Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/EyhOhnS-dh85bLrIatnotrj633k.roa
File: EyhOhnS-dh85bLrIatnotrj633k.roa (raw, json)
Hash identifier: uaMbS52/Rq7xCKN1Go+BTPVuBTmDhRAWyG5p4TGatBI=
Subject key identifier: 13:28:4E:86:74:BE:76:1F:39:6C:BA:C8:6A:D9:E8:B6:B8:FA:DF:79
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0194274812099888D801B8694C1F7F370846
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/EyhOhnS-dh85bLrIatnotrj633k.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151338
IP address blocks: 2a13:b487:4f00::/40 maxlen: 48
2a13:b487:5000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:12:09:98:88:d8:01:b8:69:4c:1f:7f:37:08:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13284e8674be761f396cbac86ad9e8b6b8fadf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:92:dc:b1:a6:7a:33:c1:ce:01:61:2c:fc:
05:49:14:c4:1f:fd:c2:c0:4c:d5:ba:06:86:4d:34:
50:8a:e4:3b:d7:b0:b4:a1:62:39:fb:b5:c1:b0:28:
65:60:91:61:8b:ea:25:b3:49:80:d1:9e:92:7e:b5:
ed:cb:d6:e7:03:1a:84:fe:d1:01:c7:8c:1e:4b:f6:
a7:ee:59:a1:20:28:5f:8a:3f:dd:76:4c:ad:2f:82:
6b:7f:49:9c:38:c7:09:ab:b6:ba:92:83:6f:8f:21:
f7:4a:e4:9f:7d:89:fd:8a:31:53:6c:8d:60:a1:de:
bb:5c:4c:e6:9d:2e:a6:e8:8d:24:9c:6e:a1:52:3c:
fd:06:56:a4:d6:47:f1:c7:73:39:7a:d5:21:e6:0f:
4c:ae:5e:27:1c:9a:f8:d8:f7:6c:1b:78:f6:4c:05:
97:12:66:d5:48:a5:0b:ed:f9:40:0f:45:d1:04:24:
36:e7:2d:1d:01:b1:2d:c3:87:2e:69:63:3b:9a:83:
1a:57:6a:ac:c4:03:6d:ff:17:4f:6e:a8:3d:54:5f:
a2:6d:d1:2e:53:11:31:5a:8c:b0:25:28:f8:73:df:
cf:c1:40:c5:96:18:c2:d0:18:e1:8c:b3:16:e5:22:
fb:3c:9c:fb:86:42:d0:4f:6f:2d:40:00:65:91:e9:
58:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:28:4E:86:74:BE:76:1F:39:6C:BA:C8:6A:D9:E8:B6:B8:FA:DF:79
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/EyhOhnS-dh85bLrIatnotrj633k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:4f00::-2a13:b487:50ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4c:17:59:8d:9a:95:4b:98:4b:a7:06:6f:46:57:04:36:af:9b:
89:17:11:6d:e7:fe:c3:3e:11:72:ce:e5:94:b8:b0:7b:4f:51:
2f:80:90:40:1e:a2:69:01:7a:6e:9b:63:20:5b:9f:8b:f9:59:
18:79:db:57:d1:1b:25:cd:87:7a:c8:00:2d:ee:5e:ca:a1:83:
75:c6:0f:00:fc:9b:2e:5d:56:6f:60:82:c9:63:3a:de:36:be:
43:e4:b4:2e:f0:a4:2d:f8:c0:fc:1a:62:67:cf:34:1a:e1:43:
3e:e5:1b:bb:d9:6f:bf:ab:37:18:66:98:d0:33:b1:2f:fb:e6:
49:f1:5a:12:22:9b:d4:ac:ba:90:88:b5:ce:ee:a4:fd:66:e3:
d2:8e:57:8a:52:d8:a2:92:2a:7b:74:34:af:d8:3a:c4:72:bc:
f1:e1:e3:4a:38:59:a2:d9:d8:ed:1b:80:df:19:e3:34:2f:e2:
10:e3:7a:02:af:ce:32:3f:38:48:14:c9:e1:90:51:5a:f3:88:
31:67:94:93:97:2f:af:2d:e5:f3:d2:37:c2:f5:f4:c8:76:b7:
16:ee:07:16:0d:06:29:d3:41:a5:de:2a:bb:a0:cc:7f:d7:65:
76:61:2e:3f:ed:48:bd:f2:e2:9b:22:84:c4:e6:04:6a:33:2d:
5e:e1:dd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:19:34 2025 by rpki-client