Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/e6xoJBVIfdJmiKe2nJgRQGtQ5ww.roa
File: e6xoJBVIfdJmiKe2nJgRQGtQ5ww.roa (raw, json)
Hash identifier: JfuVzsuhmGpnCucojoUfItSJOnwkZRw4nitsAmYaRLg=
Subject key identifier: 7B:AC:68:24:15:48:7D:D2:66:88:A7:B6:9C:98:11:40:6B:50:E7:0C
Certificate issuer: /CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Certificate serial: 0194258F7A8F648E97117A31853D09070984
Authority key identifier: 8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/e6xoJBVIfdJmiKe2nJgRQGtQ5ww.roa
Signing time: Thu 02 Jan 2025 05:49:07 +0000
ROA not before: Thu 02 Jan 2025 05:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207277
IP address blocks: 2a14:2780::/48 maxlen: 48
2a14:2780:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7a:8f:64:8e:97:11:7a:31:85:3d:09:07:09:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3526bb31b9e30c49045f4368c602ee98bec01a
Validity
Not Before: Jan 2 05:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bac682415487dd26688a7b69c9811406b50e70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:fb:85:d9:f8:23:6d:71:d4:33:79:52:ba:
76:2b:f8:6c:7c:93:b6:b1:7b:d9:5b:9b:4e:25:3f:
fe:83:df:3d:3c:0b:6c:27:51:d4:89:8d:78:3a:1e:
64:69:09:bc:9a:46:bb:2f:51:e8:33:66:42:11:11:
5c:a8:dd:f4:b7:76:c0:83:32:94:c5:50:23:a3:50:
37:c2:87:1d:37:98:f9:86:a7:f9:4c:6e:0f:32:ff:
8d:9f:61:33:db:4d:4c:97:af:ff:fd:25:a9:e2:d9:
1c:bb:57:26:58:3d:75:19:f1:d9:ba:5a:ba:44:9a:
46:c7:d6:65:bb:c8:24:69:a6:f0:36:66:b1:dd:2c:
32:82:5f:41:4f:34:37:a3:86:7a:5f:37:16:fd:ee:
44:98:2c:44:1e:1d:6f:a0:36:47:f3:8e:2f:20:59:
83:5b:c0:78:dd:c7:71:26:52:d7:4e:63:ce:6e:f8:
ca:99:b5:00:71:71:29:53:96:71:53:58:12:e4:7a:
04:de:c5:f0:05:93:c4:ed:d8:2e:02:d5:73:78:25:
83:f3:0b:b9:8b:cc:a4:0a:3b:19:25:17:1d:1e:60:
a0:a8:8c:9e:87:22:a1:ca:42:ee:ee:e4:32:87:10:
3a:04:44:75:fd:8d:d2:6e:4f:0a:d7:ad:2a:7e:8f:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AC:68:24:15:48:7D:D2:66:88:A7:B6:9C:98:11:40:6B:50:E7:0C
X509v3 Authority Key Identifier:
keyid:8D:35:26:BB:31:B9:E3:0C:49:04:5F:43:68:C6:02:EE:98:BE:C0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTUmuzG54wxJBF9DaMYC7pi-wBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/e6xoJBVIfdJmiKe2nJgRQGtQ5ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1a4b21-fda3-4c8a-aee0-7253da3510ee/1/jTUmuzG54wxJBF9DaMYC7pi-wBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2780::/47
Signature Algorithm: sha256WithRSAEncryption
7f:1b:4d:cf:ba:29:84:c3:93:ef:69:45:39:2e:e9:d4:ee:74:
a2:4d:29:24:d9:6f:b3:51:38:1b:0e:76:06:9c:6f:c8:19:19:
9a:9d:74:ce:45:d5:16:f8:13:e2:2c:36:86:3f:e3:05:3a:fe:
95:f7:96:27:eb:70:9d:37:28:0a:55:79:9a:c0:72:bd:b4:e4:
87:69:d9:f0:5a:01:9c:8c:12:ae:e8:09:9a:1b:08:df:c2:0f:
91:7b:5b:dc:a0:dc:25:56:73:3a:ee:97:27:ec:b3:be:cb:27:
ac:04:36:74:0a:52:d4:c6:9b:2c:e2:83:ac:de:48:71:b5:5e:
27:4b:5f:56:8f:30:cb:e9:a7:ea:a1:5f:2f:bf:96:83:4b:ed:
28:2f:ad:73:08:58:d3:4b:5f:9f:aa:73:43:c9:8a:18:ff:3e:
07:50:5e:83:35:51:bf:c0:58:30:ac:e5:31:88:f4:cb:6e:0f:
86:ad:a7:7e:55:dd:e2:b1:68:48:e6:9f:44:bb:f5:ad:87:31:
a6:5d:84:d2:e4:68:a1:60:7d:53:75:72:95:25:c0:a2:3f:02:
04:62:54:48:5b:ca:3d:08:c1:15:3e:39:b3:80:da:12:63:bf:
dd:41:70:9c:b4:60:b0:8a:b2:52:d7:9f:c8:69:ca:ef:21:dc:
70:5d:c5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:12:51 2025 by rpki-client