Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/7KVtKRza7VDnZMrMe02kpGBrUpg.roa
File: 7KVtKRza7VDnZMrMe02kpGBrUpg.roa (raw, json)
Hash identifier: eDnVdL3nLyal8dEfu0dA+KtEtGPaNa6zd/fLOYxM2vg=
Subject key identifier: EC:A5:6D:29:1C:DA:ED:50:E7:64:CA:CC:7B:4D:A4:A4:60:6B:52:98
Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial: 0194228DB405CC705BF54CD22919F21FD6D2
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/7KVtKRza7VDnZMrMe02kpGBrUpg.roa
Signing time: Wed 01 Jan 2025 15:48:19 +0000
ROA not before: Wed 01 Jan 2025 15:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216271
IP address blocks: 2a14:7380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b4:05:cc:70:5b:f5:4c:d2:29:19:f2:1f:d6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Validity
Not Before: Jan 1 15:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eca56d291cdaed50e764cacc7b4da4a4606b5298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:7c:c2:e3:89:41:c4:cc:4e:f3:19:6f:cb:
00:ae:f0:6f:1a:97:b1:8b:de:31:ae:1f:01:55:a8:
75:f2:15:55:f3:6d:31:9f:77:2d:b8:28:da:be:da:
53:eb:63:2c:be:dd:d1:45:69:89:7b:17:cd:e9:3b:
34:c9:87:9a:03:b6:27:f0:27:5c:4f:aa:47:48:83:
10:13:7e:e7:36:54:69:14:b9:f6:48:90:37:7e:b7:
e9:39:06:49:1e:7c:ea:da:20:59:5c:a2:11:07:5a:
c2:b7:b2:cd:fa:e4:25:27:cb:4d:9f:18:28:a6:ef:
91:9b:78:a0:d9:af:9c:b9:7b:19:9b:f5:51:38:0e:
b4:e7:1e:b6:e8:95:01:eb:05:9e:10:ec:a2:3c:95:
ff:d3:92:6c:d5:db:95:bf:6b:c6:c8:97:77:a4:bd:
7f:76:98:e1:bc:12:50:fe:59:6f:5f:dd:9a:79:be:
d6:23:06:9a:32:29:60:b6:ac:6b:21:4e:af:59:37:
0c:8e:99:6c:d5:d2:b6:ea:d7:d0:66:24:7e:64:45:
2f:a7:c9:f9:0e:2f:6f:49:1b:38:0a:48:92:87:f9:
2c:8e:f7:c8:08:f2:94:26:33:ad:e2:2a:cc:91:7a:
04:3d:e7:b6:db:8e:b1:52:e0:6e:a7:70:20:de:1d:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A5:6D:29:1C:DA:ED:50:E7:64:CA:CC:7B:4D:A4:A4:60:6B:52:98
X509v3 Authority Key Identifier:
keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/7KVtKRza7VDnZMrMe02kpGBrUpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7380::/29
Signature Algorithm: sha256WithRSAEncryption
6b:89:db:5f:91:fa:13:3b:f3:e2:30:14:dc:f6:ba:fb:3d:4b:
49:76:57:25:fc:5e:2f:06:69:0c:f0:7f:46:57:f4:15:8b:f2:
dd:0a:05:dc:05:a6:5d:57:52:bf:08:3f:f5:4c:1d:ed:d3:f5:
2d:25:51:29:33:f6:2b:b1:fb:c8:15:6d:d8:e3:39:ef:25:ff:
5b:e0:17:8f:69:38:19:2c:2a:9a:dd:15:d1:b7:1e:8b:85:a8:
41:0b:ea:6e:1c:7c:ef:99:30:a6:04:fd:d8:c8:09:d2:98:b3:
22:3d:db:bc:0b:b1:7e:21:9e:86:f0:bc:7a:ef:9e:19:fb:a7:
0e:93:e9:02:92:dc:a6:5e:b9:ef:90:5a:31:c1:1e:e9:c3:ea:
76:56:84:0e:44:c9:f4:e8:93:99:0f:e5:60:6b:7a:e1:c9:e0:
99:ae:cb:00:d3:87:b1:70:8b:63:6d:20:1b:b3:12:a7:be:d9:
56:e3:77:fe:9a:f6:5c:b6:30:cf:79:ac:0c:4d:45:73:c4:fb:
20:94:06:0f:09:a4:9c:91:0c:ec:b4:76:8c:74:b1:86:33:49:
a0:99:0a:96:06:73:8a:6e:01:e5:bf:fd:74:5d:dd:d1:4f:29:
04:0b:78:a9:bb:d7:53:a6:10:06:8f:62:c8:05:9a:61:9d:88:
3a:76:7d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:12:49 2025 by rpki-client