Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/w0q3VjpYAA26KoKS-OoF_EY4OL8.roa
File: w0q3VjpYAA26KoKS-OoF_EY4OL8.roa (raw, json)
Hash identifier: NjcgvyEw+m9zGeB1dD1onCDET/1Ymu7yU7l0wd7sHLg=
Subject key identifier: C3:4A:B7:56:3A:58:00:0D:BA:2A:82:92:F8:EA:05:FC:46:38:38:BF
Certificate issuer: /CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Certificate serial: 0194266BA81CCB9DEEA97C2F9F4A0CA5DC9F
Authority key identifier: DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/w0q3VjpYAA26KoKS-OoF_EY4OL8.roa
Signing time: Thu 02 Jan 2025 09:49:37 +0000
ROA not before: Thu 02 Jan 2025 09:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200373
IP address blocks: 2a14:6380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a8:1c:cb:9d:ee:a9:7c:2f:9f:4a:0c:a5:dc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7fbd677441cbb5c0bd47bcd2f38ba192a336a6
Validity
Not Before: Jan 2 09:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c34ab7563a58000dba2a8292f8ea05fc463838bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:70:a0:4f:8c:95:c3:a3:1c:45:2b:42:59:
e7:78:1f:18:d3:a2:5f:ca:14:4a:6e:23:48:e9:c2:
17:7e:5b:6b:40:19:96:94:66:8d:75:5d:55:56:47:
b9:9b:39:63:3f:87:47:ac:78:ff:7d:f3:f3:ea:5b:
61:bf:84:67:64:1d:a9:12:89:f5:5e:ea:7d:31:8b:
ab:5c:2c:ad:7a:61:ff:5e:38:5d:7f:31:0c:f8:2c:
cf:14:fd:67:4d:ab:86:e2:c9:6d:b6:d1:1d:25:ed:
ce:da:bb:aa:8a:eb:5a:ad:f8:da:dc:c8:39:bd:36:
99:53:69:dd:e4:20:07:a4:c0:7d:38:d8:8b:7b:6e:
a8:b7:c8:c9:6e:fb:1b:7b:c5:42:d1:ed:f9:c6:5d:
81:ac:5d:94:ce:3f:9a:1b:62:24:34:a5:d4:1b:bd:
65:4c:36:d1:46:9d:ca:b9:22:d2:3e:a5:74:07:a2:
55:ea:2c:63:ec:39:2d:ba:45:8c:6a:5f:8d:45:61:
ae:b9:4d:8e:bb:e8:34:99:15:64:0a:c0:d4:6d:99:
3e:7f:97:cc:a8:68:dc:e8:f2:ca:4a:8a:31:f7:96:
e3:f6:42:2f:1e:5b:2e:53:4c:f0:f0:68:64:86:fa:
ff:fb:c6:17:eb:37:c8:08:8b:88:53:ad:b5:83:e4:
50:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4A:B7:56:3A:58:00:0D:BA:2A:82:92:F8:EA:05:FC:46:38:38:BF
X509v3 Authority Key Identifier:
keyid:DC:7F:BD:67:74:41:CB:B5:C0:BD:47:BC:D2:F3:8B:A1:92:A3:36:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H-9Z3RBy7XAvUe80vOLoZKjNqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/w0q3VjpYAA26KoKS-OoF_EY4OL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b25c3a-0c0b-4d4e-9813-76d3d480fa68/1/3H-9Z3RBy7XAvUe80vOLoZKjNqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6380::/29
Signature Algorithm: sha256WithRSAEncryption
6e:00:d7:96:12:8a:8c:78:02:57:ee:75:ab:55:fd:91:a3:3b:
bf:c0:96:92:ff:6f:82:c5:9d:41:50:88:94:11:94:43:fb:55:
98:6c:61:3a:04:85:7b:c4:67:8e:84:f4:78:90:e3:34:4e:aa:
8f:14:b5:33:ee:3f:d6:14:e8:db:67:76:be:46:43:f4:6e:6f:
14:b4:8f:fc:28:6a:e4:c3:3b:76:f6:77:d2:d5:3f:29:06:7a:
38:c9:17:7e:46:d4:52:6c:ef:87:a7:6e:4d:9e:bc:c8:73:1a:
c6:2c:34:38:72:d9:0c:5c:c2:45:77:a5:cd:78:ff:ab:55:c8:
4d:d3:fa:d4:55:b7:d4:4c:f5:6f:b9:6c:cd:8f:30:95:f1:d2:
fb:25:4e:71:03:de:b3:6c:af:60:e1:5c:d0:f8:9a:75:05:96:
cb:02:dc:c6:7c:d6:31:41:9c:95:e4:da:c0:fc:9a:cf:7e:5a:
14:15:c1:89:51:ca:6e:2a:83:66:19:03:a3:05:f0:85:a6:4e:
a8:a3:fc:69:96:0f:59:57:86:22:8d:89:c2:00:33:ec:64:60:
b2:d4:8a:f1:68:57:c3:84:aa:3b:ce:09:83:52:76:4b:9a:76:
2b:fa:c8:46:b6:54:34:61:a6:29:b5:e5:5d:a1:8f:7e:42:aa:
95:37:23:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:52 2025 by rpki-client