Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/LzJwvEO-t9PNGWP-q4VoON7tRQk.roa
File: LzJwvEO-t9PNGWP-q4VoON7tRQk.roa (raw, json)
Hash identifier: P8Gj51YDuJDtPtnIlhV3tZbVxde/QmhuoqJ8BZhitlI=
Subject key identifier: 2F:32:70:BC:43:BE:B7:D3:CD:19:63:FE:AB:85:68:38:DE:ED:45:09
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 01936A6739715B8B1236C948422CB83F4527
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/LzJwvEO-t9PNGWP-q4VoON7tRQk.roa
Signing time: Tue 26 Nov 2024 21:36:10 +0000
ROA not before: Tue 26 Nov 2024 21:36:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200373
IP address blocks: 2a14:6380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:67:39:71:5b:8b:12:36:c9:48:42:2c:b8:3f:45:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Nov 26 21:36:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f3270bc43beb7d3cd1963feab856838deed4509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:80:fc:fb:ed:ee:17:43:45:52:93:aa:d3:
fb:34:72:c7:ec:61:2b:7c:66:25:a0:dc:16:b3:4a:
c2:2e:86:ce:92:9e:b1:a9:63:c7:c1:c0:1d:d4:f3:
ca:1d:09:cc:8d:a3:57:d2:76:4f:6c:02:a9:c6:ce:
16:07:14:bf:3a:49:66:e6:84:ba:75:7c:3b:ed:62:
49:08:cb:e0:15:72:67:b6:a0:03:e9:91:3b:98:b5:
fc:3b:e1:62:f3:70:e1:af:84:ac:93:e2:e0:3d:27:
74:8c:f9:f9:a3:e8:e5:c3:a8:88:d2:6d:2b:d1:bc:
22:da:cf:2e:36:28:6a:bb:01:72:d1:06:82:13:3b:
5b:a3:a6:f1:65:04:6f:e8:9a:e9:7e:99:b5:89:ad:
e5:c9:2c:25:ac:d0:23:1d:fc:96:94:95:61:ec:72:
1d:52:5a:17:11:51:d5:99:72:27:24:f3:82:50:01:
12:90:82:cf:71:2a:7d:b6:ad:53:0c:f5:a9:8a:05:
b6:dd:4a:c7:f7:3a:c5:f3:a7:64:30:f8:60:37:78:
83:30:7d:e2:70:27:5e:12:4e:53:ee:61:90:b3:ce:
07:7b:d4:c3:62:86:9b:a0:a5:f5:bb:ca:45:a2:d1:
9a:d4:65:5e:40:0a:f5:dd:f7:11:54:d0:79:81:d1:
07:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:32:70:BC:43:BE:B7:D3:CD:19:63:FE:AB:85:68:38:DE:ED:45:09
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/LzJwvEO-t9PNGWP-q4VoON7tRQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6380::/29
Signature Algorithm: sha256WithRSAEncryption
44:c9:03:85:72:19:8a:75:d5:4e:e4:4f:bc:94:9e:fb:75:4c:
58:6b:dd:a1:bb:f8:a8:db:db:b5:e1:72:d4:c9:db:cf:f7:7e:
94:41:54:f7:a5:18:f9:65:0c:18:e3:a4:70:e5:32:4d:a3:96:
46:fe:6a:eb:81:97:a7:a0:9a:22:b2:5c:c9:3b:58:c5:3e:bc:
bb:93:cf:33:02:63:c7:a0:a0:24:af:61:8f:9c:1f:cd:32:f9:
ce:3a:b4:ed:e4:cd:66:a6:61:a9:a5:54:63:e3:1d:26:8b:f3:
1a:3f:6f:99:5c:04:a4:e1:f4:55:5f:ec:a0:2f:95:3a:7b:74:
18:03:16:2e:af:9d:e9:b9:d4:b0:ee:23:7e:04:f5:4c:07:aa:
7a:59:39:e5:f3:41:f6:11:fd:f0:f5:f5:da:08:48:92:a4:a7:
0e:da:2a:8b:b4:50:48:c3:29:e5:da:39:81:af:6b:09:dc:41:
b5:c6:8d:aa:95:97:3f:b0:10:47:ec:4d:d8:0d:ed:80:2c:03:
0d:5c:a6:4c:98:e6:f8:17:91:77:c0:a1:3a:9c:1d:1a:c7:2f:
f9:a9:02:a2:3c:1b:1e:20:94:df:89:67:27:30:29:af:d4:d0:
c9:48:ab:46:85:7e:1e:53:8a:01:4d:cc:15:c9:f8:1d:4a:7e:
e9:d4:78:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:02 2025 by rpki-client