Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/i40en23OGg_DEWIRxhMGmgEox1s.roa
File: i40en23OGg_DEWIRxhMGmgEox1s.roa (raw, json)
Hash identifier: iWUkdAfgE1mLIKUO/1DuqvBR2l5IncPfNwSFVOKSJKY=
Subject key identifier: 8B:8D:1E:9F:6D:CE:1A:0F:C3:11:62:11:C6:13:06:9A:01:28:C7:5B
Certificate issuer: /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial: 01942823BF18DDABA6DC2621DF9DCD92432F
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/i40en23OGg_DEWIRxhMGmgEox1s.roa
Signing time: Thu 02 Jan 2025 17:50:18 +0000
ROA not before: Thu 02 Jan 2025 17:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2119
IP address blocks: 2a14:34c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:bf:18:dd:ab:a6:dc:26:21:df:9d:cd:92:43:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Validity
Not Before: Jan 2 17:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b8d1e9f6dce1a0fc3116211c613069a0128c75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:91:f1:df:52:32:5a:0d:62:24:3c:2b:15:
77:e9:75:0f:e1:12:8a:e9:d3:36:69:20:92:93:90:
09:5d:4b:2e:07:d0:3a:73:51:1c:49:98:1e:e3:92:
4f:51:52:9e:cd:33:e2:86:87:2d:7d:ba:d8:b4:e0:
f0:45:18:18:b0:a9:d4:08:47:0a:46:45:93:88:43:
d3:17:86:a5:bf:7f:b4:5d:b2:e1:35:cb:63:a6:80:
ca:f6:9f:25:80:58:1c:15:ed:8b:5f:26:f5:94:e2:
24:b0:c6:f6:9b:0b:c0:14:85:21:86:9d:d9:9b:d9:
44:b7:74:ff:c3:2a:50:09:26:44:f7:dd:5b:9b:f6:
5e:5a:82:a2:7c:12:3d:1b:63:e7:8e:5a:c7:2b:94:
4d:a6:95:b1:89:3f:da:df:44:46:f9:32:24:cc:45:
56:7b:24:ff:20:e1:e7:71:a2:b8:9f:00:2b:b9:e4:
a0:79:ca:39:dc:a9:8a:96:fb:91:29:35:4e:8b:f2:
a6:e1:9a:09:5c:69:3f:c9:a4:37:63:d6:fc:19:c2:
31:af:7a:78:c5:49:dc:ac:b1:69:7b:78:c1:66:85:
14:21:51:bd:7a:b1:3d:75:c3:94:f6:45:61:3f:be:
a9:a9:5a:15:f0:17:07:36:bd:ca:3b:a1:5b:f7:22:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8D:1E:9F:6D:CE:1A:0F:C3:11:62:11:C6:13:06:9A:01:28:C7:5B
X509v3 Authority Key Identifier:
keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/i40en23OGg_DEWIRxhMGmgEox1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:34c0::/29
Signature Algorithm: sha256WithRSAEncryption
ad:dd:0e:30:41:25:8e:b1:45:42:21:56:d4:ed:b4:06:ac:e9:
f7:1a:52:cb:6f:9f:1b:6a:c2:ee:2d:db:68:27:76:17:e3:ed:
5e:40:74:4a:6d:38:ce:c2:c0:6b:4b:9f:63:a3:c2:2b:d8:c1:
d7:db:1c:dc:b8:74:40:b1:75:23:33:3c:67:7d:f1:3e:2e:91:
bd:06:3a:33:6c:4b:db:72:e7:07:e1:ee:84:8c:ce:94:ca:28:
a3:ce:dc:ce:c9:2c:26:61:e6:9d:4e:10:f2:9d:95:08:b5:4f:
50:2d:48:29:ab:0f:bd:37:49:b7:1b:04:21:cb:4f:02:94:65:
19:68:49:80:8e:97:c7:43:41:fa:1a:93:82:16:03:d4:fe:1e:
dd:fd:33:9b:d5:83:2b:8c:55:58:45:e4:85:60:42:aa:e7:8b:
0a:51:00:57:42:35:e9:2e:3b:89:9c:41:49:07:77:00:26:76:
ee:9f:9b:d4:7b:32:73:35:78:e4:9e:5a:3b:91:7a:b3:9c:24:
bb:3f:5a:ca:34:aa:26:76:03:72:9e:c5:dc:c6:4b:76:92:66:
3d:8b:f8:57:7a:11:00:64:6e:17:d3:4b:d7:6d:89:bb:b0:6d:
2e:8a:bd:ae:74:f0:b7:af:17:b9:e0:76:37:87:8f:c8:8c:70:
bb:b4:77:e8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQoI78Y3aum3CYh353NkkMvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwM2VkNGZlZGY1NmQwYjAyYjE3MmM4Zjg5ZWMzNzY1MTBj
ZDMxNzQwHhcNMjUwMTAyMTc1MDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjhkMWU5ZjZkY2UxYTBmYzMxMTYyMTFjNjEzMDY5YTAxMjhjNzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEeR8d9SMloNYiQ8KxV36XUP4RKK
6dM2aSCSk5AJXUsuB9A6c1EcSZge45JPUVKezTPihoctfbrYtODwRRgYsKnUCEcK
RkWTiEPTF4alv3+0XbLhNctjpoDK9p8lgFgcFe2LXyb1lOIksMb2mwvAFIUhhp3Z
m9lEt3T/wypQCSZE991bm/ZeWoKifBI9G2PnjlrHK5RNppWxiT/a30RG+TIkzEVW
eyT/IOHncaK4nwArueSgeco53KmKlvuRKTVOi/Km4ZoJXGk/yaQ3Y9b8GcIxr3p4
xUncrLFpe3jBZoUUIVG9erE9dcOU9kVhP76pqVoV8BcHNr3KO6Fb9yInwwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIuNHp9tzhoPwxFiEcYTBpoBKMdbMB8GA1UdIwQY
MBaAFPA+1P7fVtCwKxcsj4nsN2UQzTF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEt
ZmI0ZmQwN2UyNmEwLzEvaTQwZW4yM09HZ19ERVdJUnhoTUdtZ0VveDFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lNjM5NTAtNzZlOC00ZjJiLTg3MzEtZmI0ZmQwN2UyNmEw
LzEvOEQ3VV90OVcwTEFyRnl5UGlldzNaUkROTVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhQ0wDAN
BgkqhkiG9w0BAQsFAAOCAQEArd0OMEEljrFFQiFW1O20Bqzp9xpSy2+fG2rC7i3b
aCd2F+PtXkB0Sm04zsLAa0ufY6PCK9jB19sc3Lh0QLF1IzM8Z33xPi6RvQY6M2xL
23LnB+HuhIzOlMooo87czsksJmHmnU4Q8p2VCLVPUC1IKasPvTdJtxsEIctPApRl
GWhJgI6Xx0NB+hqTghYD1P4e3f0zm9WDK4xVWEXkhWBCqueLClEAV0I16S47iZxB
SQd3ACZ27p+b1HsyczV45J5aO5F6s5wkuz9ayjSqJnYDcp7F3MZLdpJmPYv4V3oR
AGRuF9NL122Ju7BtLoq9rnTwt68XueB2N4ePyIxwu7R36A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:12:54 2025 by rpki-client