Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/EtK9Vx4bHlq6Yvb0pC_W60WQkAM.roa
File: EtK9Vx4bHlq6Yvb0pC_W60WQkAM.roa (raw, json)
Hash identifier: hKih2Bqq2Jw6HCPuq1/UjHig1QwW9WB4KxP/bRIq/ss=
Subject key identifier: 12:D2:BD:57:1E:1B:1E:5A:BA:62:F6:F4:A4:2F:D6:EB:45:90:90:03
Certificate issuer: /CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Certificate serial: 018FA556D5FA8A6057D07560D5BD900B40DB
Authority key identifier: 9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/EtK9Vx4bHlq6Yvb0pC_W60WQkAM.roa
Signing time: Thu 23 May 2024 12:04:42 +0000
ROA not before: Thu 23 May 2024 12:04:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215158
IP address blocks: 2a11:8ec0::/29 maxlen: 29
2a12:4980::/29 maxlen: 29
2a12:6980::/29 maxlen: 29
2a12:e900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a5:56:d5:fa:8a:60:57:d0:75:60:d5:bd:90:0b:40:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Validity
Not Before: May 23 12:04:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12d2bd571e1b1e5aba62f6f4a42fd6eb45909003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:37:73:6e:1c:44:75:0d:fd:df:55:dc:84:
07:e5:5d:0e:3e:b7:7d:a5:a4:56:04:6f:66:2a:71:
11:80:5a:d1:52:63:1f:e3:19:25:18:31:55:d5:6f:
db:f5:7b:4f:24:2c:2d:46:01:46:6d:cc:f5:53:fa:
2f:90:57:9e:85:e5:2a:4c:ce:ae:2a:13:54:1c:28:
ab:47:d9:05:27:36:4d:44:ab:71:89:63:1a:b6:50:
2b:5d:29:eb:8f:3d:01:6d:7c:4b:99:c1:11:56:9a:
3a:9b:56:69:8a:6b:be:98:5b:05:71:7b:19:3d:4a:
1d:90:fb:58:48:bc:1c:c7:ef:bd:4a:82:ce:79:06:
28:62:4f:73:b7:cb:6c:38:f7:25:e2:b3:2b:55:47:
68:b9:1e:c7:1d:5b:74:55:e1:3a:14:0c:a8:29:b6:
7f:84:e8:4b:fd:d7:7f:99:31:18:23:3b:74:f6:f4:
96:65:bb:08:65:85:09:8e:02:c2:36:07:83:27:98:
f7:75:42:9c:5a:bc:36:25:3e:3e:78:a2:e1:33:13:
87:f3:15:b8:6d:0e:bd:45:0b:24:97:5a:49:2a:45:
ce:46:25:2a:3f:50:9e:79:81:33:79:65:0b:dc:94:
f0:9f:2a:c0:27:93:38:79:ca:73:e7:62:66:8a:ac:
59:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D2:BD:57:1E:1B:1E:5A:BA:62:F6:F4:A4:2F:D6:EB:45:90:90:03
X509v3 Authority Key Identifier:
keyid:9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/EtK9Vx4bHlq6Yvb0pC_W60WQkAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8ec0::/29
2a12:4980::/29
2a12:6980::/29
2a12:e900::/29
Signature Algorithm: sha256WithRSAEncryption
92:6f:62:82:45:4f:3f:f3:b4:98:04:81:49:8a:ee:03:4d:78:
64:17:d5:a8:a8:11:91:59:58:2d:91:8e:86:d5:92:cb:39:64:
eb:ca:0c:9f:de:91:7d:ff:a5:96:59:9c:e1:fc:b0:d0:96:bd:
c0:7b:6c:e6:99:cb:65:9e:52:19:e8:50:23:73:2e:70:f8:bf:
7d:c4:ce:32:a7:0c:80:a8:ae:81:44:90:01:15:b6:dc:79:a5:
77:06:74:63:d6:67:93:72:94:34:45:e7:fa:80:3d:c9:9a:66:
32:28:55:f0:73:a9:31:de:a0:ad:6d:4f:b1:02:43:9f:ea:e1:
28:b6:55:d8:30:27:14:d0:db:e1:9c:6f:d5:cb:88:92:83:9b:
b7:e1:42:48:b4:09:57:7f:46:29:8a:df:e6:49:7a:03:b9:dd:
06:14:e5:6e:eb:48:d9:7e:3b:d1:2f:9a:9a:ab:15:37:97:01:
b0:21:63:3e:ff:95:3b:30:ad:52:53:04:77:58:7f:b8:37:4c:
22:af:c3:85:e0:2f:b5:b3:23:af:c1:40:0a:cf:6c:a8:78:8a:
de:dd:5d:f6:3e:b7:28:45:65:46:bc:64:33:b5:cd:bd:17:bf:
b5:81:3c:b0:6e:16:1e:df:97:a5:bc:d4:dd:6d:d5:74:dc:ac:
67:87:91:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:55 2025 by rpki-client