Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/EgOdjBrfQhYe-5HtZ0gCvVASgOk.roa
File: EgOdjBrfQhYe-5HtZ0gCvVASgOk.roa (raw, json)
Hash identifier: rlcHKNxqzbJZK9gtci2o/2aqsd2FZRiITmisyzoxH20=
Subject key identifier: 12:03:9D:8C:1A:DF:42:16:1E:FB:91:ED:67:48:02:BD:50:12:80:E9
Certificate issuer: /CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Certificate serial: 019424450DA1AEAC4FF64E80DD423BCEF4E0
Authority key identifier: DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/EgOdjBrfQhYe-5HtZ0gCvVASgOk.roa
Signing time: Wed 01 Jan 2025 23:48:12 +0000
ROA not before: Wed 01 Jan 2025 23:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2a02:5320::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:0d:a1:ae:ac:4f:f6:4e:80:dd:42:3b:ce:f4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Validity
Not Before: Jan 1 23:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12039d8c1adf42161efb91ed674802bd501280e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:75:b7:cc:0c:49:f0:6e:df:8d:cd:a7:e2:
1d:d7:31:ae:c7:5b:71:73:db:57:25:de:1f:bd:6b:
17:9e:07:65:48:2f:6c:57:43:c9:f1:02:02:2c:fb:
5f:a2:40:92:b5:2d:74:c6:b7:e3:e6:4e:5b:b7:17:
06:c6:12:f7:82:9e:7e:63:f1:bd:32:77:51:6a:c3:
8c:ac:8b:6a:0c:84:7c:bf:62:d9:df:09:29:29:15:
d7:84:7b:c1:c7:4e:cb:09:a4:46:62:2c:f7:99:8e:
6b:f7:a6:f3:2b:7d:fb:1a:83:9a:ce:d9:9c:61:b9:
fd:d7:e1:f6:39:5a:a0:83:41:3b:5c:c6:e2:83:f5:
ab:a2:69:e4:6a:93:b3:07:b6:25:29:33:e6:fc:e5:
bb:1e:2b:0a:7a:c8:50:7d:4f:2a:50:20:ed:78:c9:
0e:f6:e2:df:93:ae:23:0c:ee:63:38:21:11:7a:72:
0d:ba:ff:39:72:a0:00:ad:6a:8a:90:c7:9b:68:23:
e7:08:3b:c2:b2:71:c2:a5:b4:24:b0:26:1d:88:0c:
74:0c:35:e1:b8:3f:df:c5:40:41:21:24:d9:6e:3e:
fc:11:af:69:ea:8f:66:69:5f:20:a1:c7:f9:e8:f5:
c2:0c:71:5d:75:c4:5c:03:7b:16:69:14:61:80:34:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:03:9D:8C:1A:DF:42:16:1E:FB:91:ED:67:48:02:BD:50:12:80:E9
X509v3 Authority Key Identifier:
keyid:DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/EgOdjBrfQhYe-5HtZ0gCvVASgOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5320::/32
Signature Algorithm: sha256WithRSAEncryption
8b:60:6b:40:9a:7b:17:ec:7d:36:2d:1a:2f:9f:63:15:4f:68:
5d:88:65:f6:e3:05:f5:c6:c7:e4:fc:b7:b8:dd:cf:7e:21:c9:
c9:9a:af:48:85:09:08:eb:2e:70:7d:ff:55:9f:65:d0:ae:e3:
b2:47:43:51:a3:72:bc:7b:e8:25:74:52:75:f3:3c:e5:08:6f:
94:0a:ab:d5:64:b5:56:ab:e2:62:cb:5b:0d:14:d3:65:54:9c:
03:09:3c:10:ad:2b:a3:7e:a7:0e:00:c6:cc:ff:64:42:97:ee:
17:be:a8:5e:b1:4f:54:b8:d0:bc:9a:1f:02:49:bf:b2:61:4d:
1f:ab:ca:23:92:91:91:78:b2:2a:33:22:9f:a1:a5:78:8b:d6:
af:2a:27:82:cb:5b:46:df:ac:0f:4d:cc:36:b8:34:cf:01:99:
b3:d5:b6:58:ff:d0:6f:f8:1f:0a:ae:b0:1f:aa:69:0f:94:90:
b4:60:b8:ce:b4:4a:2d:04:f2:a8:f4:f1:a7:9b:9a:34:21:27:
db:2f:1f:25:70:b8:14:df:7d:47:4a:7a:a8:db:66:bb:b1:39:
5e:5a:ad:be:64:b6:14:de:a8:c5:10:f9:13:77:ca:fa:27:06:
35:4d:70:c5:d1:5d:07:cf:52:49:8b:25:5b:1e:c6:df:fb:29:
bb:29:56:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:48:14 2025 by rpki-client