Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/JQfyecuTBe9b0TVcrmo-tSM3WaE.roa
File: JQfyecuTBe9b0TVcrmo-tSM3WaE.roa (raw, json)
Hash identifier: 2itfFVYv64s2jKKBdM91XUWlXntYtRrbHNJzdg5vens=
Subject key identifier: 25:07:F2:79:CB:93:05:EF:5B:D1:35:5C:AE:6A:3E:B5:23:37:59:A1
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 019425FDE49391F5B73A47EF5612C87C3303
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/JQfyecuTBe9b0TVcrmo-tSM3WaE.roa
Signing time: Thu 02 Jan 2025 07:49:43 +0000
ROA not before: Thu 02 Jan 2025 07:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a14:3244:2470::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e4:93:91:f5:b7:3a:47:ef:56:12:c8:7c:33:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Jan 2 07:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2507f279cb9305ef5bd1355cae6a3eb5233759a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:6c:54:9f:52:6a:45:a9:90:4f:59:b1:f1:
c1:8d:76:8f:2c:c0:43:53:23:80:d8:e0:db:8e:11:
39:66:2a:d7:8a:30:f7:2d:97:f0:e3:8f:24:ae:7b:
6d:e2:f3:bb:33:62:6a:ac:a9:55:e0:fa:0a:3b:77:
fb:61:62:fd:46:f6:b1:03:a8:3b:e0:76:02:2c:13:
a3:f5:64:24:26:f1:a2:02:90:cb:2e:d0:2e:a5:77:
e1:be:e3:4d:1f:0a:b7:61:33:f1:0d:d8:eb:17:f6:
55:b8:64:5f:f9:86:b6:43:d9:8a:68:29:fc:29:5e:
e4:2c:6b:63:d6:72:ce:a2:4e:c2:39:3b:3f:d4:98:
42:4d:50:0a:c8:11:8f:3a:71:df:5e:07:43:6b:78:
89:e1:91:38:16:86:fa:f2:2d:be:ca:47:d1:6e:4a:
06:3f:13:d5:31:3f:e7:b3:5b:ae:83:2b:79:0e:7e:
84:7b:6b:c7:71:4e:f2:83:38:31:fe:16:eb:f8:fe:
5a:ec:16:07:7f:e3:22:d3:82:23:71:77:0a:2c:f0:
4a:0e:5a:0a:a6:f8:84:b5:7f:d7:74:68:95:d5:5a:
3f:90:1b:08:bc:d8:43:9c:00:f9:4a:28:af:80:ca:
37:2b:3f:ca:b5:0f:f3:c3:25:0a:27:7d:15:7c:da:
c8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:07:F2:79:CB:93:05:EF:5B:D1:35:5C:AE:6A:3E:B5:23:37:59:A1
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/JQfyecuTBe9b0TVcrmo-tSM3WaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:3244:2470::/48
Signature Algorithm: sha256WithRSAEncryption
49:5d:47:ee:ab:26:d4:c7:6d:c7:b8:20:fb:b8:fa:f4:8d:72:
3f:91:ce:1e:fb:8d:99:0a:33:c4:c2:a9:b7:0b:55:f7:b4:44:
9e:87:5e:32:91:5d:53:e4:ef:e0:e1:47:4b:4a:e2:92:f2:61:
80:f2:d9:46:6a:d8:a7:b8:1a:30:cc:be:43:21:d5:db:1d:60:
ef:d4:eb:01:aa:75:2e:58:fc:01:e4:15:dc:2c:54:b0:d9:67:
42:97:c1:9a:fc:a9:b5:84:0a:bb:fe:80:31:2d:9d:89:4a:65:
75:a6:bb:1d:c8:5f:4b:dd:59:7b:3b:d3:71:09:d1:33:ae:69:
a3:e4:0b:c9:f7:5f:d4:08:96:8d:e8:b8:ff:bb:df:fb:6b:99:
4a:f1:2c:c8:f1:12:d1:12:86:08:53:59:51:23:bc:0e:1c:42:
f7:10:a6:81:4f:f7:ac:cb:8b:65:91:14:e9:4f:52:5e:ee:09:
47:25:82:47:6f:23:80:bb:2f:1f:18:3d:10:a9:6d:4a:0a:7b:
0c:26:25:96:1b:42:2f:3c:dc:fb:75:cc:6f:a3:65:e7:12:52:
08:71:e8:08:ec:88:7e:b9:ab:5b:03:6f:b2:9b:92:71:9b:ca:
be:d4:44:82:5d:0a:3f:77:64:ec:40:33:ca:bb:de:7c:1d:65:
0f:b2:2e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:36 2025 by rpki-client