Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/IEgpKV3GE84Y8I1WB4Uzt5zcxEo.roa
File: IEgpKV3GE84Y8I1WB4Uzt5zcxEo.roa (raw, json)
Hash identifier: z3xWk24L9pcDAvE582qRxF9zxdsiJS3qQk9WOfqCNKY=
Subject key identifier: 20:48:29:29:5D:C6:13:CE:18:F0:8D:56:07:85:33:B7:9C:DC:C4:4A
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 0193729B727CE5ACFDAE7CA85AAACC00ECD0
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/IEgpKV3GE84Y8I1WB4Uzt5zcxEo.roa
Signing time: Thu 28 Nov 2024 11:50:10 +0000
ROA not before: Thu 28 Nov 2024 11:50:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47152
IP address blocks: 2a05:b0c7:5000::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:72:9b:72:7c:e5:ac:fd:ae:7c:a8:5a:aa:cc:00:ec:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Nov 28 11:50:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=204829295dc613ce18f08d56078533b79cdcc44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:2c:23:aa:69:ed:da:0a:16:c5:50:17:e6:2a:
99:8a:57:82:9e:d1:c7:bb:84:ab:11:12:ca:cb:f5:
21:a1:25:a4:eb:1f:88:1e:3f:9d:21:0a:1a:56:db:
9d:06:ea:76:ef:cb:0f:75:e4:0b:3d:92:15:3e:06:
a9:04:66:8b:51:8e:27:c9:4e:2d:e2:33:4b:5e:04:
8a:6d:4c:9a:ff:c5:d6:63:84:dc:2e:b6:1b:94:e8:
7a:4c:c0:66:8e:0f:a3:dd:a0:6d:6d:b0:0f:c8:dc:
6a:58:2a:34:05:18:8e:e1:79:98:b6:e9:f2:4a:60:
6a:d4:d5:c4:86:62:e8:ae:65:14:f8:61:d0:3d:10:
64:ea:89:aa:b9:01:37:0a:79:fb:61:bc:26:95:a7:
4d:7b:46:dd:49:87:3f:12:f4:e1:e3:ec:8b:b6:2e:
fe:89:8d:e3:b4:4d:f8:8d:dc:43:00:51:1f:86:66:
3a:80:21:e7:14:42:c1:23:c5:3f:ce:e8:6a:30:44:
9e:7c:bf:0e:2b:b4:3b:86:48:18:21:ef:17:ff:4c:
41:0e:03:d6:7d:1e:16:05:09:3f:c9:86:47:b4:8d:
d0:37:f5:68:aa:30:22:71:73:97:8e:9c:92:64:52:
b3:bd:0f:fe:22:e5:1b:d7:90:5f:b0:8b:10:9f:51:
98:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:48:29:29:5D:C6:13:CE:18:F0:8D:56:07:85:33:B7:9C:DC:C4:4A
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/IEgpKV3GE84Y8I1WB4Uzt5zcxEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c7:5000::/37
Signature Algorithm: sha256WithRSAEncryption
93:9c:24:a2:dd:cf:af:2e:f4:f1:df:d9:3c:f4:3d:06:5a:32:
12:15:97:d3:a7:bd:40:77:b2:93:7d:d0:d5:02:4b:20:86:15:
cb:ad:1b:27:fa:5b:d4:c9:cd:9b:66:cf:2b:f7:47:55:fc:17:
44:f9:4c:cc:47:f0:63:98:99:d0:68:c1:16:90:89:db:ff:92:
06:3d:67:b2:7d:b5:c1:b2:3e:97:ac:b1:4b:1d:ad:58:22:88:
b1:0b:8a:19:8b:df:4a:6c:75:c6:72:ea:9c:0c:0c:75:ba:09:
be:07:0b:c3:34:14:27:08:08:48:6c:75:82:9a:2f:7b:38:80:
d4:60:43:13:bf:14:c6:fd:f3:49:bb:7f:d4:6d:40:b7:c3:1a:
ca:c3:f5:10:29:a1:7a:20:17:01:a1:c0:01:a3:37:62:16:f4:
98:bc:8f:fe:ca:32:07:ba:29:15:89:58:da:bb:df:bb:bd:05:
25:e4:2d:3a:ed:c6:c9:69:ab:f2:6e:cb:39:de:14:85:7f:a5:
05:cd:d1:f0:2c:23:33:c3:08:88:ba:c4:75:68:90:23:7d:f0:
42:29:ba:da:9b:46:d2:0f:f2:2b:04:13:d9:6d:c8:1a:83:10:
ae:1c:ec:0c:ad:f6:2c:67:4b:ee:a8:27:74:cc:c8:89:60:97:
a3:ad:cb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:09 2025 by rpki-client