Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/wN3I7D42_Scvh3kTX6wbZgc3STg.roa
File: wN3I7D42_Scvh3kTX6wbZgc3STg.roa (raw, json)
Hash identifier: +5WZ8eZml5reiYd5KuhYrJcZjNCC9ofGPFNFq+2Hrx4=
Subject key identifier: C0:DD:C8:EC:3E:36:FD:27:2F:87:79:13:5F:AC:1B:66:07:37:49:38
Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial: 019425223974522CFDD0423B40A7ED8CF225
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/wN3I7D42_Scvh3kTX6wbZgc3STg.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214567
IP address blocks: 2a14:11c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:39:74:52:2c:fd:d0:42:3b:40:a7:ed:8c:f2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0ddc8ec3e36fd272f8779135fac1b6607374938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:89:88:6e:da:41:41:dc:f6:ee:96:c2:7b:
d0:d5:22:2c:c8:d9:92:ff:dd:74:0d:7e:d9:9f:13:
06:66:e4:0b:59:21:f2:9d:9e:95:8e:c4:83:9c:a3:
77:d1:0d:86:3f:3d:20:26:62:db:36:7f:e4:8c:c8:
d2:b7:5c:06:5a:13:52:5c:b1:11:fb:79:a7:ac:37:
bd:84:c8:93:8c:46:d6:d0:48:b4:00:80:84:ef:ad:
69:41:79:36:ca:71:90:7e:58:77:c9:3b:0c:54:0d:
07:63:48:9d:f1:23:7f:c1:a7:b1:24:fe:ca:ce:a5:
64:d2:ad:6e:8c:38:33:e1:bf:2c:bd:b7:6b:14:2d:
6e:0f:e3:a2:e2:10:9b:88:a5:ee:97:84:d5:97:4c:
d9:4f:bb:74:87:3d:e7:99:49:d8:48:6d:eb:2f:1e:
3d:90:87:2c:57:97:e2:72:1b:fe:4f:c2:d2:ba:40:
56:de:d8:44:64:24:e9:df:16:bb:ef:ad:e7:37:4d:
4f:4f:d8:f9:cf:9d:88:39:bb:7e:3c:e3:85:05:57:
d9:0c:d1:9e:b3:56:29:b4:aa:ed:07:5b:89:58:9c:
1e:48:d4:56:bc:48:67:e4:44:78:86:90:4d:3e:d9:
8b:da:ad:e9:b4:22:9e:7e:f5:3b:a5:47:b8:97:51:
1f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DD:C8:EC:3E:36:FD:27:2F:87:79:13:5F:AC:1B:66:07:37:49:38
X509v3 Authority Key Identifier:
keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/wN3I7D42_Scvh3kTX6wbZgc3STg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:11c0::/29
Signature Algorithm: sha256WithRSAEncryption
4e:0c:2f:2d:22:88:c2:cc:6d:60:bb:64:d5:0f:c0:48:34:33:
55:03:37:4e:c5:6d:04:ee:eb:cd:04:bd:01:aa:2a:a8:a6:1c:
14:c5:8f:5c:ee:97:2b:53:d2:ec:a1:68:d3:f5:31:55:a3:88:
a3:97:35:41:83:24:c3:b0:0e:58:39:e4:0a:5b:e6:01:a7:e5:
ba:44:7b:f0:c5:06:d8:28:be:62:b5:80:44:a0:53:a5:69:23:
43:b9:32:7d:6b:56:39:98:1d:12:05:01:a0:f7:a0:fb:0d:64:
99:9e:11:30:31:c0:4e:f5:ce:90:20:89:79:f7:e0:7c:16:5f:
b3:75:fd:09:1c:6b:69:64:98:59:a8:a1:80:74:2b:58:96:de:
84:20:50:02:50:62:de:82:25:c0:70:d4:b4:a4:d2:b9:38:20:
25:8e:a4:3a:ac:24:16:84:bb:41:8e:46:fc:ad:31:cd:ef:76:
09:d4:12:7e:bc:21:26:f7:1d:ed:ca:c0:7b:88:e1:a5:6d:2a:
5b:4c:97:72:06:23:14:33:81:83:22:b6:68:c3:38:85:6d:2a:
ec:e8:b7:a4:c3:33:d9:53:91:81:d8:72:ba:61:6a:00:4c:e6:
e2:5e:72:da:67:1d:2f:04:4e:f1:bb:de:7a:6e:88:e3:94:3e:
9f:53:38:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:41:08 2025 by rpki-client