Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/Ie2w-e1MnhFVJx72GaA0brKoYv0.roa
File: Ie2w-e1MnhFVJx72GaA0brKoYv0.roa (raw, json)
Hash identifier: Ec/FgqK/UNY63UmhI/nQ9hUB0k2Ol/hLNJ8N7P+GikY=
Subject key identifier: 21:ED:B0:F9:ED:4C:9E:11:55:27:1E:F6:19:A0:34:6E:B2:A8:62:FD
Certificate issuer: /CN=a685f1914ceb19221c563193027d45345033ad5f
Certificate serial: 0193EF6259E9193513D47D9A9E6F070E6CAC
Authority key identifier: A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/Ie2w-e1MnhFVJx72GaA0brKoYv0.roa
Signing time: Sun 22 Dec 2024 17:20:20 +0000
ROA not before: Sun 22 Dec 2024 17:20:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213685
IP address blocks: 2a14:ca00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ef:62:59:e9:19:35:13:d4:7d:9a:9e:6f:07:0e:6c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a685f1914ceb19221c563193027d45345033ad5f
Validity
Not Before: Dec 22 17:20:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21edb0f9ed4c9e1155271ef619a0346eb2a862fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:d2:e3:6a:5d:e0:ef:d9:c1:51:fd:98:a1:
08:31:84:46:99:31:b7:34:fb:73:77:b6:c6:95:db:
15:4b:20:ed:cb:aa:1c:b8:ce:81:47:d2:b5:d4:65:
3e:f2:6b:70:90:6e:d1:7f:f0:79:7c:81:98:c0:2f:
ff:66:40:d7:61:8d:3d:8c:64:b5:f3:34:b5:88:dc:
77:5b:cc:8c:87:69:dc:0b:8d:fc:16:f0:7e:40:c5:
a1:8b:51:51:21:dc:4e:65:35:03:7d:c3:64:86:68:
4c:5a:9b:21:a2:6d:13:d6:8c:8b:18:53:ee:f0:35:
31:8b:84:6e:a6:56:a3:bc:28:42:14:c3:7e:26:d2:
b7:a0:ce:53:5f:a0:b4:da:f1:11:db:93:0f:dd:be:
0d:fc:dc:8b:f1:45:40:94:fa:6d:5d:2a:84:fa:72:
b7:86:69:e1:71:af:35:0c:e7:49:1e:50:0f:08:d6:
e7:ef:d6:b7:a8:14:d9:fb:ec:43:5a:31:48:c9:bd:
ab:a3:0e:b7:0e:3d:14:5f:f2:1c:ab:da:4d:bd:f0:
92:c6:f2:78:78:a8:b5:97:ee:8a:29:b6:49:8a:c3:
83:3a:92:df:fa:e2:27:ef:33:34:0c:76:bf:88:ac:
12:6a:47:06:45:a0:2f:4f:6e:f2:06:44:83:92:c7:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:ED:B0:F9:ED:4C:9E:11:55:27:1E:F6:19:A0:34:6E:B2:A8:62:FD
X509v3 Authority Key Identifier:
keyid:A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/Ie2w-e1MnhFVJx72GaA0brKoYv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ca00::/29
Signature Algorithm: sha256WithRSAEncryption
1b:42:fa:80:2a:26:e0:3b:fd:55:a7:66:4e:ff:9a:71:0f:c9:
71:ec:9e:51:1e:f9:57:c1:3d:a9:0d:e6:c2:04:37:6f:c5:dd:
1c:80:ef:1d:e3:f5:c6:93:95:cc:c1:d8:f4:a0:5d:da:61:05:
09:0d:3f:85:7d:b2:72:f3:90:59:63:2b:cc:a3:a5:5a:55:00:
41:24:67:d2:ce:eb:04:b8:c1:b3:39:7c:f0:7a:24:75:07:44:
43:a8:35:e4:ea:3c:4e:3c:06:98:66:54:4c:5e:15:03:d9:fa:
46:b6:e5:1f:7f:8a:06:25:ed:96:66:a4:bc:cc:85:3b:c9:f1:
aa:ac:63:b0:c8:8f:44:04:eb:4b:71:30:f0:ea:4d:66:0b:2d:
a3:79:1d:41:24:2f:85:b3:28:1f:16:3b:80:73:65:ba:39:3d:
0a:93:df:25:81:c6:d7:91:ea:6c:5a:5b:9a:a0:83:96:b4:56:
96:b7:20:c0:c6:2e:67:cb:22:e9:0e:6e:68:f1:37:23:7e:0f:
8e:a7:ea:60:a0:d5:db:23:2b:1d:e9:1b:f3:95:ec:1f:77:0b:
9d:9f:3c:8f:6b:ee:d5:9b:50:95:cb:0a:61:0e:bb:c6:51:ac:
14:07:91:a0:ca:01:19:1d:98:02:1e:7b:8d:b8:71:d3:f7:81:
65:90:6e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:59 2024 by rpki-client on console.sobornost.net