Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/EKSKrQ1FbAZmq1KtPIW7Uy3IctY.roa
File: EKSKrQ1FbAZmq1KtPIW7Uy3IctY.roa (raw, json)
Hash identifier: QeMTexv2bHp61zdnXh2g6I+MqFr8HxGSohB7DT8On60=
Subject key identifier: 10:A4:8A:AD:0D:45:6C:06:66:AB:52:AD:3C:85:BB:53:2D:C8:72:D6
Certificate issuer: /CN=8faccbac71477b940e5cd4103e3eee61db615915
Certificate serial: 019425FDEC52FA2915838881B96EC5E1840A
Authority key identifier: 8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/EKSKrQ1FbAZmq1KtPIW7Uy3IctY.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a14:7240:a10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ec:52:fa:29:15:83:88:81:b9:6e:c5:e1:84:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8faccbac71477b940e5cd4103e3eee61db615915
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10a48aad0d456c0666ab52ad3c85bb532dc872d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:4d:2c:81:76:d6:46:2f:9a:40:09:6b:31:
15:af:85:69:30:d2:ff:69:59:8a:58:b7:26:af:26:
6a:21:fc:c3:ad:a0:b7:c9:d4:19:7a:a8:be:90:23:
37:e5:0a:00:6b:d6:96:55:45:ae:75:5f:3f:f5:55:
bc:4b:f5:cc:4f:64:d5:b9:3f:0b:1d:f1:e7:f2:cf:
87:ae:a2:79:53:8b:80:20:f1:90:4b:a1:fb:a9:f3:
85:d9:fe:e4:b8:24:ae:fb:02:27:95:71:34:1b:0d:
07:79:ac:cc:96:e1:7f:12:83:66:c1:12:aa:43:1a:
27:2e:d9:08:e6:c2:c0:58:59:d3:a5:7c:d3:cc:46:
eb:c3:69:8d:28:08:40:d2:fd:48:bf:7b:4b:e5:bd:
c2:1c:92:4a:f5:e7:6e:4f:43:08:39:40:4c:c8:4d:
9a:e4:a0:13:89:70:0e:6f:2d:ef:a1:b9:25:5c:26:
21:af:ef:03:38:d6:b5:8e:e3:09:0c:e2:9c:71:15:
76:ab:3c:1d:fa:ff:c0:1c:b1:e5:1a:ee:88:b2:1a:
d7:4b:cc:82:6d:2f:aa:ab:4c:41:da:7c:87:c7:d3:
20:fe:39:c4:63:8b:6f:83:8a:aa:9e:48:39:69:40:
53:ee:14:a5:88:43:b3:16:54:61:9c:7b:22:b5:a8:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A4:8A:AD:0D:45:6C:06:66:AB:52:AD:3C:85:BB:53:2D:C8:72:D6
X509v3 Authority Key Identifier:
keyid:8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/EKSKrQ1FbAZmq1KtPIW7Uy3IctY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7240:a10::/48
Signature Algorithm: sha256WithRSAEncryption
33:3a:bd:ed:76:f2:bf:89:ac:4d:99:c5:0c:52:66:ed:b4:28:
36:16:c8:bc:47:d8:07:cb:7b:88:c8:29:1b:c3:f9:4d:47:a9:
40:d0:4a:bf:c3:01:d1:b6:31:ba:bc:45:3e:1c:e2:12:32:6b:
dc:de:3c:e3:f0:59:70:eb:bd:d9:07:60:aa:58:d9:b1:22:02:
6f:c6:8e:25:9a:25:62:7b:14:c8:c8:b0:60:fa:53:2b:ce:5f:
04:3a:c8:ff:ec:4d:c1:aa:01:36:07:fb:3e:00:f6:8e:b0:9f:
e3:cf:97:7f:92:47:18:54:d1:15:24:43:ed:da:36:f1:4c:0e:
cb:cf:98:ea:e2:05:f8:b6:5e:88:49:02:b5:0e:ba:c5:c0:db:
b0:61:10:bc:79:21:9c:06:0f:93:ff:c5:ee:12:6a:51:9a:d8:
1f:24:f0:b8:0e:41:f2:f5:2a:80:95:c6:27:4e:66:66:16:3d:
cd:7d:ec:1f:ef:51:b4:91:4f:14:17:43:40:66:02:5a:e7:c1:
aa:14:7f:42:6d:2d:8e:bb:f0:6d:8f:73:d1:63:10:3f:67:2a:
bc:85:3a:38:70:fa:c0:33:ca:d2:7e:b0:ef:58:9c:90:f7:98:
a7:2c:b7:b7:11:81:15:11:04:91:4a:5c:fe:3e:f0:ea:bc:cf:
a6:8d:ed:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:23 2025 by rpki-client