Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/V2RodRkZh7eC6bXk6s50iKPnz20.roa
File: V2RodRkZh7eC6bXk6s50iKPnz20.roa (raw, json)
Hash identifier: flwyJ5HDdlUN6kAnMIhAje5bgLCjv6WkxqxL4dovgJw=
Subject key identifier: 57:64:68:75:19:19:87:B7:82:E9:B5:E4:EA:CE:74:88:A3:E7:CF:6D
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 019427474897D3F8FA8BA3B37DFD37D04620
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/V2RodRkZh7eC6bXk6s50iKPnz20.roa
Signing time: Thu 02 Jan 2025 13:49:30 +0000
ROA not before: Thu 02 Jan 2025 13:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 2a14:4340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:48:97:d3:f8:fa:8b:a3:b3:7d:fd:37:d0:46:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Jan 2 13:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57646875191987b782e9b5e4eace7488a3e7cf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:76:5c:74:33:01:0b:6e:95:db:55:34:3b:
af:d3:8b:c1:81:7d:7d:b9:66:9c:7e:b2:13:cd:2b:
21:b0:c8:ee:9f:5d:6e:fa:2a:6b:f1:59:36:b7:2c:
6e:96:8c:52:ee:e0:69:dd:c4:b5:7a:f1:69:a3:20:
6b:4c:e0:67:7b:f5:00:91:f6:d1:5a:2f:91:70:de:
36:45:2d:ad:74:d2:18:5a:3d:64:1c:0a:5b:74:de:
9f:34:12:a0:81:aa:90:17:83:9a:87:69:55:b3:b1:
d3:c8:49:2b:5d:83:81:41:82:57:33:98:43:db:65:
0d:bc:10:d1:be:5b:3c:f6:4f:34:da:d4:50:1f:34:
dc:69:c1:39:2e:df:af:28:6d:78:17:75:17:bf:c8:
eb:60:77:cc:3c:9a:50:a9:6b:26:52:5f:c3:ab:84:
d9:9d:d5:f2:60:c6:6e:2d:ae:c9:61:96:5a:58:8c:
9b:b8:ff:f2:c7:40:51:af:14:dc:2f:a8:64:f1:78:
4d:c0:5a:af:f1:77:14:7a:ec:80:4c:36:1a:8a:c2:
01:09:cc:ba:5d:22:f8:d6:a6:0e:91:e9:7b:f8:f6:
11:cc:b3:eb:24:f3:c7:2f:33:fc:b2:f6:ce:2d:e7:
f4:be:06:ff:e8:ba:fc:6b:b8:43:f4:22:0c:ba:65:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:64:68:75:19:19:87:B7:82:E9:B5:E4:EA:CE:74:88:A3:E7:CF:6D
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/V2RodRkZh7eC6bXk6s50iKPnz20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4340::/29
Signature Algorithm: sha256WithRSAEncryption
95:ea:e4:5e:30:c5:9c:74:63:61:d2:3f:04:03:f5:21:56:9f:
1d:dc:47:4b:23:d4:5e:59:0a:6d:fa:be:44:fe:fe:83:a9:22:
91:c8:e0:64:53:c7:27:d7:bb:a9:f8:4f:ac:3b:11:58:2d:db:
5f:6a:8f:9f:c9:91:04:5f:1b:1a:48:7e:de:e0:96:b4:fc:e8:
30:c1:ea:63:e1:b8:90:fe:ce:f4:b8:0b:aa:66:5a:86:66:a9:
ea:48:44:49:f5:4d:4a:a5:5b:c9:4c:cd:53:cf:63:70:fb:fe:
6b:6e:d9:62:8e:66:d2:27:de:21:89:7e:c9:e0:d4:31:0f:0e:
65:54:fb:55:e7:6f:69:ed:0a:98:8d:34:35:af:e5:b0:05:67:
f6:8f:ff:11:42:62:fa:f9:3d:67:e1:0c:8b:1d:0c:98:28:69:
a5:d2:2e:86:d0:2e:01:59:3b:d7:5e:e5:ca:8f:a9:7c:9b:a0:
50:36:e7:1e:09:50:77:6e:06:3d:9d:ce:26:bc:7d:63:3b:2b:
6e:7e:5a:0c:2e:0e:82:37:48:29:dd:b2:1e:18:0c:91:63:3a:
39:2c:de:2b:fe:49:eb:d6:53:91:48:eb:e7:da:84:83:f1:7c:
d3:33:21:79:44:25:bb:94:99:fa:a2:f8:7d:d0:a8:0d:2f:a3:
43:43:52:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:00:15 2025 by rpki-client