Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/NtYa1Umtyr5oHHOGTI8mNq8yiKA.roa
File: NtYa1Umtyr5oHHOGTI8mNq8yiKA.roa (raw, json)
Hash identifier: 2lIRzTcoKblyI530CdG4zJKfyiRc1QS8LRAiabk9NYI=
Subject key identifier: 36:D6:1A:D5:49:AD:CA:BE:68:1C:73:86:4C:8F:26:36:AF:32:88:A0
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 018CDF6F151BA081CDB3DEE1C819D5797776
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/NtYa1Umtyr5oHHOGTI8mNq8yiKA.roa
Signing time: Sat 06 Jan 2024 15:40:48 +0000
ROA not before: Sat 06 Jan 2024 15:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 2a14:6380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:df:6f:15:1b:a0:81:cd:b3:de:e1:c8:19:d5:79:77:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Jan 6 15:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36d61ad549adcabe681c73864c8f2636af3288a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fb:8e:09:f4:4f:2e:69:ff:0c:0a:80:d2:8f:
96:67:1a:68:cf:d9:87:fa:06:fb:00:e6:21:94:96:
2b:a2:bc:f6:67:79:23:f8:07:eb:8a:4c:06:85:86:
cd:66:92:1c:f3:7f:6c:73:e2:9a:8e:80:12:ee:a2:
1c:03:96:64:4c:73:24:c9:ea:7e:ea:50:3f:11:19:
a7:1a:2d:64:21:d5:45:05:48:a0:12:af:4e:dd:1a:
5e:bc:0e:94:b2:40:a4:d9:03:e3:d4:fa:c3:e4:32:
7d:39:e1:f4:45:eb:86:d3:03:18:bd:4d:14:7e:20:
2d:2b:a1:c7:60:91:87:7b:6b:9c:4b:74:4e:19:bb:
29:27:ba:10:12:65:16:fb:1f:ca:eb:0a:0a:eb:8f:
75:99:5f:32:34:35:e3:d0:8a:8f:ab:d5:0e:1b:7b:
96:92:a1:04:8e:82:e2:80:2a:38:27:af:31:7f:3e:
c2:93:28:c8:0e:52:81:a4:1a:2e:4c:db:ec:81:29:
35:64:6a:ea:57:1d:f2:57:84:f4:00:1e:45:33:a7:
4f:ad:17:48:92:d6:a8:a2:16:07:e8:7f:6e:37:d5:
4e:b2:f4:be:05:36:a4:45:f7:8c:5e:68:c2:b2:49:
8d:27:1f:36:87:7a:6d:bb:08:c3:7a:61:3e:f7:94:
d7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D6:1A:D5:49:AD:CA:BE:68:1C:73:86:4C:8F:26:36:AF:32:88:A0
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/NtYa1Umtyr5oHHOGTI8mNq8yiKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6380::/29
Signature Algorithm: sha256WithRSAEncryption
30:09:20:8c:ee:4a:f8:30:a3:43:23:5c:2b:68:03:fd:f8:37:
48:08:79:8a:1a:68:d8:9c:a9:1d:4e:0a:98:c4:e8:9e:5a:7c:
f3:33:df:fd:20:c4:90:6b:ec:64:de:cc:b8:80:62:e8:25:5f:
d4:8f:20:9e:9f:eb:4e:76:0b:eb:36:fa:d6:1a:1c:e7:fd:bd:
ca:95:3e:c7:68:d1:26:f6:2e:fc:cc:ab:b6:48:6f:ac:29:7b:
0b:47:38:25:b5:19:ce:11:02:75:3f:6e:dc:37:75:6b:ea:43:
27:91:22:db:1a:c0:39:2e:95:23:97:ab:89:ea:d6:d7:d7:66:
ab:fb:68:9e:3d:da:18:45:d9:8a:4a:03:5c:69:f8:57:c8:6e:
f1:50:71:91:e3:87:e7:f0:7c:33:96:b0:7a:bc:78:8b:df:fd:
cb:5b:1c:fd:cc:55:4e:47:5b:cc:24:e3:1d:e8:41:67:11:e3:
66:a7:4e:a6:89:5e:09:7b:77:31:72:b9:c9:d9:93:3a:17:30:
b2:83:53:04:a1:46:7d:ed:67:fe:28:0e:48:27:0f:0f:6d:c4:
7a:1b:f1:d6:ea:db:84:76:aa:e4:43:d0:9c:29:d9:00:fc:9c:
13:7a:d3:96:2c:b4:cb:a8:f6:c5:86:df:f5:c7:36:22:0b:86:
8d:99:32:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:14 2025 by rpki-client