Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/35pRxGoVQG9wCCugmdi_wHXPreU.roa
File: 35pRxGoVQG9wCCugmdi_wHXPreU.roa (raw, json)
Hash identifier: TpOjG7pJi5My5YC+/ik0SxLZNekCv+pJLIkZcOs1S1w=
Subject key identifier: DF:9A:51:C4:6A:15:40:6F:70:08:2B:A0:99:D8:BF:C0:75:CF:AD:E5
Certificate issuer: /CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Certificate serial: 018C6A91E23EB442690098ADF0D2386A972A
Authority key identifier: 60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/35pRxGoVQG9wCCugmdi_wHXPreU.roa
Signing time: Thu 14 Dec 2023 23:03:14 +0000
ROA not before: Thu 14 Dec 2023 23:03:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15924
IP address blocks: 2a14:2b80::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6a:91:e2:3e:b4:42:69:00:98:ad:f0:d2:38:6a:97:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Validity
Not Before: Dec 14 23:03:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df9a51c46a15406f70082ba099d8bfc075cfade5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:1f:98:5f:89:3c:56:3d:05:43:e1:eb:c4:
fb:62:74:1d:2d:b4:5a:38:11:95:15:13:ed:0c:3b:
4b:2c:5c:9a:0e:44:1a:9b:1b:84:04:f3:cd:8b:71:
eb:46:d3:82:ff:4d:f6:cd:99:37:9e:91:d0:26:c0:
57:f1:71:47:39:09:9a:54:e7:8d:b8:45:f5:be:94:
b9:e1:3e:b1:27:51:d9:32:c2:67:81:ef:22:1e:1b:
11:98:a2:74:74:bb:8c:6d:25:f1:b2:99:2f:a4:40:
12:0d:62:dc:a4:72:49:af:4e:14:91:26:a4:03:f6:
7d:76:e8:47:aa:9f:01:cc:9b:74:f6:8c:aa:f2:af:
bf:85:75:cf:29:4c:54:a8:ef:23:a0:4c:d8:5d:33:
0e:13:5e:bd:36:38:51:35:d8:38:28:b7:cb:05:95:
9e:52:5b:0f:44:20:9a:1c:a2:65:8f:53:16:40:79:
1e:38:ec:ac:ff:01:65:d3:66:2f:22:81:9c:fe:c6:
c9:6b:cc:85:ff:73:f8:db:a7:a7:e6:09:8f:1f:24:
3e:0f:9f:9e:c2:db:cc:60:fb:e8:56:f8:bf:4a:fe:
72:0e:45:5e:4a:53:3b:b4:f7:91:36:0b:37:dd:08:
80:58:bc:08:9e:14:3a:1f:1b:90:b3:82:e2:e2:32:
2f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9A:51:C4:6A:15:40:6F:70:08:2B:A0:99:D8:BF:C0:75:CF:AD:E5
X509v3 Authority Key Identifier:
keyid:60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/35pRxGoVQG9wCCugmdi_wHXPreU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/YB3cYHmSY_-5vQ5e6whyhD3uanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2b80::/29
Signature Algorithm: sha256WithRSAEncryption
5b:f3:1e:58:68:23:eb:c6:ca:d0:76:af:66:44:ee:27:2a:b4:
e0:48:80:36:55:d1:68:eb:ee:c8:55:0e:cf:de:04:b2:db:11:
ba:71:fe:ff:fa:48:51:c3:bf:c6:da:70:a7:71:91:da:4a:03:
44:20:bb:a7:55:19:ab:68:61:c3:03:11:71:84:92:5a:5b:4b:
dc:11:49:47:77:a4:d9:fe:d2:16:99:ec:d1:fe:02:c7:28:7f:
47:3a:ca:50:26:27:b4:50:3e:70:f2:0f:9f:b2:47:e0:3a:0d:
67:93:94:b9:27:e1:2c:90:30:b7:a6:0d:f7:51:fd:e9:73:22:
89:d0:aa:09:97:9b:89:1c:74:ec:6f:eb:cc:71:32:ca:28:03:
ef:e8:68:40:a5:f6:c7:e7:6e:78:7e:33:fc:e7:ce:d3:05:06:
c2:84:c0:8d:7d:84:d1:ff:a4:75:04:45:44:bd:1e:32:1f:82:
6c:6d:59:c5:40:84:b3:6e:f3:e4:8c:fb:26:cb:7c:1f:8d:d2:
b6:8e:f2:4f:cd:cd:e1:8f:56:b8:b9:82:11:84:5b:04:e0:d9:
ad:88:e4:68:7b:28:39:84:7d:f0:82:54:2c:67:17:34:68:da:
dc:92:a5:45:90:8e:73:02:1e:20:46:d5:f9:d7:2a:0f:7b:3d:
25:b9:02:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:26 2025 by rpki-client