Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/26d28f-ff14-446d-99ea-fbadb98d688e/1/5he51gLWoqw2DOyOBDqAkyqCmyI.roa
File: 5he51gLWoqw2DOyOBDqAkyqCmyI.roa (raw, json)
Hash identifier: 5NfM0MaxXWUmSrrUKYS0xLPv5ZFBUF3+UIU9TKQmSTA=
Subject key identifier: E6:17:B9:D6:02:D6:A2:AC:36:0C:EC:8E:04:3A:80:93:2A:82:9B:22
Certificate issuer: /CN=9a980eed42aa546aab9e68cda96e2fbcf382f47a
Certificate serial: 019386E70FA462DD77D9DD6B6DD79A7A5EA8
Authority key identifier: 9A:98:0E:ED:42:AA:54:6A:AB:9E:68:CD:A9:6E:2F:BC:F3:82:F4:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpgO7UKqVGqrnmjNqW4vvPOC9Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/26d28f-ff14-446d-99ea-fbadb98d688e/1/5he51gLWoqw2DOyOBDqAkyqCmyI.roa
Signing time: Mon 02 Dec 2024 10:25:09 +0000
ROA not before: Mon 02 Dec 2024 10:25:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213831
IP address blocks: 2a14:8000::/32 maxlen: 32
2a14:8000:1::/48 maxlen: 48
2a14:8000:10::/48 maxlen: 48
2a14:8000:11::/48 maxlen: 48
2a14:8000:12::/48 maxlen: 48
2a14:8000:13::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:e7:0f:a4:62:dd:77:d9:dd:6b:6d:d7:9a:7a:5e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a980eed42aa546aab9e68cda96e2fbcf382f47a
Validity
Not Before: Dec 2 10:25:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e617b9d602d6a2ac360cec8e043a80932a829b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:87:b7:c9:31:f1:bc:73:4b:0a:71:29:99:
99:e0:0f:a0:51:66:82:79:9f:55:3d:59:b6:c8:70:
1a:8d:ae:54:f2:d8:7c:74:df:eb:e1:a8:01:84:bc:
a0:3e:3f:20:2f:db:86:74:0e:62:f9:46:5d:3a:8a:
3a:f7:a7:ea:e3:a0:15:7f:b4:d5:4e:0b:7b:87:67:
df:7a:be:73:c3:d2:78:cb:cd:f7:d0:75:6d:25:8b:
06:8b:1a:62:09:9e:ff:2c:c0:60:44:2b:e6:d6:fe:
74:32:1a:87:b6:7a:df:fb:3e:84:0c:dd:83:45:bf:
f9:db:ce:16:ce:fc:f3:b2:0f:4d:18:96:09:5b:44:
64:ca:ba:5f:50:45:72:01:16:2a:1f:98:8d:d4:cf:
59:02:36:b4:11:59:15:a5:8a:23:49:89:00:05:49:
3d:1e:cd:2b:87:ec:96:5c:d2:38:0b:84:ec:49:62:
94:27:b4:7f:0b:86:23:d1:6d:ee:79:2c:a3:ba:97:
be:a1:25:ad:a7:cb:70:88:aa:40:49:92:89:9f:44:
48:a8:f4:9b:c3:47:63:ca:18:e8:0d:93:b2:d7:33:
11:0f:9e:02:98:c1:a6:84:58:22:32:54:7b:87:57:
0e:32:57:d0:8c:de:df:59:e7:4b:58:e2:0e:98:c3:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:17:B9:D6:02:D6:A2:AC:36:0C:EC:8E:04:3A:80:93:2A:82:9B:22
X509v3 Authority Key Identifier:
keyid:9A:98:0E:ED:42:AA:54:6A:AB:9E:68:CD:A9:6E:2F:BC:F3:82:F4:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpgO7UKqVGqrnmjNqW4vvPOC9Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/26d28f-ff14-446d-99ea-fbadb98d688e/1/5he51gLWoqw2DOyOBDqAkyqCmyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/26d28f-ff14-446d-99ea-fbadb98d688e/1/mpgO7UKqVGqrnmjNqW4vvPOC9Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:8000::/32
Signature Algorithm: sha256WithRSAEncryption
93:fb:df:f6:10:9c:29:97:8a:17:9d:06:8b:0d:86:71:1a:c1:
34:cd:76:c3:d1:94:fa:27:e9:c1:58:86:b5:27:e3:d2:12:eb:
5c:d5:0c:16:f0:ae:41:f6:33:4d:2b:f9:f8:0a:cb:62:14:70:
89:d4:61:f6:ac:79:ff:7b:0f:f1:87:62:e8:56:00:f1:7c:d3:
f2:f7:75:17:f9:83:92:54:46:04:e1:19:4b:da:89:a4:97:50:
9c:e3:48:ed:b6:ef:36:15:7f:43:93:f5:d0:d5:76:5e:f6:dd:
58:f7:63:d4:47:ec:4b:ae:9d:89:72:01:21:9b:e1:29:8e:51:
dc:f9:2e:53:97:69:c1:6c:c0:11:3e:90:1f:ca:9a:22:63:5f:
08:f3:67:7b:8b:6e:e4:8f:b8:e4:ee:16:f0:bd:65:a4:db:ca:
b4:7e:25:e2:b1:a0:fd:bf:6a:ab:08:31:ba:05:ef:a8:09:6a:
27:19:21:f3:a2:f8:fb:7c:d0:f4:c9:5d:27:75:91:ef:65:de:
3b:f9:33:1a:1e:ff:f8:25:65:c0:80:fd:58:14:67:0c:94:56:
0b:1a:0f:e5:75:50:b3:ea:7e:13:df:2f:5b:82:0c:73:28:a8:
ba:eb:19:3e:e3:86:4b:ce:15:e0:39:0e:98:62:a6:a2:84:df:
88:e1:1a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:09 2024 by rpki-client on console.sobornost.net