Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/t_igGhLq7IzbkQZnR3SxFZTI3tA.roa
File: t_igGhLq7IzbkQZnR3SxFZTI3tA.roa (raw, json)
Hash identifier: 6dLogSW/OhD3Yu1E3Y4ZKNcTx1tRF0Y/a9V0hhFyQW0=
Subject key identifier: B7:F8:A0:1A:12:EA:EC:8C:DB:91:06:67:47:74:B1:15:94:C8:DE:D0
Certificate issuer: /CN=8faccbac71477b940e5cd4103e3eee61db615915
Certificate serial: 019425FDEBEE9266E816671446673911C42F
Authority key identifier: 8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/t_igGhLq7IzbkQZnR3SxFZTI3tA.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a14:7240:a10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:eb:ee:92:66:e8:16:67:14:46:67:39:11:c4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8faccbac71477b940e5cd4103e3eee61db615915
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7f8a01a12eaec8cdb9106674774b11594c8ded0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ef:e5:9a:3c:6d:68:36:2d:5b:23:5f:46:79:
e4:4b:c4:0b:51:74:81:78:29:bb:af:1b:d4:58:80:
70:cd:58:d9:e4:cc:25:b3:9f:9b:66:d3:84:69:39:
d6:ed:2b:82:84:6c:14:6c:6e:d4:1c:c3:5f:15:44:
53:41:ec:b1:4b:b9:db:26:e5:84:ca:9b:e0:69:99:
03:ce:f1:42:02:44:ce:b5:28:85:5f:b4:cd:c0:07:
42:27:78:b7:f7:07:98:fa:0f:34:b7:9e:28:17:b4:
57:cb:99:e2:8b:71:83:81:cf:db:c9:7e:1c:24:fb:
58:04:c7:55:64:ee:8a:2b:8e:4d:da:cc:00:5b:d5:
31:10:0d:68:cd:ba:8b:aa:b8:73:1a:d2:6c:7b:83:
be:7f:5d:c2:bb:96:9e:8c:58:46:70:af:08:d4:74:
dc:80:e7:c8:4c:1a:41:ad:07:47:f7:ec:6d:c9:8f:
4c:75:b5:49:48:81:17:f7:1e:a0:53:7a:20:01:6b:
3f:3b:c7:d7:27:f5:96:5b:ae:be:10:23:af:3f:c8:
19:9c:49:af:57:4d:86:ec:fa:7b:f8:87:ee:13:8b:
a2:a8:d6:80:bb:1f:d1:e5:e9:da:ad:8d:43:51:12:
e1:c7:f1:cc:a7:d1:0a:67:6d:18:1b:98:73:1d:89:
6a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F8:A0:1A:12:EA:EC:8C:DB:91:06:67:47:74:B1:15:94:C8:DE:D0
X509v3 Authority Key Identifier:
keyid:8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/t_igGhLq7IzbkQZnR3SxFZTI3tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7240:a10::/48
Signature Algorithm: sha256WithRSAEncryption
a9:53:ad:f7:8e:8a:7f:bf:56:b4:77:c4:c7:55:3e:a8:b8:43:
d3:af:da:d6:81:00:15:4c:ae:a9:60:b3:b1:1a:53:9e:12:ad:
71:ad:80:20:1f:4f:02:c9:e7:75:a3:fd:3d:47:98:c7:2b:19:
b2:e9:14:32:78:95:f2:48:68:b6:b3:90:55:3b:28:0d:cb:d0:
94:48:4d:4e:a8:f2:15:a9:5d:c5:bb:04:ea:47:aa:00:3e:cf:
40:10:9e:c4:3c:dd:79:aa:98:d5:0c:8d:14:55:53:96:45:01:
fb:70:84:3f:37:a3:8f:c0:9f:2e:c7:3a:0b:c4:5d:4a:cb:fc:
c5:41:01:ec:3a:37:a5:27:86:db:ae:85:c3:99:9b:62:1e:81:
53:ec:54:b4:e7:ce:66:48:05:11:24:fa:ab:72:d0:74:2b:8e:
4e:77:2f:14:f8:e4:11:13:ec:52:0c:aa:2e:4b:26:a6:f5:11:
9f:93:b8:22:a9:61:c0:e6:cb:2f:eb:41:78:5c:0d:c2:1e:a0:
d5:0a:f3:f3:31:af:00:94:82:09:59:22:65:e1:e3:5b:bc:de:
38:35:d2:b8:2b:e8:ce:2a:aa:70:4c:96:cc:8b:04:89:57:b3:
7b:e5:ad:c2:54:f3:c9:c7:5e:ec:a6:af:a3:af:eb:a0:41:ef:
ae:14:77:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:30:14 2025 by rpki-client