Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/h6RNwx35cY5Ou4EEvMzeH5bf3AY.roa
File: h6RNwx35cY5Ou4EEvMzeH5bf3AY.roa (raw, json)
Hash identifier: MWzq5pbXjbxkHMC4iAdZ1JJ8dIigq4BPHOpnjCOlKBw=
Subject key identifier: 87:A4:4D:C3:1D:F9:71:8E:4E:BB:81:04:BC:CC:DE:1F:96:DF:DC:06
Certificate issuer: /CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
Certificate serial: 019421B1A89684DFB8285CB88078F79BB425
Authority key identifier: 8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/h6RNwx35cY5Ou4EEvMzeH5bf3AY.roa
Signing time: Wed 01 Jan 2025 11:47:58 +0000
ROA not before: Wed 01 Jan 2025 11:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216285
IP address blocks: 2a14:4280::/29 maxlen: 29
2a14:4280::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a8:96:84:df:b8:28:5c:b8:80:78:f7:9b:b4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
Validity
Not Before: Jan 1 11:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87a44dc31df9718e4ebb8104bcccde1f96dfdc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:00:51:a2:b5:01:06:22:85:a3:4b:c7:ae:
af:ec:9b:36:25:08:f0:1a:d0:c0:7d:b6:bc:7b:e9:
23:f6:fe:4a:50:a0:c5:f1:21:0b:01:38:18:a5:50:
30:e0:cf:d2:c9:7f:2f:f2:62:ca:31:ab:64:5b:42:
5e:f7:89:19:9e:7f:d4:f8:cc:07:ca:25:89:c4:2b:
23:87:8e:ed:cb:e1:8c:e5:a3:36:64:cb:65:7f:1b:
1b:fb:05:94:09:71:92:25:89:01:d9:f4:6f:0d:38:
9e:3a:b0:d5:a8:b8:cc:6d:21:5e:30:cd:36:5b:12:
bb:ba:10:b5:03:75:9e:56:f6:d2:d2:56:7f:ae:5c:
2b:37:3e:81:1d:b2:d1:23:23:d9:07:f4:01:35:0c:
ab:96:de:89:29:a2:d4:7e:7d:5b:a9:ef:52:7d:58:
f4:39:67:09:6c:c0:76:24:7c:03:11:d3:13:08:b0:
9c:4c:92:c2:b5:a1:1e:25:eb:8b:8d:da:5d:66:ac:
da:e3:08:7c:f5:66:97:68:81:98:18:9f:a2:d7:7a:
fd:0f:a0:d8:e9:2c:d6:4a:14:03:42:56:0f:a1:41:
3c:e3:17:c1:ed:d1:85:fa:f7:dd:68:4b:6b:ed:e9:
83:7e:35:d5:aa:19:cb:fc:a9:0a:eb:87:9a:be:40:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A4:4D:C3:1D:F9:71:8E:4E:BB:81:04:BC:CC:DE:1F:96:DF:DC:06
X509v3 Authority Key Identifier:
keyid:8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/h6RNwx35cY5Ou4EEvMzeH5bf3AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4280::/29
Signature Algorithm: sha256WithRSAEncryption
05:22:16:d4:99:c0:45:33:01:e8:35:ef:76:5e:8c:8b:07:92:
9d:22:95:02:91:43:9e:e6:2f:1c:0e:fa:ad:ff:60:a9:79:67:
32:b7:8a:3e:ae:0e:d9:ce:c0:2e:80:d7:c4:1c:f4:5c:38:c2:
43:35:32:2d:e9:4e:f8:6e:35:85:df:18:c0:45:c0:0b:41:ba:
30:a5:2a:d5:e2:cd:30:a8:40:d4:d7:cf:1a:08:48:72:cd:7e:
8a:3f:d8:b4:eb:65:6e:44:83:a0:42:ff:e0:f0:49:a3:1b:b4:
da:37:4a:dc:74:80:a8:a0:cf:6e:30:06:fe:f0:5d:15:29:07:
a2:c6:49:c9:8d:c8:75:6f:29:74:e3:47:d4:0e:a5:5a:f0:2d:
a1:9f:65:44:d1:fc:74:d6:ce:48:13:40:de:a0:66:22:73:e6:
7d:fa:84:e6:d5:5e:30:36:54:00:92:bc:e0:36:c4:62:90:2e:
62:fc:c5:f9:27:0c:72:27:1f:01:f8:01:21:0f:49:45:a4:8a:
2a:bf:9b:90:3d:3d:3f:e1:3b:f0:24:49:04:a0:e0:1e:9d:83:
41:bf:e3:fb:15:92:6a:40:b6:56:74:cf:43:7c:1f:f1:c5:82:
50:f4:d4:7d:81:58:c5:c1:02:17:41:8f:d7:1c:71:2e:54:dd:
95:a9:7d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:18 2025 by rpki-client