Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/KZgShytB2Dg6qgF16xBAvAwz96A.roa
File: KZgShytB2Dg6qgF16xBAvAwz96A.roa (raw, json)
Hash identifier: q4wJLWishIa1PGKUkxxT9s0b4UEcNNHxlEthcKoGKVE=
Subject key identifier: 29:98:12:87:2B:41:D8:38:3A:AA:01:75:EB:10:40:BC:0C:33:F7:A0
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019430EFF257E491B496588688496FA85A9D
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/KZgShytB2Dg6qgF16xBAvAwz96A.roa
Signing time: Sat 04 Jan 2025 10:50:18 +0000
ROA not before: Sat 04 Jan 2025 10:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215828
IP address blocks: 2a14:6781:f000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:30:ef:f2:57:e4:91:b4:96:58:86:88:49:6f:a8:5a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jan 4 10:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=299812872b41d8383aaa0175eb1040bc0c33f7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:e7:a5:ea:b4:7f:ab:5a:ee:08:8e:14:76:
82:22:7d:55:a1:ad:9d:33:e4:79:93:e3:f0:c0:04:
f2:65:91:e3:43:08:df:3f:24:ad:e6:bb:b9:f0:53:
65:ac:dd:18:43:ab:7e:e1:4b:35:4d:5d:cd:45:8d:
ba:9d:8b:ec:0b:32:87:77:78:dc:1d:89:ae:8e:d0:
33:81:6b:55:11:0a:52:84:bb:9b:85:c2:53:5a:5a:
3c:0b:69:32:db:fe:5a:93:d2:83:eb:33:db:4a:18:
10:22:31:c2:8d:2e:9c:27:76:66:30:6e:5c:17:52:
31:1f:d6:d3:f9:4c:0e:aa:e7:1a:87:b6:00:eb:76:
a9:bb:d7:a4:aa:1f:1e:7f:ea:9d:99:4c:fc:aa:f0:
3c:80:c3:c5:56:18:81:35:53:4b:95:0e:f8:a0:f8:
64:6b:e8:98:28:59:be:c5:4a:98:22:d9:53:2d:08:
4c:3c:6d:f9:20:83:3a:ab:3a:eb:d7:bd:9f:d2:b5:
b6:6b:35:96:48:1e:9a:a0:7c:15:94:aa:9d:8c:5f:
4d:8a:d5:07:94:dc:47:b9:cd:e0:91:81:13:34:3e:
2f:d6:17:a7:e1:a6:77:9c:1f:bd:fd:ce:b3:4b:72:
c7:22:08:fd:ee:ab:17:7d:b9:38:05:be:48:ca:c5:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:98:12:87:2B:41:D8:38:3A:AA:01:75:EB:10:40:BC:0C:33:F7:A0
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/KZgShytB2Dg6qgF16xBAvAwz96A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6781:f000::/36
Signature Algorithm: sha256WithRSAEncryption
50:4a:2f:73:31:55:d9:c4:ea:9f:cc:c8:f2:18:80:ac:b4:b0:
36:39:67:5c:34:87:cf:cf:a1:c6:84:0b:42:8c:11:1b:20:db:
aa:bf:6b:4b:df:df:05:7b:9c:6d:cf:dc:0b:3b:f6:2c:ec:46:
36:b3:a0:12:0f:db:77:59:b3:f7:bf:17:a3:89:ad:68:40:66:
6b:f3:9a:13:e0:4d:15:85:a7:29:d2:32:dd:cf:17:6a:ca:30:
e6:de:f1:95:73:69:a4:77:de:4f:30:ca:a8:35:05:d3:a6:41:
2e:8e:d0:d7:0b:8a:a5:03:22:e3:c4:c6:64:74:70:02:3d:c2:
35:a6:ee:84:48:c4:85:6c:26:21:b1:54:c6:d1:85:04:56:b2:
ae:00:20:dd:15:8f:b6:aa:d2:aa:14:b5:97:c3:c1:72:16:3f:
da:76:7c:05:36:f4:49:b2:62:19:27:70:03:5d:00:8a:44:0f:
18:0d:8e:bd:61:4e:be:84:bd:d1:2c:cf:53:de:c1:60:0d:5f:
cd:87:70:88:50:bd:69:74:31:98:20:91:3c:a7:1a:4b:83:45:
94:c5:7a:37:46:0c:05:65:5c:87:5a:44:80:07:74:87:87:dd:
84:60:1b:c8:4c:b0:0d:05:1c:0c:a4:51:d0:c7:69:eb:a4:27:
e6:2d:f3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:31 2025 by rpki-client