Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/RmyntG0IISqqkuRjXi2OjafHSpk.roa
File: RmyntG0IISqqkuRjXi2OjafHSpk.roa (raw, json)
Hash identifier: A3n99m0/BdNjoUWLCn9ljddIqS7nxCxnvKfqCVIhrTQ=
Subject key identifier: 46:6C:A7:B4:6D:08:21:2A:AA:92:E4:63:5E:2D:8E:8D:A7:C7:4A:99
Certificate issuer: /CN=07077969a8b6a55c461adde106c006486a26359f
Certificate serial: 0194A32608D99DAA1CF74C9B50E664A11904
Authority key identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/RmyntG0IISqqkuRjXi2OjafHSpk.roa
Signing time: Sun 26 Jan 2025 15:06:06 +0000
ROA not before: Sun 26 Jan 2025 15:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215679
IP address blocks: 2a14:7780::/29 maxlen: 64
2a14:7780::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a3:26:08:d9:9d:aa:1c:f7:4c:9b:50:e6:64:a1:19:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07077969a8b6a55c461adde106c006486a26359f
Validity
Not Before: Jan 26 15:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=466ca7b46d08212aaa92e4635e2d8e8da7c74a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:da:d1:f0:8e:30:1f:8e:f9:84:99:89:e5:
ea:0e:f4:4a:c1:55:18:6a:86:e6:80:a3:8d:66:6b:
ef:92:20:fa:e0:e3:cd:60:1f:a2:92:8b:bc:26:f4:
98:65:47:3a:ff:f2:48:a0:6f:99:4d:22:5d:67:a9:
41:90:b1:10:b1:56:ac:d0:58:69:6b:1b:f7:2a:6a:
6b:08:48:4b:31:74:24:b4:cf:5e:90:2f:3c:7d:e7:
c2:6f:c1:67:b2:8a:5a:1c:e7:3f:8e:01:ad:67:8d:
c6:66:ef:d9:81:d1:29:e5:66:9f:72:18:3b:ac:ba:
f5:07:42:83:8e:6d:a2:91:cc:07:8a:02:64:55:90:
0a:e0:8e:ec:62:e5:5c:11:72:8f:74:f9:e5:b8:85:
03:ad:fc:97:73:da:25:ca:51:f5:e9:2e:df:13:0a:
cf:f7:e3:33:41:ad:10:8b:16:07:3f:b0:83:88:f0:
a1:4d:cc:a5:4f:26:60:24:13:70:f3:15:2c:9a:65:
93:48:27:7f:57:cd:e4:12:9d:65:eb:60:42:c6:28:
13:14:bb:cd:4a:d3:86:be:c7:0c:84:3d:80:f1:5f:
4c:53:2b:9b:55:7e:11:51:45:18:db:36:7e:c2:49:
fd:37:fd:23:b3:a4:50:6f:f8:34:ae:0f:3a:57:64:
f1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6C:A7:B4:6D:08:21:2A:AA:92:E4:63:5E:2D:8E:8D:A7:C7:4A:99
X509v3 Authority Key Identifier:
keyid:07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/RmyntG0IISqqkuRjXi2OjafHSpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7780::/29
Signature Algorithm: sha256WithRSAEncryption
09:21:56:32:4a:ca:68:e0:57:da:b6:ad:c0:e6:9d:ef:68:18:
58:c8:18:6d:42:85:fe:f1:95:eb:cf:de:70:91:88:16:a2:9c:
d1:b5:82:6f:41:78:cd:e8:a0:79:f9:cf:09:ee:b4:b3:b7:f8:
2c:fc:5f:48:24:35:88:9d:a8:ef:82:c5:9c:a3:e5:c1:57:76:
24:c1:e0:ae:08:39:6b:08:5d:16:68:ee:d6:bd:08:ce:59:6c:
13:53:26:b4:fd:37:0f:8a:1a:0f:8b:4f:8f:88:d6:5f:5e:88:
f7:45:01:29:6a:46:45:70:ed:a3:a1:bd:20:6c:56:d9:9c:ec:
d3:89:a3:08:83:69:be:03:fd:64:1d:90:15:f0:6c:4c:aa:01:
e2:98:89:b3:22:c0:d8:61:2f:a7:11:6b:06:17:93:b6:4a:a8:
2a:68:c9:f0:5b:31:f2:6e:9c:e7:bf:d0:01:eb:56:d7:82:65:
43:96:c7:94:4c:c2:98:85:16:a2:32:de:68:2b:3a:06:5e:2d:
a9:df:a8:0d:f5:31:53:25:90:36:ac:1a:94:7c:51:35:3f:07:
7c:52:6f:a0:8a:1d:c9:b8:b4:97:c2:24:09:8a:2c:c6:7c:bf:
4c:09:f2:77:d5:4b:ae:e5:e8:83:11:77:c9:56:5f:c0:09:4a:
5c:e1:9f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:33 2025 by rpki-client