Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ETNqieFMnwSX1_1O-iT1rZkajsc.roa
File: ETNqieFMnwSX1_1O-iT1rZkajsc.roa (raw, json)
Hash identifier: zMr40aUqxp0IcedVIUxSbEDe8HyGn1nVCR/raJwbp80=
Subject key identifier: 11:33:6A:89:E1:4C:9F:04:97:D7:FD:4E:FA:24:F5:AD:99:1A:8E:C7
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D98ED588F5C22699341707E3A4C657
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ETNqieFMnwSX1_1O-iT1rZkajsc.roa
Signing time: Thu 02 Jan 2025 11:49:39 +0000
ROA not before: Thu 02 Jan 2025 11:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215050
IP address blocks: 2a03:5840:117::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8e:d5:88:f5:c2:26:99:34:17:07:e3:a4:c6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11336a89e14c9f0497d7fd4efa24f5ad991a8ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:72:40:c9:92:56:fd:96:b3:08:1c:6e:5a:d7:
9c:84:69:d9:98:c9:27:86:9a:bf:51:14:93:72:6f:
cc:20:a3:da:2b:3f:6d:31:a4:c8:62:57:8e:55:e8:
14:37:92:c5:9c:45:06:4c:d5:2a:fd:49:45:16:0b:
17:df:68:96:df:81:88:a5:68:c3:e9:53:00:7e:61:
82:44:a7:6b:9c:d8:0e:30:0c:b1:3e:f9:d7:ce:1a:
5a:99:fb:4f:97:95:61:9f:26:bf:1b:39:63:94:02:
c3:68:7a:71:bd:66:89:1f:2d:62:cf:d1:bc:ad:3f:
e0:e6:d4:14:a5:aa:60:77:5c:0b:2c:76:e2:3c:d4:
e4:9a:e5:25:d0:ff:06:3e:4a:64:54:a4:29:8b:9d:
9f:9a:89:2e:6a:7e:1f:80:c9:24:53:e2:24:59:a5:
2e:79:45:1b:58:5c:b6:84:b6:03:2e:dd:fc:3b:09:
c6:99:91:29:d5:e2:a6:ea:b7:a8:b1:0f:33:65:9f:
7a:52:c8:05:71:51:37:3c:a5:11:3a:61:24:02:83:
94:70:94:7b:c1:b5:79:85:ef:01:11:9d:9f:e7:52:
97:60:ee:36:62:69:f4:7e:0e:dc:e5:85:36:2c:1f:
4f:c0:b9:cf:12:5e:71:f3:05:6b:60:cd:2d:b0:5b:
9d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:33:6A:89:E1:4C:9F:04:97:D7:FD:4E:FA:24:F5:AD:99:1A:8E:C7
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/ETNqieFMnwSX1_1O-iT1rZkajsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:117::/48
Signature Algorithm: sha256WithRSAEncryption
6e:36:04:57:3a:32:db:11:d4:a7:50:29:4a:ac:d7:f8:29:c9:
4d:7e:9f:41:d6:42:43:4a:1f:7f:dd:65:4f:90:37:4c:b3:9a:
1f:3d:2b:b2:b1:21:65:d3:14:e3:93:e2:18:96:8d:5f:21:60:
d6:5b:37:08:65:06:7f:78:25:75:78:50:71:59:25:87:a5:40:
46:26:38:c8:29:1c:ad:ec:05:e5:b4:12:86:5a:69:b6:d1:16:
a4:74:00:24:4a:b3:4c:24:27:df:1f:75:ef:f5:e3:c4:d0:68:
c5:16:49:cf:68:a5:77:2c:b5:1b:39:33:23:1c:db:e4:4e:0f:
b0:d3:da:b5:51:4e:28:43:c1:cd:cd:b1:2d:5b:38:25:11:0a:
ef:6c:8a:d0:c1:60:0f:bb:1f:6b:16:6b:96:d1:75:c2:e1:14:
62:cd:03:2f:1f:32:35:a0:34:70:72:3f:04:f5:a4:49:34:c2:
8e:b5:05:71:68:ff:ef:e9:39:ea:30:bc:f6:9f:63:a1:33:f0:
f6:af:50:94:b8:da:49:8a:41:ef:86:19:e8:73:51:53:f3:59:
ef:21:88:0e:9e:17:22:bb:18:7b:a4:cc:cf:a4:66:bc:62:8d:
f1:cb:18:fe:f4:92:f4:58:90:13:75:2f:8a:f2:1d:d9:06:39:
7f:ef:53:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:08:17 2025 by rpki-client