Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/9zJnlWFaL2wJghv7n_k5Mo0JlCs.roa
File: 9zJnlWFaL2wJghv7n_k5Mo0JlCs.roa (raw, json)
Hash identifier: iq31cxdcukeAsREE3ErWKST+mA5mRotgvK40SyRJe18=
Subject key identifier: F7:32:67:95:61:5A:2F:6C:09:82:1B:FB:9F:F9:39:32:8D:09:94:2B
Certificate issuer: /CN=e099ee07822ef2ace9c356f7b42caeaff25c9692
Certificate serial: 0194236980CDBC2CA74ADDE1D9BCC62F777D
Authority key identifier: E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/9zJnlWFaL2wJghv7n_k5Mo0JlCs.roa
Signing time: Wed 01 Jan 2025 19:48:24 +0000
ROA not before: Wed 01 Jan 2025 19:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203226
IP address blocks: 2a14:6980:10::/44 maxlen: 44
2a14:6980:10::/48 maxlen: 48
2a14:6980:11::/48 maxlen: 48
2a14:6980:12::/48 maxlen: 48
2a14:6980:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:80:cd:bc:2c:a7:4a:dd:e1:d9:bc:c6:2f:77:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e099ee07822ef2ace9c356f7b42caeaff25c9692
Validity
Not Before: Jan 1 19:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7326795615a2f6c09821bfb9ff939328d09942b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:8e:1b:de:74:ce:4c:c9:f1:0f:53:56:6d:
cf:52:31:1e:c9:e2:78:f0:64:43:59:f4:8c:e3:dd:
84:03:cc:13:40:0a:ef:a1:31:d0:29:7e:f5:87:dc:
f2:6e:17:2b:94:f6:8d:87:b5:a2:95:41:da:aa:e5:
fa:68:36:d2:e4:62:bf:29:bb:61:ac:25:b2:0f:7d:
1b:d0:80:24:cd:18:95:d9:58:f0:af:93:14:3f:c7:
33:07:18:a5:b6:cc:07:1f:f5:a3:28:f2:5a:f1:98:
6a:37:ab:51:eb:9b:25:49:9e:94:72:9e:5a:4e:68:
1e:2e:9d:13:74:ab:13:a3:69:6b:50:8e:54:1c:6b:
d3:e7:e8:60:1a:96:7c:2d:af:2e:d1:fc:d7:a7:f4:
ac:ed:41:13:8c:e7:43:24:62:4f:69:ec:33:04:42:
ca:71:b0:a4:0a:bb:62:98:9a:4f:d4:be:00:1a:bb:
ce:48:b4:ec:e9:c9:d5:2b:89:d9:8a:e9:e7:0a:77:
a1:48:d5:95:0f:c7:64:9d:5e:32:77:f4:9d:dc:90:
bc:ed:a4:4a:b8:2f:89:bc:75:af:05:6b:6b:62:7e:
ad:16:10:9a:29:ec:af:8b:33:8f:23:5f:7d:20:3c:
03:aa:5e:42:10:c8:9a:13:d4:71:3e:76:9b:21:e4:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:32:67:95:61:5A:2F:6C:09:82:1B:FB:9F:F9:39:32:8D:09:94:2B
X509v3 Authority Key Identifier:
keyid:E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/9zJnlWFaL2wJghv7n_k5Mo0JlCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6980:10::/44
Signature Algorithm: sha256WithRSAEncryption
28:49:01:8f:26:16:34:ce:06:e5:70:6c:d4:ea:05:0e:ae:94:
46:d5:63:24:b4:a1:6e:f7:dc:2f:27:ca:13:ac:6d:5a:0f:71:
c9:55:b8:c9:c3:2b:6a:a7:1d:ac:86:71:f7:ff:02:71:e2:b5:
14:92:d8:da:61:1c:e4:10:c8:ab:3e:fd:b9:fb:1e:74:82:a6:
83:6a:4f:28:06:ad:6a:c5:48:91:a5:4b:46:a4:62:85:db:46:
88:a9:94:d3:99:d5:02:37:8c:ca:a3:89:b1:17:82:32:69:bf:
6a:e7:7f:90:12:a2:8c:43:bb:63:8a:52:f0:50:ed:b4:9f:98:
f3:a7:e2:ff:9b:69:76:3f:02:76:d7:7f:c6:73:26:0a:02:7e:
83:4a:75:23:ed:d2:1c:02:49:37:05:fc:1d:fe:7d:db:df:cb:
bb:18:6e:6a:0c:f4:88:0b:b7:04:6d:dd:72:2c:40:d1:98:ae:
39:4d:55:14:f7:3d:b3:d3:c6:50:51:60:85:56:95:d9:70:61:
41:09:86:17:bf:63:7d:6e:ed:8f:8d:22:78:7b:e5:a4:1d:51:
86:58:d4:fb:20:93:ac:d9:c7:83:2f:57:0d:5a:f0:b3:31:a0:
b0:c1:11:72:7c:53:1c:92:4f:74:94:ec:77:22:3f:2f:45:be:
4c:4c:fa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:07 2025 by rpki-client