Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/EtMkTWvI58D-qupiUEl0MY2JiGg.roa
File: EtMkTWvI58D-qupiUEl0MY2JiGg.roa (raw, json)
Hash identifier: Uz/Ifsb2B9YKip4rb0sqaf9NKH2gpjgn6z0w/NesOiA=
Subject key identifier: 12:D3:24:4D:6B:C8:E7:C0:FE:AA:EA:62:50:49:74:31:8D:89:88:68
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 0194244599832CC9B8E803EDD6BE1007199A
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/EtMkTWvI58D-qupiUEl0MY2JiGg.roa
Signing time: Wed 01 Jan 2025 23:48:48 +0000
ROA not before: Wed 01 Jan 2025 23:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215288
IP address blocks: 2a05:4140:56::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:99:83:2c:c9:b8:e8:03:ed:d6:be:10:07:19:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 23:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12d3244d6bc8e7c0feaaea62504974318d898868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:c6:9b:c1:c2:39:8c:5b:a8:af:37:3d:54:
fa:7d:12:b4:5e:de:e0:b7:05:96:19:c6:d4:84:5f:
af:cd:26:3d:5d:2d:ed:c1:29:13:90:ed:15:74:e5:
e8:04:88:12:5c:24:dc:ac:d8:5a:55:79:da:a4:13:
2c:1c:cd:d9:6b:1d:26:63:19:64:71:2a:14:3c:3d:
66:2b:ec:ee:a0:76:ee:38:09:fb:be:2e:4d:f7:d3:
e0:f7:e4:24:74:cd:73:2d:f2:d4:4f:73:5c:df:cf:
df:d8:55:ae:cb:6c:18:f1:1a:fc:2b:f5:15:3a:a8:
d3:e0:9a:19:c8:dd:b6:3c:b9:4a:e0:60:d3:f9:f4:
9e:f1:78:76:23:37:de:4e:db:3f:d7:ea:b3:45:5c:
1c:a8:db:8c:ac:37:f1:6b:ff:29:58:ea:8b:fe:bc:
05:23:b1:19:9e:e8:52:92:bc:99:18:d7:47:03:8b:
a2:b7:ad:d1:73:31:ec:86:a1:d2:f5:68:dc:92:1e:
04:a7:62:9f:15:59:57:df:74:64:42:6a:ed:be:0e:
df:0a:e0:dd:77:fa:08:b1:63:b4:09:73:92:fa:3b:
17:6d:4f:7b:e9:af:e4:4e:db:69:0e:10:a3:33:d6:
82:47:99:3a:b6:5c:1f:1b:a1:0f:59:7c:eb:01:1e:
77:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D3:24:4D:6B:C8:E7:C0:FE:AA:EA:62:50:49:74:31:8D:89:88:68
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/EtMkTWvI58D-qupiUEl0MY2JiGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:56::/48
Signature Algorithm: sha256WithRSAEncryption
73:95:43:cf:5a:00:f5:8d:21:38:95:32:c4:55:d3:95:be:99:
d3:71:da:c5:45:e0:97:c0:a0:9f:17:1f:6f:74:8a:6a:45:f5:
89:1a:69:bb:5a:d0:c2:17:03:e4:70:1c:a0:21:fd:ed:14:46:
df:7a:29:c9:fc:7c:04:30:3f:ff:79:93:06:9c:0c:d8:12:e4:
32:56:a1:6c:08:44:6d:cc:a0:a1:c4:e0:74:d7:8b:09:7f:02:
01:79:8e:41:14:bc:96:e4:76:62:b0:4e:44:a1:2b:5d:85:7b:
0a:f9:27:99:91:fa:b8:c3:bc:c8:d7:77:9e:ed:54:c8:45:25:
cf:2f:fb:67:ea:59:12:55:9d:cc:95:36:33:c6:56:76:bd:c2:
96:67:6e:1c:53:6d:f6:18:7c:12:1e:2d:dd:bf:d8:d5:64:72:
88:70:b4:b6:7c:5e:81:70:d7:ae:ab:d9:6b:a6:76:92:a2:9d:
bf:6c:1e:30:09:b3:5b:ce:ae:e1:51:70:70:a6:8d:2e:1e:58:
34:2b:fa:77:a8:ef:3a:aa:e7:f7:b0:8c:49:61:8b:6b:15:b1:
c1:cc:c2:1b:aa:8c:c5:8b:95:af:62:e4:8b:09:99:d0:7b:31:
9a:cc:38:72:cd:d5:1b:d0:cd:e4:91:b3:0a:07:7e:65:d7:d4:
5e:5f:3c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:05 2025 by rpki-client