Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/EtzxSlEo4Oei86nZYepCuUtxMvc.roa
File: EtzxSlEo4Oei86nZYepCuUtxMvc.roa (raw, json)
Hash identifier: WIxSd+APrpX+6eksmVIglqfA1UMIR6TjJx5RNm4a3Lc=
Subject key identifier: 12:DC:F1:4A:51:28:E0:E7:A2:F3:A9:D9:61:EA:42:B9:4B:71:32:F7
Certificate issuer: /CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Certificate serial: 018E0D30BAD07A6698867C4D75001CC8AACB
Authority key identifier: C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/EtzxSlEo4Oei86nZYepCuUtxMvc.roa
Signing time: Tue 05 Mar 2024 05:58:01 +0000
ROA not before: Tue 05 Mar 2024 05:58:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200216
IP address blocks: 2a13:2880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0d:30:ba:d0:7a:66:98:86:7c:4d:75:00:1c:c8:aa:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96c0586b059bca6eb725d6adc8344480c1b0341
Validity
Not Before: Mar 5 05:58:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12dcf14a5128e0e7a2f3a9d961ea42b94b7132f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b9:53:8f:80:34:66:d3:b6:c9:93:83:9e:1a:
11:e5:f2:18:5d:5c:bc:ae:8a:27:ea:70:2a:04:eb:
5a:3d:3a:d9:4d:7c:54:05:b8:91:5a:ff:ea:38:60:
4b:41:f5:a7:ba:cf:19:18:f1:8d:dc:be:91:9a:d0:
a5:e5:b0:bb:a0:70:91:a5:e4:73:8c:d2:84:27:c8:
c9:d3:ba:9c:e2:df:2f:b2:58:ab:69:a6:fe:a2:bc:
04:b0:7f:cd:f1:ff:13:7b:8f:8b:1f:43:3f:5e:24:
11:cd:e3:1c:3b:b7:8a:3d:0f:84:0a:b7:4a:85:84:
ec:ef:82:aa:a9:9f:32:03:e6:b1:bd:59:cc:57:33:
28:19:9e:17:31:ae:63:13:23:e3:7c:a6:7a:f2:11:
27:b2:31:3a:b9:06:8e:30:e6:08:51:4f:0b:ca:18:
50:20:91:9e:f7:16:f5:96:c0:5f:ec:9c:36:ab:04:
ad:1e:02:ba:a5:17:99:f6:52:db:ea:dc:a3:da:af:
ab:4c:00:85:9b:63:c3:09:63:13:b5:c8:e5:d3:af:
b8:f9:cf:44:d6:4a:00:b0:b9:88:db:7c:d1:2f:7c:
90:03:59:f1:e0:1c:18:85:85:da:b6:21:87:3b:f7:
40:63:43:79:69:0a:3c:a0:39:a3:92:80:49:b3:6c:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DC:F1:4A:51:28:E0:E7:A2:F3:A9:D9:61:EA:42:B9:4B:71:32:F7
X509v3 Authority Key Identifier:
keyid:C9:6C:05:86:B0:59:BC:A6:EB:72:5D:6A:DC:83:44:48:0C:1B:03:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWwFhrBZvKbrcl1q3INESAwbA0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/EtzxSlEo4Oei86nZYepCuUtxMvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/19a811-985e-46d4-87dd-3dfae8397a60/1/yWwFhrBZvKbrcl1q3INESAwbA0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2880::/29
Signature Algorithm: sha256WithRSAEncryption
3d:a5:86:5f:ad:1a:df:73:0a:c4:1f:d3:29:9f:21:5c:9e:58:
81:1a:e5:0f:78:df:e4:42:4b:49:85:51:2f:16:e6:21:a4:e5:
aa:0c:62:21:48:aa:01:fe:17:61:dc:27:6c:1e:2f:0b:f5:2f:
65:62:31:55:82:57:2a:5d:f7:24:b5:1e:25:a0:08:73:af:43:
c1:ee:42:b3:de:81:75:b1:0b:73:20:87:c5:3f:f3:16:e2:44:
e1:27:75:a5:96:18:00:cb:04:26:d5:ad:02:d6:68:18:43:65:
0c:73:27:19:c0:21:47:5d:9a:b0:b2:1e:18:9d:d0:b2:04:e9:
b5:83:f1:dd:50:0e:0b:d0:7b:66:0f:4c:cc:13:f3:9e:83:70:
93:e7:e7:0c:1d:d2:85:db:b7:b8:b1:9e:e1:59:94:43:b2:90:
3c:b5:78:e9:5c:2b:f7:ff:32:2a:71:a2:c2:a1:58:57:1d:eb:
5b:c6:64:88:a2:86:14:a9:9f:5d:bc:59:ef:b6:b1:cb:d5:02:
fc:b2:99:6d:0b:64:0b:8a:73:63:5c:c0:13:e0:99:35:e3:57:
7f:3b:c9:b1:e7:c6:a0:c1:ec:a3:7f:07:6c:58:57:7b:9e:07:
3e:33:93:91:11:83:14:de:b0:62:9f:73:8c:61:a8:72:bb:ac:
1f:d2:66:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:29 2025 by rpki-client