Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/RtwNd0kIIB4fJfHreOuMYKMR7lc.roa
File: RtwNd0kIIB4fJfHreOuMYKMR7lc.roa (raw, json)
Hash identifier: qbEtbkjwEQIcvAZsD7fY24iBMXF9LqUeMZOAB812XzU=
Subject key identifier: 46:DC:0D:77:49:08:20:1E:1F:25:F1:EB:78:EB:8C:60:A3:11:EE:57
Certificate issuer: /CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Certificate serial: 0194258F45C05C57CFAD3868F83356FAC13C
Authority key identifier: CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/RtwNd0kIIB4fJfHreOuMYKMR7lc.roa
Signing time: Thu 02 Jan 2025 05:48:53 +0000
ROA not before: Thu 02 Jan 2025 05:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 2a14:4040::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:45:c0:5c:57:cf:ad:38:68:f8:33:56:fa:c1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Validity
Not Before: Jan 2 05:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46dc0d774908201e1f25f1eb78eb8c60a311ee57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:c9:cc:bb:1e:36:70:c3:1f:43:37:e2:10:
2d:18:e2:00:ef:68:9f:40:86:b8:65:72:81:24:e7:
16:3e:68:1b:59:f2:d8:0a:99:9e:ad:8e:96:34:d7:
23:bb:eb:79:82:c9:00:3d:b9:23:af:30:05:61:c3:
1c:62:08:9f:50:97:ae:02:07:a4:f3:0d:83:39:7b:
4f:73:b3:7b:e4:27:d3:0d:16:9f:b4:e1:fa:c0:53:
20:c7:56:d7:14:34:0b:3c:4f:e7:50:95:fb:b4:73:
32:7f:ce:40:2c:40:25:a2:1f:29:d6:f7:41:eb:22:
84:86:c8:8a:2a:6c:6b:4c:ad:17:e7:72:95:28:61:
6e:88:c8:6b:51:5a:02:1c:9e:50:44:d2:b1:e1:94:
9b:7a:3c:72:12:ea:47:11:53:13:84:43:9e:44:d2:
f1:ec:4a:28:9b:76:f3:39:1a:95:46:96:66:24:dd:
13:88:41:49:2f:e3:73:05:1a:e1:e7:13:df:a3:d1:
c7:11:08:09:41:1a:06:d4:39:75:1d:76:b4:a9:fa:
3b:2d:c1:37:a7:d7:fa:5c:9b:71:f0:23:2a:45:a2:
3d:73:1f:52:7a:4c:2a:02:c0:a4:c1:46:16:36:74:
92:06:9d:9b:4f:03:cb:b3:8a:e3:fc:6a:7d:02:bd:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DC:0D:77:49:08:20:1E:1F:25:F1:EB:78:EB:8C:60:A3:11:EE:57
X509v3 Authority Key Identifier:
keyid:CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/RtwNd0kIIB4fJfHreOuMYKMR7lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4040::/32
Signature Algorithm: sha256WithRSAEncryption
6b:b9:54:59:ea:a2:52:01:25:cc:1a:76:29:34:04:72:61:d9:
96:09:75:b3:30:5d:25:1e:e4:c2:f5:09:2e:db:b8:e8:9f:c5:
c1:54:be:bd:54:bc:f5:f8:4b:bc:fe:b9:e5:a2:7a:8c:68:b0:
0c:8f:40:1b:22:3e:db:d6:57:9f:25:79:73:48:b4:70:e4:b1:
8d:5f:e9:ca:f0:b6:8b:22:25:3c:09:36:35:d3:3b:b1:fb:f8:
04:fb:20:cf:68:0d:79:81:b8:9e:f4:c0:2c:14:c9:4b:e1:db:
f5:13:ae:90:8b:80:52:78:67:55:53:46:af:96:d5:5a:f3:97:
cf:4d:66:36:8f:a8:c3:be:ab:57:b3:1d:32:d2:94:ff:f1:d6:
4a:a9:63:00:eb:9a:cc:92:ef:0a:b3:00:4f:0d:e8:53:7e:6f:
58:85:7f:6e:7a:59:8a:4d:6f:58:65:db:ab:27:3b:95:89:c3:
fe:57:c1:c5:91:d2:5b:76:e8:5e:48:e7:47:b8:b9:30:37:85:
02:69:d6:41:2d:ac:5b:e4:36:0c:3b:86:a1:9b:12:e9:82:f8:
5f:12:f7:de:95:aa:10:fe:18:be:cb:f7:59:bb:d0:0a:61:1d:
c5:f3:cc:d8:91:cf:14:9c:99:68:04:b5:ef:ea:73:9a:05:44:
d3:9f:7b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:37:33 2025 by rpki-client