Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/RTeZiihjKEzt2TLGnOmQ8oRjSPs.roa
File: RTeZiihjKEzt2TLGnOmQ8oRjSPs.roa (raw, json)
Hash identifier: aWhFQUbL4CRH7v/J2YBtfu3XuSn55KY+CtOoiiD5pxA=
Subject key identifier: 45:37:99:8A:28:63:28:4C:ED:D9:32:C6:9C:E9:90:F2:84:63:48:FB
Certificate issuer: /CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Certificate serial: 018E9E718BCB8D84BFD8E5DEC31E0C97D127
Authority key identifier: 6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/RTeZiihjKEzt2TLGnOmQ8oRjSPs.roa
Signing time: Tue 02 Apr 2024 10:53:45 +0000
ROA not before: Tue 02 Apr 2024 10:53:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216213
IP address blocks: 2a14:1840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:71:8b:cb:8d:84:bf:d8:e5:de:c3:1e:0c:97:d1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6b9a8241f08fff86c06e5c0ef1ecced643fef3
Validity
Not Before: Apr 2 10:53:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4537998a2863284cedd932c69ce990f2846348fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:15:d5:95:98:a8:1c:2f:2d:22:48:47:a9:19:
de:4c:36:a6:20:ed:3a:af:3c:1e:50:69:5e:81:2d:
5e:42:c8:67:c0:4d:29:24:ed:c4:25:f5:89:63:71:
43:3a:72:f1:e4:c5:7f:43:58:a3:8a:e3:25:18:50:
2a:f0:6c:1a:ab:d0:ea:ae:69:c3:a6:9f:62:25:83:
87:9a:58:a7:f0:73:ce:e9:e3:e9:c4:ee:51:04:74:
59:59:e6:1d:f2:bb:06:1a:0f:13:e8:31:b9:bf:b2:
50:2d:70:01:26:5f:84:61:d8:62:8c:92:ef:d4:49:
5d:ac:c0:99:2a:aa:c3:54:15:db:be:ff:6e:98:91:
3a:72:52:d6:03:54:21:73:76:fb:17:e7:94:04:3c:
4f:48:75:e0:41:aa:5e:a5:a8:2f:56:56:74:04:f0:
c6:95:b8:eb:8d:a0:50:94:72:b9:c6:db:b8:a0:7e:
c7:e0:02:b9:00:ca:39:a6:9c:3a:49:a3:86:1a:88:
78:37:5f:7f:d6:51:e6:9e:aa:88:91:76:09:ca:32:
fd:b9:6b:96:4f:a4:3f:11:54:5f:c5:db:f3:29:b8:
2c:d4:b1:d0:d2:38:a6:3e:49:db:93:22:90:28:06:
49:7a:47:1b:58:c6:39:b6:78:d8:98:63:a3:f1:42:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:37:99:8A:28:63:28:4C:ED:D9:32:C6:9C:E9:90:F2:84:63:48:FB
X509v3 Authority Key Identifier:
keyid:6B:6B:9A:82:41:F0:8F:FF:86:C0:6E:5C:0E:F1:EC:CE:D6:43:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2uagkHwj_-GwG5cDvHsztZD_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/RTeZiihjKEzt2TLGnOmQ8oRjSPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7e5d60-7041-49b9-820b-fc836eb8300b/1/a2uagkHwj_-GwG5cDvHsztZD_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1840::/29
Signature Algorithm: sha256WithRSAEncryption
62:7f:fc:f9:f2:4f:4f:d8:72:6c:5a:f5:22:d0:4d:c5:8e:e0:
d1:ee:f5:f9:ba:ab:86:83:21:35:b3:d0:b7:bc:94:ce:60:15:
ca:c0:5b:be:1f:f8:c5:8d:aa:31:a8:25:51:99:1d:8d:e0:a2:
47:f3:04:3b:91:f0:2c:5f:3a:73:96:d8:0b:5c:37:9b:68:f6:
10:22:d7:16:e4:ae:ea:50:34:fe:57:12:b0:7f:17:de:da:91:
c1:cb:e8:35:cb:29:95:1e:73:76:5c:07:79:d5:59:ba:d3:15:
1c:08:f1:cb:2e:b4:7e:31:85:38:6a:6b:76:15:cd:76:d9:35:
4a:e3:74:32:3d:fc:39:53:69:fc:02:c5:2a:c5:61:24:44:08:
17:93:9e:11:83:0c:26:1a:55:1b:c7:b7:11:dc:97:9a:71:61:
ac:fe:12:6a:50:e6:63:34:9f:8d:eb:d1:69:01:1d:00:33:f0:
0e:93:5b:b1:2e:91:14:c1:90:37:de:3d:73:fd:15:c4:40:53:
a8:c0:7b:20:88:81:5e:7f:11:e9:76:38:a1:98:90:3b:0f:b5:
05:ff:69:55:80:2f:0b:27:61:4e:6e:56:2f:83:74:4b:4f:a4:
e9:4d:3e:40:54:1d:46:9a:3d:a5:ee:6b:a3:f5:4b:b1:ac:78:
74:45:59:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:49 2025 by rpki-client