:91:8D
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 0194266BEF5A875BBC39B80D967FF68E88C7
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/dVwX-cCmOxrn9_gsdwOdsiWFkY0.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215273
IP address blocks: 2a14:2640::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ef:5a:87:5b:bc:39:b8:0d:96:7f:f6:8e:88:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=755c17f9c0a63b1ae7f7f82c77039db22585918d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:75:10:b7:09:5b:df:0c:98:4a:ab:ae:6d:
24:80:47:14:46:b6:b9:25:af:96:96:e6:ef:f3:79:
3d:46:c9:d5:17:d7:d3:8a:fb:e6:60:82:6c:f1:25:
f7:4f:89:36:32:01:11:67:d0:a4:da:11:e0:2c:e5:
a3:9d:52:32:0d:40:87:38:03:9d:e1:b2:b9:73:4d:
68:94:4e:17:75:2c:a4:40:4b:88:4a:bc:9c:4d:ef:
18:9d:fa:e6:a8:4c:ee:16:cd:cf:8c:c1:47:d6:c6:
d7:65:67:d1:11:b1:1a:a1:95:d1:0a:37:a6:cc:d5:
ae:04:b2:d7:59:78:69:30:9c:9d:68:d0:15:43:a1:
3c:43:f0:75:0c:0e:fb:11:77:13:23:c6:45:f6:5a:
7c:ef:c2:28:ff:b7:32:d2:d8:0d:f4:7a:00:f2:bc:
7b:dd:f1:76:db:97:19:b6:1c:9b:64:31:a7:af:8f:
2b:81:99:f9:8d:b1:de:7d:63:b4:a0:71:ee:a8:01:
4b:c8:cb:11:e3:30:dd:08:6e:31:23:13:27:80:e0:
1d:fe:30:ec:f5:23:0b:a9:ea:ee:77:0b:5e:72:b8:
2d:69:a1:6f:95:d5:ca:70:0e:e6:88:f1:51:ee:84:
68:81:fb:5d:1d:91:50:00:e5:c5:6f:30:cb:90:cc:
62:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5C:17:F9:C0:A6:3B:1A:E7:F7:F8:2C:77:03:9D:B2:25:85:91:8D
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/dVwX-cCmOxrn9_gsdwOdsiWFkY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2640::/29
Signature Algorithm: sha256WithRSAEncryption
41:91:d5:43:61:34:2b:89:94:7c:f5:da:7b:c1:41:8c:e6:df:
86:7d:5a:ea:62:c7:5e:26:ce:7c:41:83:0a:6f:4a:f4:62:c9:
4a:f2:a7:b0:6a:91:1d:96:86:7c:4c:e2:ec:71:a6:41:b7:bc:
29:ff:78:97:8c:48:d4:b0:53:08:02:d5:38:f2:dd:b3:e7:a3:
f0:c7:9c:8b:5b:55:e8:59:77:7f:68:26:b5:47:36:21:0e:10:
ec:75:05:72:0d:ad:86:e3:31:34:5e:ab:bd:4b:53:b3:37:9c:
3b:64:98:cf:ba:35:bf:a0:05:3b:29:1e:4f:3e:a9:d8:3f:36:
4b:d6:9b:7e:99:ae:1d:a9:7d:a7:d3:30:27:98:f5:df:78:46:
3f:e1:60:f2:2f:13:c4:15:25:30:ab:ef:4d:16:b1:fb:f2:96:
37:fe:94:00:68:3d:1e:60:12:65:ba:c6:5a:fe:e1:69:cf:3f:
b3:84:c5:cd:93:d4:a0:89:e7:6f:e4:6c:29:ee:d1:ee:64:33:
78:ff:5f:01:3e:f1:b5:63:7a:45:49:42:16:77:99:05:7e:14:
39:78:b0:2d:21:3c:f7:29:8c:86:f2:96:20:68:b6:86:06:fa:
a7:7e:1c:f8:44:b7:21:d2:3f:18:ad:4a:66:b6:7c:a6:ad:50:
47:04:56:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:01 2025 by rpki-client