Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d334fd-8aed-4fd2-891c-7e453293c3ca/1/6jOMOj6GIJSIIWUspsdkJv-yDkM.roa
File: 6jOMOj6GIJSIIWUspsdkJv-yDkM.roa (raw, json)
Hash identifier: HLEjxiku/xLNzmsysCp501N3wCXGAjWK+KZHBl2R73c=
Subject key identifier: EA:33:8C:3A:3E:86:20:94:88:21:65:2C:A6:C7:64:26:FF:B2:0E:43
Certificate issuer: /CN=e0aaf8efa1f5aec6dd963c62cf53ada2551adb2a
Certificate serial: 04E4E012
Authority key identifier: E0:AA:F8:EF:A1:F5:AE:C6:DD:96:3C:62:CF:53:AD:A2:55:1A:DB:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Kr476H1rsbdljxiz1OtolUa2yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/d334fd-8aed-4fd2-891c-7e453293c3ca/1/6jOMOj6GIJSIIWUspsdkJv-yDkM.roa
Signing time: Sat 01 Jan 2022 15:02:54 +0000
ROA not before: Sat 01 Jan 2022 15:02:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213021
IP address blocks: 2001:67c:1104::/48 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82108434 (0x4e4e012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0aaf8efa1f5aec6dd963c62cf53ada2551adb2a
Validity
Not Before: Jan 1 15:02:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea338c3a3e8620948821652ca6c76426ffb20e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:58:2f:24:5e:5c:d3:43:c0:93:2b:ed:f8:
a7:bb:a7:3b:ac:b3:d9:82:fb:c1:9d:d7:20:c3:05:
7f:ad:d1:57:19:db:37:1e:63:c2:39:e6:ae:2f:29:
8f:15:73:8f:25:5a:fc:ec:e4:b3:d7:5b:a4:cf:db:
d4:e6:1c:69:c5:78:60:e1:42:87:f5:ea:5c:3c:b3:
f6:b7:1d:3f:45:d4:cf:8c:a6:05:1c:6a:78:94:59:
de:01:a0:67:ad:f6:d9:09:86:16:80:4e:42:a1:b8:
2e:15:8f:1a:65:c3:e2:d3:ee:5a:45:83:6b:bc:93:
79:ec:60:88:d6:72:46:80:9f:af:9d:95:91:24:70:
ee:29:55:81:89:07:4c:dd:22:19:23:97:a9:81:37:
5a:11:ff:9d:ae:ce:b4:1a:fa:28:85:03:4f:9f:10:
75:51:ba:8a:e4:8d:e0:13:d8:59:8d:95:81:3c:9e:
c4:34:bc:86:a3:9b:3d:2d:89:8b:32:ce:b8:17:15:
5d:dc:e9:58:f7:05:87:63:12:97:e7:f8:a8:00:2c:
dc:86:39:ce:4b:63:dc:9a:71:d8:59:4f:d5:4d:25:
a3:35:12:bd:58:1b:7a:14:67:ca:8c:21:c0:be:91:
41:a8:9f:43:f3:a4:10:43:9d:80:a0:0b:17:9c:e2:
04:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:33:8C:3A:3E:86:20:94:88:21:65:2C:A6:C7:64:26:FF:B2:0E:43
X509v3 Authority Key Identifier:
keyid:E0:AA:F8:EF:A1:F5:AE:C6:DD:96:3C:62:CF:53:AD:A2:55:1A:DB:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Kr476H1rsbdljxiz1OtolUa2yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d334fd-8aed-4fd2-891c-7e453293c3ca/1/6jOMOj6GIJSIIWUspsdkJv-yDkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d334fd-8aed-4fd2-891c-7e453293c3ca/1/4Kr476H1rsbdljxiz1OtolUa2yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1104::/48
Signature Algorithm: sha256WithRSAEncryption
07:75:49:12:5e:fb:99:04:ba:08:cb:d4:67:ed:88:42:9e:d6:
d1:fe:2f:ff:81:73:98:da:b4:27:1a:9a:8d:c3:c0:e2:d8:f5:
04:2b:44:b6:27:07:9e:a9:af:48:09:1a:59:10:51:dd:26:90:
ae:61:d8:36:3d:29:a3:97:36:dc:03:a3:1c:ca:ee:35:c8:a4:
50:e6:50:93:49:80:4f:32:3b:10:35:93:66:51:ba:f3:0e:52:
e8:59:80:47:57:93:75:ff:fe:33:41:20:ba:f5:e2:87:ea:8c:
56:d8:e2:a6:92:3f:a8:fd:d8:86:e3:71:79:a2:68:7d:10:f5:
e1:68:95:32:77:3f:e3:69:4f:3e:f5:31:83:5f:a2:b5:be:e2:
14:3d:ad:08:38:1b:24:81:35:20:2c:dc:2f:70:1b:c7:ff:e5:
6f:a9:25:30:25:fc:ec:df:59:80:f7:a1:37:7a:69:42:69:ab:
96:e8:e3:a5:35:31:27:5f:36:b6:4b:79:2e:6e:c8:38:18:8d:
b6:83:4c:f5:9b:3e:13:13:55:af:7c:a3:2e:3d:0b:3a:f7:fe:
ee:bd:a5:5c:4f:77:ff:7d:7e:88:f6:8d:42:99:7a:a9:9a:a9:
79:99:da:78:ad:08:d4:25:f1:32:73:98:07:50:2e:93:d1:44:
a7:05:57:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:09 2025 by rpki-client