Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eoG03NQZ3HD7atZXfwPDMXhKfkQ.roa
File: eoG03NQZ3HD7atZXfwPDMXhKfkQ.roa (raw, json)
Hash identifier: NdluRJEOO3hGrti07Sqk8qcJYDTogoZ8O87kXCq9efg=
Subject key identifier: 7A:81:B4:DC:D4:19:DC:70:FB:6A:D6:57:7F:03:C3:31:78:4A:7E:44
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01942067EAFC3A84DF17B27E05B6AD554588
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eoG03NQZ3HD7atZXfwPDMXhKfkQ.roa
Signing time: Wed 01 Jan 2025 05:47:48 +0000
ROA not before: Wed 01 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202255
IP address blocks: 2a12:3fc2:2a00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ea:fc:3a:84:df:17:b2:7e:05:b6:ad:55:45:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a81b4dcd419dc70fb6ad6577f03c331784a7e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f4:df:ac:0e:20:e3:64:7f:2a:52:b4:a6:a6:
54:40:e7:33:42:38:cc:84:26:bc:45:73:aa:20:05:
4e:78:c3:0c:78:e7:aa:fc:da:a4:d1:a3:aa:a4:9f:
70:91:fa:0b:43:fd:ba:f9:dc:59:81:b5:a7:5b:7f:
4f:84:42:08:22:31:11:a0:10:d3:4d:8d:c1:a8:63:
d7:59:d0:51:35:d1:7d:4d:9d:34:92:73:17:e1:3f:
ef:36:9b:e5:1b:88:ff:f5:0a:ec:38:a7:b6:cc:5f:
b3:e5:a8:86:3d:e5:e9:11:3a:34:a2:9c:c4:95:cb:
e3:c6:8f:df:1e:54:4f:98:fd:17:c6:73:5e:ec:34:
44:f3:0b:01:a9:57:03:0e:87:e0:64:7f:10:b4:f6:
87:ba:0a:d2:4d:13:e0:73:88:35:1d:66:aa:19:f8:
c3:b6:aa:0d:c5:b2:2f:47:e2:e7:c8:7c:19:39:2b:
bc:09:2b:5d:a0:e5:79:ea:75:41:4d:64:57:37:48:
2e:7a:a8:57:b6:9f:c8:bb:ad:88:e7:fc:4f:cd:6c:
ab:7b:e2:9d:85:12:bc:e1:8a:3f:53:98:85:42:d1:
e5:43:8e:c9:4f:57:ab:37:8e:de:9d:e9:f3:ff:5f:
b3:95:40:a9:d3:f2:30:7c:f7:74:40:6f:78:5d:46:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:81:B4:DC:D4:19:DC:70:FB:6A:D6:57:7F:03:C3:31:78:4A:7E:44
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eoG03NQZ3HD7atZXfwPDMXhKfkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:2a00::/40
Signature Algorithm: sha256WithRSAEncryption
59:97:dc:c7:1c:f3:53:37:3a:27:be:f5:a7:67:dc:74:95:a5:
75:bd:bb:a4:ad:0d:7d:74:59:38:05:1f:7e:7a:c1:e1:5f:ac:
b6:25:01:01:27:14:65:60:8c:fd:09:4a:2d:f2:ca:81:7f:77:
9b:47:3d:ea:6f:32:9b:8a:a8:ca:33:d2:a0:55:20:c2:d1:af:
16:b7:09:97:ef:7e:d7:91:74:8f:97:fe:38:04:d0:e6:c0:f2:
a8:b9:56:e0:41:ec:b5:c3:a7:0e:50:e0:24:89:6a:f3:1e:3d:
db:0c:1c:af:b8:7a:eb:47:ec:e4:3e:29:8d:ca:2b:a2:49:ce:
56:cc:e3:10:0a:f8:7a:d6:16:ce:b6:b8:7f:7b:4e:de:02:81:
6e:59:b4:31:71:c4:4d:11:41:13:07:57:55:4c:58:d9:cd:97:
de:5f:b1:8f:10:d1:8b:d2:e7:54:31:c8:3c:60:fb:1d:ab:18:
6f:fc:ee:19:a2:ef:0d:bf:54:de:70:dd:0f:4c:bc:27:3a:71:
b4:d0:5f:28:a0:f5:65:94:7b:b8:57:54:2b:dd:1c:43:dd:d0:
49:c0:71:26:f7:d7:fe:dc:d5:3b:5c:9c:e1:8e:11:56:f0:58:
20:7c:19:91:c7:0c:41:cd:14:e2:d8:1e:5a:1a:61:15:05:c1:
05:6e:e0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:13 2025 by rpki-client