Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/EcylFX8rKCuqddnyZyQ6DsWjFEY.roa
File: EcylFX8rKCuqddnyZyQ6DsWjFEY.roa (raw, json)
Hash identifier: SeHwrmL96dNvtM4M9LOn2tSgyw76oOLXe2/cn9Nvo94=
Subject key identifier: 11:CC:A5:15:7F:2B:28:2B:AA:75:D9:F2:67:24:3A:0E:C5:A3:14:46
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EE41F27E20C8545868F2E4F064280
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/EcylFX8rKCuqddnyZyQ6DsWjFEY.roa
Signing time: Thu 02 Jan 2025 05:48:29 +0000
ROA not before: Thu 02 Jan 2025 05:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210903
IP address blocks: 2a0e:aa07:e025::/48 maxlen: 48
2a0e:aa07:e200::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:e4:1f:27:e2:0c:85:45:86:8f:2e:4f:06:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11cca5157f2b282baa75d9f267243a0ec5a31446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:38:c7:af:1a:40:2e:70:5e:97:91:c2:df:
3c:2c:15:c1:b2:75:b3:da:52:08:d4:97:d1:42:ae:
48:6d:ca:a8:60:2d:ce:54:cc:08:04:c8:90:e1:84:
6a:0b:62:27:95:6a:f8:fb:50:8e:e5:cc:3b:3c:4b:
5a:6b:48:d7:89:23:0f:c2:21:5b:1a:b4:68:03:eb:
e8:86:4f:e0:38:06:bb:a6:97:12:c0:99:e0:53:e0:
36:bb:c1:c9:67:91:b8:b2:5e:4f:6f:77:3d:f6:2f:
e1:b5:91:2c:d2:cb:cf:df:7e:a4:3a:0a:12:45:91:
fe:a5:cc:88:ae:46:65:3d:6f:23:02:b3:43:ef:ee:
25:23:75:ed:29:f7:6e:ca:01:5e:02:88:2d:88:59:
b8:05:b8:88:73:da:88:54:4a:b8:0e:93:b0:68:1d:
23:3e:5c:55:7e:d2:1a:8f:e8:b4:19:52:42:e2:3b:
ae:9c:e1:d4:7e:59:b9:21:bc:b9:fa:7e:89:44:c5:
e1:35:5c:2a:31:72:a4:a3:18:56:4d:30:c4:0e:e8:
ba:5b:67:67:45:0b:d3:64:30:80:e7:89:59:ce:34:
05:cc:4c:05:18:71:a5:8c:6b:85:f6:99:d7:11:15:
a3:93:2b:09:b4:5c:6e:8e:cb:05:d5:e3:61:a0:65:
6e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CC:A5:15:7F:2B:28:2B:AA:75:D9:F2:67:24:3A:0E:C5:A3:14:46
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/EcylFX8rKCuqddnyZyQ6DsWjFEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e025::/48
2a0e:aa07:e200::/44
Signature Algorithm: sha256WithRSAEncryption
2f:b8:a3:a4:24:2a:58:cf:73:42:52:30:22:ac:05:5b:64:e1:
62:06:31:2e:ee:37:a0:7d:39:ee:41:2c:e2:0e:3a:2d:d9:bd:
7f:34:04:7a:22:57:ec:8e:8e:a7:d0:9a:a6:a1:3e:ed:32:f8:
6e:57:1b:17:10:eb:fb:fc:16:47:05:59:28:48:24:32:f1:a9:
99:bb:de:34:d0:5b:9a:92:39:e4:db:31:ec:de:37:cf:ec:00:
ab:fe:23:ba:5b:5d:46:3d:d2:62:36:23:a3:5d:92:98:1d:a0:
ca:88:7a:90:d7:a3:6c:84:e0:ba:31:fb:4f:23:1b:3f:7e:a1:
c4:a9:d5:2a:cd:12:f9:c8:df:f7:f7:f7:dd:df:8b:d7:04:1c:
43:40:da:1e:62:5d:c0:69:40:ef:4d:68:e3:b1:8c:7d:46:a3:
16:3b:83:57:df:3c:fe:9f:1b:70:5b:ca:e8:e4:5e:0d:09:1d:
27:c3:b8:d7:f0:01:18:ee:c6:68:bd:21:6a:d7:d1:da:c9:85:
69:d9:9b:b2:f9:99:a1:ca:dd:9d:d0:62:a0:3c:0f:ed:4b:d9:
78:86:48:ee:59:fa:a5:f3:71:b4:8d:e5:f4:ea:7c:75:36:fe:
ff:79:75:11:71:73:18:88:f3:51:36:c9:af:e7:57:89:cc:e5:
4e:06:d8:d8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQljuQfJ+IMhUWGjy5PBkKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjUwMTAyMDU0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWNjYTUxNTdmMmIyODJiYWE3NWQ5ZjI2NzI0M2EwZWM1YTMxNDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskA4x68aQC5wXpeRwt88LBXBsnWz
2lII1JfRQq5IbcqoYC3OVMwIBMiQ4YRqC2InlWr4+1CO5cw7PEtaa0jXiSMPwiFb
GrRoA+vohk/gOAa7ppcSwJngU+A2u8HJZ5G4sl5Pb3c99i/htZEs0svP336kOgoS
RZH+pcyIrkZlPW8jArND7+4lI3XtKfduygFeAogtiFm4BbiIc9qIVEq4DpOwaB0j
PlxVftIaj+i0GVJC4juunOHUflm5Iby5+n6JRMXhNVwqMXKkoxhWTTDEDui6W2dn
RQvTZDCA54lZzjQFzEwFGHGljGuF9pnXERWjkysJtFxujssF1eNhoGVuPQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBHMpRV/KygrqnXZ8mckOg7FoxRGMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvRWN5bEZYOHJLQ3VxZGRueVp5UTZEc1dqRkVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6qB+Al
AwcEKg6qB+IAMA0GCSqGSIb3DQEBCwUAA4IBAQAvuKOkJCpYz3NCUjAirAVbZOFi
BjEu7jegfTnuQSziDjot2b1/NAR6Ilfsjo6n0JqmoT7tMvhuVxsXEOv7/BZHBVko
SCQy8amZu9400Fuakjnk2zHs3jfP7ACr/iO6W11GPdJiNiOjXZKYHaDKiHqQ16Ns
hOC6MftPIxs/fqHEqdUqzRL5yN/39/fd34vXBBxDQNoeYl3AaUDvTWjjsYx9RqMW
O4NX3zz+nxtwW8ro5F4NCR0nw7jX8AEY7sZovSFq19HayYVp2Zuy+Zmhyt2d0GKg
PA/tS9l4hkjuWfql83G0jeX06nx1Nv7/eXURcXMYiPNRNsmv51eJzOVOBtjY
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:06:01 2025 by rpki-client