Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3274ff-66c3-4ee4-b88d-63fd8236506f/1/sKkqqVcmvKvP4zTmxEkSrIkGcYo.roa
File: sKkqqVcmvKvP4zTmxEkSrIkGcYo.roa (raw, json)
Hash identifier: Z50zb5NNPy1eFOqJZS3mATKnSBB72UUvtSCksQ1bN4I=
Subject key identifier: B0:A9:2A:A9:57:26:BC:AB:CF:E3:34:E6:C4:49:12:AC:89:06:71:8A
Certificate issuer: /CN=bbc4399b412a5ac72627fc4b3cb4f842e4411454
Certificate serial: 01941FFAAC5DA880FAD2180AC0C0318638E2
Authority key identifier: BB:C4:39:9B:41:2A:5A:C7:26:27:FC:4B:3C:B4:F8:42:E4:41:14:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8Q5m0EqWscmJ_xLPLT4QuRBFFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3274ff-66c3-4ee4-b88d-63fd8236506f/1/sKkqqVcmvKvP4zTmxEkSrIkGcYo.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213279
IP address blocks: 2a14:b400::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ac:5d:a8:80:fa:d2:18:0a:c0:c0:31:86:38:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc4399b412a5ac72627fc4b3cb4f842e4411454
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0a92aa95726bcabcfe334e6c44912ac8906718a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:50:d5:d2:6d:b8:ac:f1:b5:a6:6c:d4:c4:
2f:7c:75:f7:19:4e:79:2b:8b:e4:df:50:9b:a3:b7:
db:4f:3d:72:c3:3a:4a:9a:f1:2b:ce:b8:28:a1:d5:
59:db:18:c8:74:33:ec:37:74:fe:b2:2f:6e:8c:9f:
7c:20:c3:a9:ad:4e:cc:8e:81:d5:b3:ba:fb:98:ef:
0a:86:4c:8a:50:5e:a3:1c:81:21:29:18:de:f2:a4:
52:4b:af:8a:c9:74:04:2b:f8:9b:50:f9:ca:ed:6f:
6a:e7:ff:96:ac:62:d7:31:cc:ba:f9:ff:78:49:29:
e5:a2:ee:8b:af:d2:b9:ba:53:0f:9b:3c:66:5e:85:
78:4f:b2:56:1d:3d:7a:02:17:df:90:c8:b0:4f:82:
48:af:06:cf:c7:18:13:88:6b:05:8d:d5:a6:ac:67:
e8:87:6c:28:52:df:d1:41:6e:b7:f7:ef:09:ac:14:
99:ee:03:a6:17:75:9a:9f:ad:92:82:10:22:43:44:
aa:67:ec:63:c1:06:ca:e2:5c:36:b0:06:9d:10:b5:
a8:96:42:df:fe:4a:c6:34:be:54:8f:e0:9a:77:87:
ba:d1:f9:6e:f7:19:b3:84:11:d8:5e:69:7c:e5:fb:
9f:fc:51:b0:83:b4:5c:20:35:dc:aa:16:4a:c5:d3:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A9:2A:A9:57:26:BC:AB:CF:E3:34:E6:C4:49:12:AC:89:06:71:8A
X509v3 Authority Key Identifier:
keyid:BB:C4:39:9B:41:2A:5A:C7:26:27:FC:4B:3C:B4:F8:42:E4:41:14:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8Q5m0EqWscmJ_xLPLT4QuRBFFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3274ff-66c3-4ee4-b88d-63fd8236506f/1/sKkqqVcmvKvP4zTmxEkSrIkGcYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3274ff-66c3-4ee4-b88d-63fd8236506f/1/u8Q5m0EqWscmJ_xLPLT4QuRBFFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:b400::/32
Signature Algorithm: sha256WithRSAEncryption
61:6e:4f:c6:95:96:6c:33:34:9b:10:da:81:b3:7b:0f:4b:b4:
64:5f:dd:4a:78:1f:10:c1:0e:6d:4b:82:45:cf:ee:27:85:9a:
b2:29:73:c6:fe:73:ba:d5:a0:e6:66:be:88:e6:ad:e7:73:40:
0b:79:0e:c6:f3:7c:5e:c2:3b:43:64:20:a8:1e:8d:83:1c:38:
61:6d:e0:ca:8a:de:3e:7e:74:9c:ce:53:d3:9c:ef:43:d5:2c:
dd:45:86:b3:a5:1b:6d:a4:b8:eb:dd:9f:6e:a0:e0:5b:1f:f0:
98:93:51:88:5c:1c:3a:84:b9:1b:55:4f:95:84:96:c5:08:ba:
2f:a3:d1:73:75:5b:08:e9:c9:cf:bc:ff:6e:04:3e:7f:97:f1:
d5:f1:8e:c5:6a:67:67:f3:e8:08:aa:f3:bc:ee:b6:7c:74:6a:
cb:0d:53:9d:fe:f6:b6:0a:c0:a5:66:5d:fc:b0:f3:bd:85:a0:
45:ca:46:10:d4:10:3b:6e:f9:67:a3:15:91:66:64:c2:4c:60:
87:2d:07:ef:a0:66:e0:fa:72:5b:27:a0:f8:53:59:dc:dd:be:
d2:a8:7a:35:af:78:a7:cc:d9:8d:98:74:da:2a:53:23:53:c6:
c3:2c:9c:f4:17:fe:41:dd:2a:18:2d:c3:dc:d6:e8:0a:8e:cc:
44:d6:dd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:28:54 2025 by rpki-client