Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/eq5Eim9KBsmi3XU8htjV8anK_NE.roa
File: eq5Eim9KBsmi3XU8htjV8anK_NE.roa (raw, json)
Hash identifier: EyydfpDXeHT6D2quI197b3wlG8U+XsJ23kRkj7BvaNU=
Subject key identifier: 7A:AE:44:8A:6F:4A:06:C9:A2:DD:75:3C:86:D8:D5:F1:A9:CA:FC:D1
Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial: 01942747AF6206C7691E66DC681CFFE064AA
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/eq5Eim9KBsmi3XU8htjV8anK_NE.roa
Signing time: Thu 02 Jan 2025 13:49:56 +0000
ROA not before: Thu 02 Jan 2025 13:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212027
IP address blocks: 2a14:15c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:af:62:06:c7:69:1e:66:dc:68:1c:ff:e0:64:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
Validity
Not Before: Jan 2 13:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7aae448a6f4a06c9a2dd753c86d8d5f1a9cafcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:aa:9f:b2:f5:dc:b5:37:5c:82:c7:40:80:
e7:a1:e6:4d:c6:71:a5:03:b7:01:e4:ce:2e:8e:53:
0b:eb:95:ea:d2:1f:ce:f7:45:94:b2:26:8e:11:b3:
da:10:6f:fc:34:5e:8e:01:a9:32:05:49:43:36:26:
07:bc:83:62:5c:a3:7a:f4:d1:d4:c8:ed:7f:62:d0:
de:be:a3:fb:a9:ec:82:61:a1:2b:4e:bc:f2:14:0a:
71:d4:b5:d0:a1:22:66:15:e4:46:d0:bd:8a:fa:e5:
99:50:a6:f5:b0:cd:20:0c:52:79:1a:83:e0:0f:c3:
52:b7:0a:c3:91:bf:be:fa:e6:07:69:6a:91:f0:06:
68:e9:61:1d:96:88:89:22:08:21:f0:49:98:e6:e7:
11:eb:95:c8:ef:28:79:ce:1a:20:53:f7:24:bf:c4:
b8:78:67:e8:1d:3d:49:45:72:6a:05:59:57:5a:38:
88:56:09:ab:d8:c8:e7:6d:78:dd:17:f0:45:4d:68:
f2:cc:25:b9:43:6f:11:5d:3c:4b:66:72:24:bb:e2:
e8:83:88:05:f5:3b:84:ca:89:e0:ce:c4:74:eb:2e:
59:e0:20:a1:b7:7d:20:7e:96:07:8b:60:b6:3d:78:
1d:cf:66:3e:5f:f1:1e:5e:9c:cd:81:05:7a:cd:c6:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AE:44:8A:6F:4A:06:C9:A2:DD:75:3C:86:D8:D5:F1:A9:CA:FC:D1
X509v3 Authority Key Identifier:
keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/eq5Eim9KBsmi3XU8htjV8anK_NE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:a1:87:bb:d8:00:67:ae:08:23:ad:5f:c7:2f:bc:25:7a:82:
85:00:b8:b1:0e:ac:90:ec:21:d7:8c:68:da:c4:c4:8d:3f:59:
3a:86:b1:02:55:31:5f:bf:18:63:aa:38:f7:3d:2e:e7:b0:68:
10:79:95:c5:2c:a7:28:af:ce:c9:5a:af:ae:23:19:f0:9f:17:
d4:dc:a8:57:90:fb:f5:38:d2:13:5c:10:ce:42:fd:ed:9d:ac:
ee:e7:46:7a:0e:a7:f9:4d:f2:d5:a5:64:5f:01:28:4b:c3:17:
4c:39:c2:2e:61:91:aa:c5:38:d0:3b:da:ab:91:15:8e:b9:ce:
a4:1f:a1:90:5a:3f:24:d6:79:81:70:c3:53:5f:20:22:cc:43:
5f:89:75:6a:74:9b:8d:81:b2:be:44:f3:55:ff:18:4e:73:16:
ef:33:fd:4d:59:cd:61:60:30:78:4c:1e:6e:8d:30:4a:c9:7c:
48:6e:f0:36:fe:c6:c1:c5:77:60:6c:95:58:83:8c:0c:76:f8:
f9:46:2a:af:a1:ab:b1:48:51:f3:a4:d2:71:eb:44:8d:54:d5:
18:9d:6a:e6:e6:c2:97:a7:e4:f0:cf:1a:a4:10:7a:e0:bc:ed:
db:06:3f:55:a7:54:27:ea:c1:53:c7:2d:b7:30:e6:bc:bd:8f:
21:83:e9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:53:51 2025 by rpki-client