Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/K4R2wbla95DXju27vgEj2IYahII.roa
File: K4R2wbla95DXju27vgEj2IYahII.roa (raw, json)
Hash identifier: oVwWblaprncMfsgnEdqlxFveHCedyBjk+q0e8GaCPaQ=
Subject key identifier: 2B:84:76:C1:B9:5A:F7:90:D7:8E:ED:BB:BE:01:23:D8:86:1A:84:82
Certificate issuer: /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Certificate serial: 0194221FD7BF098CE4F6656F01793374036D
Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/K4R2wbla95DXju27vgEj2IYahII.roa
Signing time: Wed 01 Jan 2025 13:48:19 +0000
ROA not before: Wed 01 Jan 2025 13:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a14:6:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d7:bf:09:8c:e4:f6:65:6f:01:79:33:74:03:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Validity
Not Before: Jan 1 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b8476c1b95af790d78eedbbbe0123d8861a8482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:41:cc:0e:e7:88:23:9e:fe:27:13:48:c3:
29:48:da:da:cb:d6:49:1d:e0:0c:c1:70:6d:7d:a3:
3b:97:fb:ef:e8:aa:48:ea:bd:6d:5e:e1:14:57:51:
00:da:76:9c:41:fb:35:d9:4a:d1:ee:8d:aa:38:98:
d1:1e:6f:18:3d:f9:cb:8a:d4:1c:0f:2a:b3:3c:1e:
d0:3c:99:e1:df:c5:fe:f4:a7:44:e7:73:64:0d:bd:
5b:33:ed:75:df:23:5f:5d:36:ba:60:67:c8:1c:d4:
35:d5:0a:91:27:ed:c4:9a:63:3c:e0:4d:78:81:46:
16:5e:32:00:6a:9e:a9:87:41:62:c8:a4:79:74:3a:
58:7f:0c:56:e0:4a:72:0a:c5:3c:1f:9f:fb:31:42:
f7:73:cf:d2:56:95:06:09:de:d5:85:c6:38:58:77:
8f:cb:e6:55:ce:70:6f:d8:d5:22:dd:96:ad:ae:ba:
fc:5e:1d:26:d1:0a:ee:64:f9:2e:c6:50:d3:8d:72:
8b:60:4e:9a:da:57:0e:c9:3b:e7:45:58:b4:17:6f:
af:ed:6e:25:6b:c4:a9:f0:08:81:96:35:6a:8b:61:
4f:09:5a:52:03:80:8d:e6:9a:d6:86:66:de:ab:6c:
15:27:20:b9:f0:ca:f9:58:7f:52:17:d9:cb:74:d6:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:84:76:C1:B9:5A:F7:90:D7:8E:ED:BB:BE:01:23:D8:86:1A:84:82
X509v3 Authority Key Identifier:
keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/K4R2wbla95DXju27vgEj2IYahII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6:11::/48
Signature Algorithm: sha256WithRSAEncryption
5c:f2:f6:51:f7:2c:f6:ea:61:d2:6d:3f:e5:42:5b:ab:00:a0:
2f:88:dd:df:8f:e8:e1:5f:41:5c:51:63:a2:c9:51:9f:60:30:
10:4c:fc:e2:14:7e:45:54:e2:4d:7b:19:eb:96:d3:d0:56:1a:
5f:52:da:2c:b4:04:b6:fd:72:13:92:9c:b2:4c:41:00:d5:97:
be:db:c5:e8:c1:48:98:89:3d:5c:b8:7e:fe:6c:03:25:89:d2:
7d:bb:02:cf:a4:23:db:fe:3b:64:ed:b8:0b:65:bf:8a:ca:6d:
d7:77:9c:f1:bc:8d:f6:17:68:76:46:79:79:91:a1:87:d7:30:
fd:07:33:72:67:4d:18:ee:9e:4e:48:89:3e:c7:7f:8e:7c:aa:
a7:b2:a7:b9:c9:49:48:b8:6e:b8:8e:a9:2c:92:06:a5:ae:38:
78:d2:ba:9c:61:e9:4d:29:8f:4f:6c:29:30:dd:0b:0b:4b:38:
07:89:70:f0:b0:5b:54:6e:ec:05:3e:71:7d:3e:0d:c7:4c:02:
b4:12:a0:ef:1e:47:65:45:1c:b5:cf:97:12:47:b4:ab:0a:85:
ca:53:27:5e:7c:6f:ee:8c:98:11:52:04:b8:50:14:5c:95:9b:
08:ac:ee:17:d8:4d:d7:68:f2:da:7b:e3:ce:d8:2f:c4:f5:17:
fb:0c:60:92
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiH9e/CYzk9mVvAXkzdANtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjBiYTU5YjFjNzZjZjIwZGM0MzgyZTVhMjg1NGQ3MTQy
YzI2YmEwHhcNMjUwMTAxMTM0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjg0NzZjMWI5NWFmNzkwZDc4ZWVkYmJiZTAxMjNkODg2MWE4NDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32RBzA7niCOe/icTSMMpSNray9ZJ
HeAMwXBtfaM7l/vv6KpI6r1tXuEUV1EA2nacQfs12UrR7o2qOJjRHm8YPfnLitQc
DyqzPB7QPJnh38X+9KdE53NkDb1bM+113yNfXTa6YGfIHNQ11QqRJ+3EmmM84E14
gUYWXjIAap6ph0FiyKR5dDpYfwxW4EpyCsU8H5/7MUL3c8/SVpUGCd7VhcY4WHeP
y+ZVznBv2NUi3Zatrrr8Xh0m0QruZPkuxlDTjXKLYE6a2lcOyTvnRVi0F2+v7W4l
a8Sp8AiBljVqi2FPCVpSA4CN5prWhmbeq2wVJyC58Mr5WH9SF9nLdNYUcwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCuEdsG5WveQ147tu74BI9iGGoSCMB8GA1UdIwQY
MBaAFAfwulmxx2zyDcQ4LlooVNcULCa6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTkt
MjIwMGIzY2M1N2U2LzEvSzRSMndibGE5NURYanUyN3ZnRWoySVlhaElJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yOTZhNzgtMDFlMi00OTZkLWJhNTktMjIwMGIzY2M1N2U2
LzEvQl9DNldiSEhiUElOeERndVdpaFUxeFFzSnJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhQABgAR
MA0GCSqGSIb3DQEBCwUAA4IBAQBc8vZR9yz26mHSbT/lQlurAKAviN3fj+jhX0Fc
UWOiyVGfYDAQTPziFH5FVOJNexnrltPQVhpfUtostAS2/XITkpyyTEEA1Ze+28Xo
wUiYiT1cuH7+bAMlidJ9uwLPpCPb/jtk7bgLZb+Kym3Xd5zxvI32F2h2Rnl5kaGH
1zD9BzNyZ00Y7p5OSIk+x3+OfKqnsqe5yUlIuG64jqkskgalrjh40rqcYelNKY9P
bCkw3QsLSzgHiXDwsFtUbuwFPnF9Pg3HTAK0EqDvHkdlRRy1z5cSR7SrCoXKUyde
fG/ujJgRUgS4UBRclZsIrO4X2E3XaPLae+PO2C/E9Rf7DGCS
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:05 2025 by rpki-client