Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/EtE4gpML-DMtpPENAF6RnashcUc.roa
File: EtE4gpML-DMtpPENAF6RnashcUc.roa (raw, json)
Hash identifier: AE/FnlvfzSn9fbhcLM6iL67BrHqCOHRQ5Hn3opvhQYg=
Subject key identifier: 12:D1:38:82:93:0B:F8:33:2D:A4:F1:0D:00:5E:91:9D:AB:21:71:47
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0194274638CA3BD8E3C425E6D86B6D2E1BC2
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/EtE4gpML-DMtpPENAF6RnashcUc.roa
Signing time: Thu 02 Jan 2025 13:48:20 +0000
ROA not before: Thu 02 Jan 2025 13:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216107
IP address blocks: 2a0c:e640::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:38:ca:3b:d8:e3:c4:25:e6:d8:6b:6d:2e:1b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12d13882930bf8332da4f10d005e919dab217147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:0b:76:37:fe:cc:e3:78:16:30:d5:cb:3b:
1c:86:7e:29:7a:7c:7d:60:7b:36:c2:5a:60:27:32:
4f:e5:8b:7e:77:80:c2:1c:a8:71:fc:c8:fd:05:49:
db:a5:16:5d:b6:6e:03:a1:45:d2:96:4c:a8:e1:84:
f7:6c:23:25:51:86:4b:e6:e6:05:c8:e0:c9:79:38:
dc:52:4b:b5:a4:a9:0f:2c:23:27:a1:b4:4e:c3:2d:
9f:8a:e6:d4:79:01:bb:33:aa:52:82:65:45:62:77:
5b:9e:78:c8:d9:3a:3d:22:2c:eb:a7:67:2c:af:0c:
33:dc:d8:43:35:6b:ea:61:d3:a1:82:c4:65:fb:05:
5c:64:ac:78:f1:f1:34:4c:69:30:a7:e5:cf:57:5b:
36:55:d2:61:3f:c0:63:c1:4a:89:9b:e2:37:6a:27:
df:57:bc:7c:ac:5c:a7:c9:0e:c7:bb:6d:5f:0f:aa:
6b:3f:6d:6e:39:20:8a:a2:7b:d0:bf:db:4a:5a:fb:
c0:7f:e9:2f:79:01:8d:4c:e9:da:69:fe:cb:cf:a9:
e9:0c:24:07:76:e2:d4:b1:88:96:da:2e:f2:54:9f:
45:a3:bc:bc:ce:ed:5a:2d:31:8c:ab:ee:8c:14:90:
05:d0:90:7c:29:23:dd:1a:13:90:e9:de:59:49:e3:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D1:38:82:93:0B:F8:33:2D:A4:F1:0D:00:5E:91:9D:AB:21:71:47
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/EtE4gpML-DMtpPENAF6RnashcUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:e640::/32
Signature Algorithm: sha256WithRSAEncryption
83:fd:10:b0:73:c2:7c:67:c7:9f:a4:24:00:1c:aa:d4:9e:fd:
88:23:78:76:75:9f:ea:c6:28:c8:7e:0c:18:3b:8e:75:d3:91:
f2:ee:85:de:a4:e7:90:f0:f4:0e:85:01:52:f9:cc:54:e0:12:
a0:8a:e4:46:18:4e:f4:a7:1a:c4:a7:7c:ae:51:f3:a6:3e:4e:
a1:02:e6:6b:c4:3e:20:9d:b9:49:57:c4:1a:9e:69:a4:6a:52:
cd:42:36:bf:c6:5d:f9:11:9b:39:6a:35:70:9a:9b:5d:5b:62:
0c:40:08:7e:ac:5c:0a:a2:15:f5:ab:e4:1f:77:bf:b6:e8:75:
90:66:ca:b9:39:8a:c5:dd:ad:6e:18:c8:01:6a:46:72:e9:bf:
d7:92:f5:34:1d:bc:63:2d:ea:6c:b6:1d:68:1c:c3:0e:c9:c4:
77:27:98:a1:6a:cb:2b:ff:07:fd:a5:1b:e0:3a:60:00:bd:5b:
87:54:56:fc:90:19:5b:6b:e6:0f:1e:3c:35:d3:d7:07:d5:1a:
f3:2a:0e:f2:88:5d:55:02:f5:30:14:cc:2d:6e:51:d0:ba:7e:
2b:c4:ce:4a:b4:6c:e6:6f:38:98:86:b2:b9:d1:f3:82:18:f6:
a7:67:c1:af:7f:e3:7b:ca:6a:14:e1:30:85:95:44:43:f1:e0:
0c:78:15:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:06:12 2025 by rpki-client