Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Ez8iuhzbFN335a85h4i2AJzv6ks.roa
File: Ez8iuhzbFN335a85h4i2AJzv6ks.roa (raw, json)
Hash identifier: fwR1d+u4Mt5/hRar9EHDuli+BnQ/yUO6Oj6F6iOA0+0=
Subject key identifier: 13:3F:22:BA:1C:DB:14:DD:F7:E5:AF:39:87:88:B6:00:9C:EF:EA:4B
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 0194258EF19B0FAB076D8E3B342DFC14FD77
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Ez8iuhzbFN335a85h4i2AJzv6ks.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215848
IP address blocks: 2a0e:aa07:e160::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f1:9b:0f:ab:07:6d:8e:3b:34:2d:fc:14:fd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=133f22ba1cdb14ddf7e5af398788b6009cefea4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:94:01:ec:64:aa:a6:29:4d:b6:70:b9:b8:c6:
8b:f3:20:12:36:76:a3:55:37:55:12:e2:af:72:4b:
8b:52:46:ff:1f:07:e1:c5:23:5d:6b:e5:9b:95:03:
3c:64:60:c1:59:e6:b4:9a:0b:30:e8:9d:78:fb:71:
b0:d8:93:76:9c:6b:77:8d:80:9e:c5:c5:8d:10:a7:
4f:5e:ba:49:01:4e:fb:ec:14:2f:e9:f0:cf:c6:21:
0f:1c:f6:12:ca:75:07:99:18:a3:83:30:78:49:c0:
61:0f:cf:e6:1d:ca:f2:fd:a8:c1:d6:18:e3:48:5f:
6c:92:d5:f6:3f:72:fb:6c:52:d7:f4:d6:25:7d:4c:
ef:31:2a:2d:43:7e:b8:a4:a6:a4:4f:00:58:73:51:
ec:23:4b:d9:86:d1:76:e0:5f:93:18:14:ac:2a:d3:
17:c8:74:5b:8a:89:0d:8d:d7:a4:9d:48:4c:b6:93:
6a:c0:25:5e:6d:5c:da:f8:a0:7e:0e:c0:ef:7e:24:
53:2a:33:a4:1d:e0:11:7a:18:b8:dd:e2:89:fb:53:
23:cd:f0:8a:36:89:20:8b:6b:0a:81:d3:8c:8a:18:
d1:df:25:14:b8:af:fb:cb:e1:c5:5f:41:36:f0:66:
1c:54:72:40:28:44:a0:2a:0a:86:52:b4:2e:f0:bf:
cc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3F:22:BA:1C:DB:14:DD:F7:E5:AF:39:87:88:B6:00:9C:EF:EA:4B
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Ez8iuhzbFN335a85h4i2AJzv6ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e160::/44
Signature Algorithm: sha256WithRSAEncryption
ad:21:b2:c8:bd:71:c4:df:56:61:f2:3e:02:ff:c3:53:d6:5c:
1f:77:aa:44:e7:5e:94:7e:02:6e:03:f3:14:ec:58:41:49:f8:
2d:f0:14:e2:69:e0:c4:8b:b1:a6:7c:f0:94:11:26:76:67:9a:
5c:d0:96:06:1e:e7:3d:db:d7:db:e3:76:09:4f:51:7f:88:21:
03:3d:6e:5d:70:47:49:50:ce:db:a9:63:33:06:3e:47:29:f4:
60:91:5d:e8:6c:19:d4:75:2a:28:0f:3e:5f:7a:03:87:c9:e7:
52:0e:9d:c5:a5:d2:d5:9c:e6:f8:e0:2a:57:94:75:21:24:83:
9e:4b:75:03:35:cd:4f:eb:83:f3:5b:e0:4f:9f:ae:2e:df:78:
d5:82:0b:25:d8:6c:01:52:5b:98:30:6e:59:24:05:02:43:8a:
56:c2:6e:52:14:1e:f0:6c:31:16:e9:1e:ec:f6:11:95:d4:08:
60:ed:e0:ce:d7:7f:54:76:c2:7d:d8:c3:d9:66:ed:14:b7:1f:
e5:d7:86:a2:98:94:ce:9a:46:a5:ec:db:7f:cf:20:3b:1c:d6:
08:de:3c:64:75:7e:b5:d3:19:87:75:8b:79:43:e9:35:6a:32:
ec:66:64:8f:30:b6:2c:f8:e6:10:58:11:a7:99:7b:3d:7e:25:
c0:af:32:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:50 2025 by rpki-client