Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/eJnXePUOvPTAimjRML9dV3sRNGk.roa
File: eJnXePUOvPTAimjRML9dV3sRNGk.roa (raw, json)
Hash identifier: zHcWqRmdkNVZmV8ewljmfd/sqat36WZOw72bc5aOPF4=
Subject key identifier: 78:99:D7:78:F5:0E:BC:F4:C0:8A:68:D1:30:BF:5D:57:7B:11:34:69
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018CC94E31D3DDB8D2E8F5CFD7CF1052FC8F
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/eJnXePUOvPTAimjRML9dV3sRNGk.roa
Signing time: Tue 02 Jan 2024 08:33:14 +0000
ROA not before: Tue 02 Jan 2024 08:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34860
IP address blocks: 2a00:ec82::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:31:d3:dd:b8:d2:e8:f5:cf:d7:cf:10:52:fc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 08:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7899d778f50ebcf4c08a68d130bf5d577b113469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e8:c1:d1:11:0b:d9:52:a2:d5:6a:5c:c0:3b:
e2:6a:4a:35:42:14:4c:a7:96:e8:64:b4:53:22:f3:
ec:5e:e3:d5:2c:6b:b8:a2:1a:c1:e6:92:2d:99:09:
d6:90:0e:4f:ee:a1:0a:ab:e3:a0:61:b7:8f:d1:70:
12:cf:4a:5b:5a:d0:86:5e:74:90:33:b0:18:75:42:
c4:73:f0:0f:a7:a1:c6:5c:06:55:02:53:ec:77:0e:
c3:03:18:26:87:bf:56:72:d9:b8:28:0f:7a:ca:5c:
02:6f:fb:16:84:e0:01:57:48:e3:5e:ee:a2:f9:47:
97:2b:ed:e8:da:44:bb:d8:7b:59:09:e2:72:ae:9f:
ee:08:fc:e6:2e:79:f5:69:c5:2e:58:b2:aa:53:b0:
a5:d0:dd:9a:ac:f4:b8:13:53:27:d5:ba:e1:d4:ec:
9d:c4:0a:c0:82:29:37:1a:82:bc:d6:0f:5c:93:f7:
44:55:e4:a1:c5:5e:54:b6:97:e8:5d:fd:24:b1:8f:
1f:09:4e:95:56:8d:4b:ab:df:db:f9:a6:bb:91:1b:
ea:65:bb:28:8b:29:eb:0c:f0:ba:1a:07:97:be:a6:
3e:1c:ee:f5:31:b9:ae:ba:0c:e1:02:78:87:a5:54:
cc:6c:2d:bf:d2:a4:1f:fc:bf:69:e8:8a:ff:10:4b:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:99:D7:78:F5:0E:BC:F4:C0:8A:68:D1:30:BF:5D:57:7B:11:34:69
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/eJnXePUOvPTAimjRML9dV3sRNGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ec82::/32
Signature Algorithm: sha256WithRSAEncryption
a8:72:fc:24:18:58:e1:a9:98:ea:72:f8:fc:a4:62:76:b7:59:
c8:da:8e:1f:c7:d4:a4:e1:2d:ca:15:78:19:0a:4d:fe:14:e6:
21:df:f8:66:66:c8:54:7b:49:16:62:32:a6:f2:6a:ff:96:cd:
c2:39:61:5b:38:88:1a:28:b3:88:4b:5e:a6:cf:11:70:7b:74:
d3:57:be:da:d3:01:86:bf:09:34:68:f2:11:d8:30:71:c0:8a:
aa:58:9c:36:33:4f:2e:d2:df:4a:29:e9:aa:1a:4a:fe:a8:ae:
ad:0d:2c:0a:ef:81:7e:75:9a:a8:72:37:c9:bd:39:fb:fc:e8:
e3:96:73:95:5e:0f:43:1d:36:7b:cc:81:ca:e0:59:4a:db:2a:
6c:6a:32:6f:87:d6:0c:61:f2:6a:34:68:98:9f:1b:d0:73:60:
8c:27:3d:21:05:eb:13:d6:ba:ea:da:9d:16:1f:dd:e4:0e:59:
c1:5d:66:5b:44:ba:38:4a:63:a4:64:7e:96:36:5c:91:20:3a:
0b:5e:4d:f5:29:57:ed:fb:b5:29:70:5c:93:5b:4c:8c:36:bc:
f2:15:36:4a:e2:23:73:62:6a:4b:3d:b8:45:3d:d1:72:f8:70:
ad:a3:38:9c:11:f2:93:e0:5d:0e:2d:6e:c5:5d:fd:f9:ba:2e:
62:e0:d7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:11:01 2025 by rpki-client