Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/w7D3frL9E_kqNSgsBRGXDLacRBo.roa
File: w7D3frL9E_kqNSgsBRGXDLacRBo.roa (raw, json)
Hash identifier: bAa/9UjCK1wH6h3VxI4XwwbcVqAdTwwv/HQNN/v8Ugg=
Subject key identifier: C3:B0:F7:7E:B2:FD:13:F9:2A:35:28:2C:05:11:97:0C:B6:9C:44:1A
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 019425FDE567319C613A43A3D77250D8B49D
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/w7D3frL9E_kqNSgsBRGXDLacRBo.roa
Signing time: Thu 02 Jan 2025 07:49:43 +0000
ROA not before: Thu 02 Jan 2025 07:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215004
IP address blocks: 2a14:3244:beee::/48 maxlen: 48
2a14:3244:beef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e5:67:31:9c:61:3a:43:a3:d7:72:50:d8:b4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Jan 2 07:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3b0f77eb2fd13f92a35282c0511970cb69c441a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:66:03:a8:c2:95:ff:08:2c:22:41:02:a5:0a:
87:08:4a:4a:48:e3:43:39:e7:a8:99:e4:a0:20:9d:
0c:bf:eb:58:4b:df:6c:0f:e7:1f:7d:2b:b1:10:dc:
39:e6:07:3d:95:21:55:b5:63:ff:5f:ed:1e:f9:08:
8e:c2:f4:6f:8f:2c:b4:c1:b0:04:d8:1f:53:92:34:
b7:ad:e8:50:d8:32:50:a6:f4:97:37:b0:7e:f3:c6:
35:ee:09:99:72:63:35:63:02:8f:21:df:17:ca:2e:
af:38:89:08:48:00:81:ed:1c:62:47:7d:72:4a:b5:
45:38:a0:5f:f2:8f:12:0f:83:59:cb:90:89:f0:b1:
1e:65:e5:a4:9b:7b:cf:dc:85:6f:42:5a:ce:c4:df:
17:25:69:85:bb:91:dc:ac:b3:1f:b2:42:05:5b:5b:
68:21:f4:89:0a:77:86:11:87:cb:59:ea:23:f8:ac:
dd:c6:dc:2b:5b:c4:55:5b:b9:18:0e:4c:b9:13:d9:
6f:77:79:68:b7:b4:a0:eb:b1:ee:8b:da:c7:e7:92:
ff:d7:b8:4b:b3:ef:cf:02:48:75:10:a5:37:6a:89:
e9:0c:64:05:57:49:82:7f:93:9a:03:f4:d5:2d:e0:
61:28:26:e2:b7:9d:b4:7c:08:21:a7:07:00:88:f4:
c9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B0:F7:7E:B2:FD:13:F9:2A:35:28:2C:05:11:97:0C:B6:9C:44:1A
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/w7D3frL9E_kqNSgsBRGXDLacRBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:3244:beee::/47
Signature Algorithm: sha256WithRSAEncryption
9f:4d:23:6e:4e:c2:b8:58:18:51:d8:dd:25:7b:70:16:06:fd:
18:5e:d3:52:a7:ac:73:e7:a8:5e:e7:7d:df:04:37:6e:b1:00:
c9:ab:e4:3a:1b:5d:5f:da:e0:67:63:1f:d5:61:ac:25:37:35:
0c:bc:5a:49:8a:9d:ae:22:a2:8f:8b:f8:61:9c:c7:f3:60:9c:
d2:6e:5d:10:89:25:7a:24:5a:c5:0b:3b:70:3b:4d:f5:26:5b:
c0:c2:90:0a:ac:de:ef:d6:bd:1b:8d:f8:bb:6a:ab:7e:5c:46:
5c:6b:98:70:7c:e6:e3:57:95:f1:e3:1a:3f:b5:a2:98:ac:7f:
dd:68:61:2a:6b:7a:a0:86:cf:eb:2c:e6:57:6e:02:93:04:d2:
da:a8:08:fb:1a:9a:04:f6:c3:f3:f9:32:97:9b:ef:cd:59:b7:
7e:b9:8d:d5:1d:0b:7f:0d:bf:e5:1d:55:5e:01:26:96:1c:59:
c0:b4:6c:bd:c9:d4:3c:98:2c:54:21:87:42:2a:b9:c3:83:53:
4f:ed:85:d0:0a:65:11:db:2b:7d:4e:1c:91:ad:21:5c:62:e6:
9c:a9:55:2b:8f:a8:58:24:a0:22:e1:f3:f6:c0:97:52:d1:5e:
e0:d2:d9:41:a4:30:5b:c1:c7:7f:06:71:d1:75:ba:a9:8c:20:
2a:c7:77:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:21 2025 by rpki-client