Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3274ff-66c3-4ee4-b88d-63fd8236506f/1/9pIcoN5cYhttHP9hV4BjUiRl8vU.roa
File: 9pIcoN5cYhttHP9hV4BjUiRl8vU.roa (raw, json)
Hash identifier: bMkF7oC21H43y6s+l+6W+502VaTAGMrmehcbZO/+7EE=
Subject key identifier: F6:92:1C:A0:DE:5C:62:1B:6D:1C:FF:61:57:80:63:52:24:65:F2:F5
Certificate issuer: /CN=bbc4399b412a5ac72627fc4b3cb4f842e4411454
Certificate serial: 019396C54223D27EFBEE5F734F4749AC5AEA
Authority key identifier: BB:C4:39:9B:41:2A:5A:C7:26:27:FC:4B:3C:B4:F8:42:E4:41:14:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8Q5m0EqWscmJ_xLPLT4QuRBFFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3274ff-66c3-4ee4-b88d-63fd8236506f/1/9pIcoN5cYhttHP9hV4BjUiRl8vU.roa
Signing time: Thu 05 Dec 2024 12:22:10 +0000
ROA not before: Thu 05 Dec 2024 12:22:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213279
IP address blocks: 2a14:b400::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:c5:42:23:d2:7e:fb:ee:5f:73:4f:47:49:ac:5a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc4399b412a5ac72627fc4b3cb4f842e4411454
Validity
Not Before: Dec 5 12:22:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6921ca0de5c621b6d1cff61578063522465f2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:a2:93:c7:db:a9:dc:8a:bb:8e:02:a1:ff:
0d:9d:f9:2a:d3:e0:af:9b:b9:0e:29:16:bb:a5:7e:
00:a7:80:92:08:3a:a7:20:7a:98:28:35:b6:6d:0b:
03:77:90:16:63:17:b5:fc:4a:46:69:be:4d:d5:b0:
6b:8d:b8:57:89:d4:16:db:1c:4c:55:3b:fa:12:54:
91:5d:8d:a7:45:dd:a3:99:5f:f3:65:70:f7:b3:5a:
c0:a4:a2:be:9f:d0:99:51:e4:6f:09:76:c0:cc:62:
74:fd:e0:4b:78:70:b9:9b:5d:a4:be:5b:17:62:a1:
9d:48:2a:32:98:e2:18:27:f0:39:2e:bc:2f:cb:87:
66:1a:67:f7:4b:5f:46:e5:0f:6f:cf:fc:03:97:d6:
fc:9a:f0:84:27:41:e2:07:f7:fc:35:8d:64:5a:79:
9e:6c:21:9c:47:55:a6:37:86:16:5d:a3:f4:fc:66:
7e:e4:5b:72:a8:bd:3d:42:1c:74:26:a2:20:5b:45:
8c:3b:b0:cc:b4:c4:b4:e8:df:2b:4f:a0:d1:37:19:
b0:7f:b4:0e:74:e1:4d:bc:8f:aa:f2:33:73:ed:99:
2c:5d:1a:5d:db:c7:92:52:71:70:f9:94:40:f5:c4:
07:ce:e2:10:2f:2f:a9:6e:47:54:30:12:0d:e0:9e:
27:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:92:1C:A0:DE:5C:62:1B:6D:1C:FF:61:57:80:63:52:24:65:F2:F5
X509v3 Authority Key Identifier:
keyid:BB:C4:39:9B:41:2A:5A:C7:26:27:FC:4B:3C:B4:F8:42:E4:41:14:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8Q5m0EqWscmJ_xLPLT4QuRBFFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3274ff-66c3-4ee4-b88d-63fd8236506f/1/9pIcoN5cYhttHP9hV4BjUiRl8vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3274ff-66c3-4ee4-b88d-63fd8236506f/1/u8Q5m0EqWscmJ_xLPLT4QuRBFFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:b400::/32
Signature Algorithm: sha256WithRSAEncryption
05:5d:2a:15:55:95:54:3a:95:99:ec:01:29:62:57:05:45:c0:
82:dc:cb:34:59:8b:43:a6:37:c3:dd:97:06:bc:eb:67:3e:fa:
c5:43:72:cd:d6:3e:4a:39:99:a0:ef:ab:e2:05:2b:da:44:8d:
49:28:29:84:b9:55:66:00:35:d9:96:7e:9c:4f:69:a9:00:ae:
ad:cd:5e:5b:2b:d5:62:0d:81:82:f0:8c:78:40:0c:c9:ca:5e:
aa:f4:94:85:a7:98:08:76:f6:4f:76:5e:ad:69:ba:5c:c9:21:
2d:ad:54:42:c6:4b:6b:0f:0f:c4:54:e1:b1:3b:dc:6d:da:68:
f2:fe:4d:d8:b4:ae:c8:f7:be:1c:96:e9:8d:92:bb:7c:9d:c2:
be:b3:bf:db:b1:01:7b:fd:79:23:11:45:4e:0c:0a:4b:06:e4:
b3:fe:18:40:d8:8e:dc:e3:f8:7f:dc:52:7c:86:c3:2a:95:be:
99:64:78:57:c5:cf:ab:19:f6:cd:9e:de:34:16:dc:8d:39:07:
ec:b0:d4:ad:82:3a:c1:32:81:3e:18:e8:78:45:89:82:42:e3:
f0:2a:12:e8:e2:9c:b2:c7:44:8b:13:d5:90:72:e7:4d:f0:f9:
ef:04:b6:f7:d1:7e:29:45:44:47:6e:47:31:76:1e:31:e3:7a:
7c:08:f3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:16:45 2025 by rpki-client