Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/E3V-6uRn5tiPMkd4TkYfzNfsBnc.roa
File: E3V-6uRn5tiPMkd4TkYfzNfsBnc.roa (raw, json)
Hash identifier: 2YWW0vED7zhVhzupabjhBiYxf4QWdwro+K3KsJY8wzs=
Subject key identifier: 13:75:7E:EA:E4:67:E6:D8:8F:32:47:78:4E:46:1F:CC:D7:EC:06:77
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222042AD626D159960298772BD198A37
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/E3V-6uRn5tiPMkd4TkYfzNfsBnc.roa
Signing time: Wed 01 Jan 2025 13:48:47 +0000
ROA not before: Wed 01 Jan 2025 13:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212279
IP address blocks: 2a0e:8f02:f013::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:42:ad:62:6d:15:99:60:29:87:72:bd:19:8a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13757eeae467e6d88f3247784e461fccd7ec0677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:b8:dc:33:9f:33:83:9d:4e:6c:61:8a:55:
ff:75:78:b0:35:4d:43:3f:aa:8d:67:0a:18:63:a3:
c4:7d:9f:d0:63:4d:cf:be:af:db:3d:a2:49:6a:12:
1a:77:b6:0f:59:67:0a:39:5b:b4:e0:88:35:17:c9:
78:7c:1f:a0:80:3a:fb:cb:7a:d0:7d:0f:0d:28:3e:
58:68:54:27:b1:08:3b:f8:d7:a2:af:47:fa:b2:7b:
fa:ee:c2:d0:d7:5a:bc:41:87:91:2d:e0:32:8e:85:
b6:ea:b8:f3:e0:9d:85:10:b9:5a:12:54:74:6d:d4:
71:6d:75:20:73:aa:39:d2:57:30:49:0f:59:15:0f:
0e:47:ee:a0:65:4d:7e:62:2f:27:a6:f5:60:b8:23:
06:9e:77:b7:9d:f5:63:15:31:e8:75:5e:f3:50:70:
f4:a3:ef:f0:3d:5c:42:00:32:0e:e5:84:90:2c:6e:
02:2a:d4:96:b3:92:8a:7e:c7:ca:c7:a1:1e:79:15:
d4:c2:d8:76:99:0e:f3:59:22:a8:09:c4:f8:e6:63:
a5:4e:53:e9:3b:5e:83:b8:59:bc:0e:5f:6b:5b:69:
54:66:ff:66:25:d2:cc:22:05:3d:59:0c:8c:61:23:
f9:af:6b:f6:c5:bc:82:e2:a2:6f:c1:f9:02:2b:b7:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:75:7E:EA:E4:67:E6:D8:8F:32:47:78:4E:46:1F:CC:D7:EC:06:77
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/E3V-6uRn5tiPMkd4TkYfzNfsBnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f013::/48
Signature Algorithm: sha256WithRSAEncryption
9c:fe:b0:c4:52:a0:e1:9e:6c:e6:7a:ff:8f:55:e7:f9:f7:08:
df:7b:d2:a0:1a:fe:9d:07:0e:ba:22:e8:78:39:e0:54:8a:7a:
19:48:19:cc:33:35:6f:8f:c5:3b:f3:9c:0c:fe:49:8d:6f:d0:
3f:8c:0d:a8:20:98:22:26:87:bc:70:6b:ce:ff:1d:a1:bb:cb:
b6:ee:a1:e8:81:86:19:e5:9b:67:60:1f:94:97:40:6a:bd:e4:
29:92:ec:e4:27:3a:35:8f:f9:ae:c0:bd:2e:b1:30:e0:4f:a5:
0a:cd:04:b6:a9:c1:62:20:99:6b:c7:f2:6a:69:64:70:72:21:
b0:3f:88:72:5d:ed:57:e3:95:85:62:9e:8b:f5:e8:6a:1f:20:
ce:1b:07:08:3e:5a:f4:51:94:98:57:7f:42:29:e0:4f:64:bd:
39:7d:42:19:80:39:8a:05:93:24:40:10:5d:5f:e3:c6:3e:f1:
45:66:14:69:6a:14:7c:c7:96:5e:ce:c3:30:0b:db:c1:5d:c9:
b5:85:29:be:4d:b3:2b:f7:21:1a:77:6a:93:74:dc:b8:ba:7d:
c6:3c:83:6a:ba:e3:dd:cf:4d:1a:5a:36:ee:97:69:f2:76:f7:
cd:f5:9f:ff:8f:55:cf:9c:64:d2:2e:79:17:bf:35:60:13:e5:
42:28:19:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:15 2025 by rpki-client