Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FM8wnD7FBM6VPKxYALF_Jz84wcU.roa
File: FM8wnD7FBM6VPKxYALF_Jz84wcU.roa (raw, json)
Hash identifier: m2+FNC4luOhnT9HVfR0gZhEit+HXXNCL0LwzSUEvBJI=
Subject key identifier: 14:CF:30:9C:3E:C5:04:CE:95:3C:AC:58:00:B1:7F:27:3F:38:C1:C5
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0195CE9A8D29711ED3DD29B8A340A3F7A6B8
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FM8wnD7FBM6VPKxYALF_Jz84wcU.roa
Signing time: Tue 25 Mar 2025 18:39:49 +0000
ROA not before: Tue 25 Mar 2025 18:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214168
IP address blocks: 2a11:4540::/29 maxlen: 29
2a11:5980::/29 maxlen: 29
2a11:62c0::/29 maxlen: 29
2a11:7b00::/29 maxlen: 29
2a11:8740::/29 maxlen: 29
2a11:bbc0::/29 maxlen: 29
2a12:d40::/29 maxlen: 29
2a12:8580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ce:9a:8d:29:71:1e:d3:dd:29:b8:a3:40:a3:f7:a6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 25 18:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14cf309c3ec504ce953cac5800b17f273f38c1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:ee:e0:28:a1:4c:d2:46:56:aa:8b:50:54:
b6:d3:b5:62:78:e4:a2:92:c1:a5:16:57:bd:b0:0b:
1c:49:c3:23:16:fb:d4:ab:71:d0:3f:6b:9b:33:12:
ef:d6:e2:59:e4:00:a2:0d:75:a3:be:16:7d:39:89:
5a:28:ec:a6:b1:28:11:b0:cb:57:ec:bc:b9:84:5d:
8e:8b:3f:bc:a8:88:df:7e:fa:8b:bf:e5:a7:0b:d9:
df:87:b4:ca:60:fe:06:35:82:92:39:07:f0:90:26:
5a:e7:89:c9:a5:1d:24:e7:42:04:62:ea:08:22:70:
29:65:40:c5:e9:23:d6:24:6d:2d:9b:4a:f2:0b:cd:
5f:f5:93:e3:79:d7:b1:b4:7f:a9:42:b6:3b:fe:31:
d0:68:13:98:c9:b8:c5:eb:f7:4c:b0:c6:e8:09:7b:
33:00:86:67:78:dd:74:94:69:cc:53:f6:fc:6b:d3:
9b:50:76:dd:90:f3:4f:a4:30:d9:e3:61:b6:6c:b5:
87:79:69:21:88:ac:a5:cb:f0:72:0e:57:0d:ac:1a:
a0:bf:0b:ae:0c:17:cc:0c:50:65:a7:7a:0a:9b:20:
d4:77:01:4d:8a:aa:55:2b:09:2c:a0:7e:4a:ac:88:
b5:79:22:a3:e3:d5:f8:6b:e5:55:c9:de:bc:e6:42:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CF:30:9C:3E:C5:04:CE:95:3C:AC:58:00:B1:7F:27:3F:38:C1:C5
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FM8wnD7FBM6VPKxYALF_Jz84wcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4540::/29
2a11:5980::/29
2a11:62c0::/29
2a11:7b00::/29
2a11:8740::/29
2a11:bbc0::/29
2a12:d40::/29
2a12:8580::/29
Signature Algorithm: sha256WithRSAEncryption
47:0b:95:b9:b8:35:a0:9b:9b:4d:e0:85:d5:8d:2b:de:a9:c9:
11:18:62:d8:e8:5d:5e:34:e6:37:34:13:1c:58:b7:58:bb:d9:
cf:fd:e9:f5:a3:05:19:1d:0b:bd:4b:9c:51:ad:fb:c2:0f:18:
5c:83:fd:64:ce:2a:0c:73:a3:64:c0:15:59:6d:08:54:f8:f5:
91:d2:7e:6c:0b:fe:94:a2:93:f2:ad:7e:f1:25:ec:af:a4:23:
e3:b5:c5:32:d6:be:ad:a0:13:04:7e:73:16:ac:1a:00:f0:89:
b5:04:f2:1c:fa:11:dc:d9:85:9f:7d:08:ed:38:39:85:95:6e:
e8:1c:2c:0c:42:45:2d:50:e4:f7:e8:f5:a2:fa:3b:d9:03:49:
a1:57:3b:22:18:8e:cd:b5:9c:6f:ee:5c:9a:e0:38:cb:1a:4f:
c9:9d:13:23:84:0f:0a:ef:87:11:38:9c:00:59:67:c6:bd:a5:
52:95:44:db:b1:20:91:aa:61:f8:f0:aa:2a:b4:37:86:75:df:
7b:a9:8c:ff:ea:ab:cf:5f:ae:bf:0b:c1:33:79:03:1b:b3:9c:
57:1a:13:f1:b6:ff:df:a5:1a:25:15:fc:ef:27:cf:46:50:b7:
96:2d:5b:90:2e:d9:f7:0e:67:8a:6c:da:5a:21:04:ba:89:2f:
36:6c:2c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:13 2025 by rpki-client