Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/L4RKq9blDuun-Ov7h4-EXCJDU7o.roa
File: L4RKq9blDuun-Ov7h4-EXCJDU7o.roa (raw, json)
Hash identifier: rV2ghgo1vc0bF0beR2sZL8zKS4novhD+fyLSyA4fGEk=
Subject key identifier: 2F:84:4A:AB:D6:E5:0E:EB:A7:F8:EB:FB:87:8F:84:5C:22:43:53:BA
Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial: 01943F98B1A5651FC025E0B22EC625CCB8D8
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/L4RKq9blDuun-Ov7h4-EXCJDU7o.roa
Signing time: Tue 07 Jan 2025 07:09:18 +0000
ROA not before: Tue 07 Jan 2025 07:09:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214192
IP address blocks: 2a14:52c0:ae43::/48 maxlen: 48
2a14:52c0:af44::/48 maxlen: 48
2a14:52c0:f045::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:98:b1:a5:65:1f:c0:25:e0:b2:2e:c6:25:cc:b8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Validity
Not Before: Jan 7 07:09:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f844aabd6e50eeba7f8ebfb878f845c224353ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:27:a3:98:97:5b:dc:a8:04:f7:1a:8c:78:
82:35:63:72:84:0c:58:3d:87:e9:37:ef:88:85:fa:
70:75:c5:63:72:93:d8:9e:a7:f8:3e:34:ba:bc:9f:
5c:5c:7c:5d:76:77:96:1a:c4:c4:94:b1:2a:35:2b:
21:14:aa:17:b3:3f:02:1b:bc:2b:6e:9b:31:32:3a:
64:b9:96:e7:27:1e:74:51:f0:2e:99:2d:cb:c2:d7:
45:46:ee:b8:59:08:5e:8b:27:20:e7:15:f4:7e:d2:
1d:d5:36:e5:cf:62:d3:d5:76:8e:38:c2:2e:54:a1:
f3:2a:74:cd:48:5c:ab:20:11:6c:e1:93:42:91:76:
37:a0:7f:38:1c:69:69:79:1b:6f:51:4d:10:5f:e3:
31:69:21:3d:27:38:d9:de:cf:89:29:08:e5:5f:25:
10:06:a9:ab:3f:5e:d0:6c:17:4e:17:ac:b1:88:f7:
91:d9:a2:e8:37:a6:d1:f4:03:81:8c:b9:a6:26:e0:
7f:25:ed:67:cd:6c:fb:18:6a:e9:c3:b5:b5:83:2b:
c6:06:f3:cd:e9:d5:3d:42:75:cd:83:c2:b7:e6:d0:
f9:3d:f9:d7:22:66:fc:67:f7:e5:98:0a:a7:6f:b1:
78:00:a7:87:7c:87:5f:ba:60:05:ac:db:ad:16:6a:
9f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:84:4A:AB:D6:E5:0E:EB:A7:F8:EB:FB:87:8F:84:5C:22:43:53:BA
X509v3 Authority Key Identifier:
keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/L4RKq9blDuun-Ov7h4-EXCJDU7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:52c0:ae43::/48
2a14:52c0:af44::/48
2a14:52c0:f045::/48
Signature Algorithm: sha256WithRSAEncryption
b2:e0:90:50:07:33:6a:3f:6d:a6:e6:45:10:aa:b1:f6:ef:88:
33:57:12:4f:d4:b6:9b:b9:aa:f5:8d:c9:4f:9c:bf:3b:a9:67:
cd:57:6d:c1:82:36:2a:b7:38:c3:25:43:ce:41:51:b6:f6:fc:
60:64:9f:c1:19:32:ae:11:3b:3b:dc:2d:6a:89:da:50:ef:83:
08:d2:4c:95:9e:c9:53:66:03:9b:34:15:4e:de:7f:85:fa:5d:
a2:30:b8:21:e1:af:4a:43:58:7a:e7:9c:74:a3:f1:90:68:1f:
c6:bb:f8:20:21:6b:05:08:5c:12:ff:2f:90:ad:99:f3:6d:f0:
c1:9c:ed:76:c6:e7:06:cf:97:c0:57:93:bb:d8:2f:e7:5e:be:
20:2e:ec:22:9b:01:ec:f1:a5:c4:45:40:fb:f3:6d:08:d7:1e:
1b:51:b7:3d:76:3f:c1:00:a9:9b:0e:5b:6e:c7:0a:fb:9f:b6:
ff:44:0c:02:ce:28:2d:45:fc:83:b5:8b:be:69:8f:d1:ee:a9:
26:a9:01:3a:ef:3c:d1:51:6e:28:0d:6d:0d:cb:56:bb:84:b7:
b2:d2:6e:4d:fd:97:d4:bb:b6:a5:77:a1:fe:bd:be:aa:c5:a9:
bc:a6:e9:f4:ab:e1:39:1a:91:34:af:40:d3:91:e5:a3:e6:5a:
07:3a:bb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net