Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/EpQcDDhQK8-WOhYfBO3A-z572b8.roa
File: EpQcDDhQK8-WOhYfBO3A-z572b8.roa (raw, json)
Hash identifier: tX6xd7XfEe5I+QgttvkH+DOkKR0i0R1ahT4BEMwpPug=
Subject key identifier: 12:94:1C:0C:38:50:2B:CF:96:3A:16:1F:04:ED:C0:FB:3E:7B:D9:BF
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 019424B2ABE8CFCD018DEB9D76270FD2C898
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/EpQcDDhQK8-WOhYfBO3A-z572b8.roa
Signing time: Thu 02 Jan 2025 01:47:56 +0000
ROA not before: Thu 02 Jan 2025 01:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a0b:4581::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:ab:e8:cf:cd:01:8d:eb:9d:76:27:0f:d2:c8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: Jan 2 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12941c0c38502bcf963a161f04edc0fb3e7bd9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:da:73:6c:ce:93:4c:49:05:7c:19:7a:db:f5:
7a:b0:d4:eb:8d:d3:f0:9b:d3:04:45:26:fa:db:94:
36:ae:c4:e7:96:75:05:a9:63:6b:b3:d2:50:b2:af:
79:3f:d9:02:60:b7:5e:c6:a8:24:10:59:e6:7f:92:
31:7b:52:43:68:0e:27:37:c3:b5:00:15:f0:b5:31:
26:64:b6:8d:b5:23:c4:82:99:28:94:71:13:21:cb:
e9:38:4e:3b:b5:64:fb:8c:0c:42:7f:16:f8:15:34:
e3:e7:7e:16:0e:81:cd:7a:ab:2d:5e:fd:d9:11:6d:
07:44:f7:3a:73:3d:7f:0a:a6:ff:eb:e0:d1:fd:d9:
85:d9:53:c5:43:d8:d0:46:99:45:76:61:74:85:7e:
93:76:aa:ff:55:79:90:02:4d:8c:4f:90:0b:85:1f:
11:db:91:19:a0:c7:f3:18:11:23:2f:da:d2:89:d6:
48:6b:75:3c:1d:89:9b:a7:d1:4d:92:f4:17:05:c9:
26:3e:8d:d6:30:ac:2f:57:03:6c:43:3a:ec:e8:8d:
ae:bb:30:a1:84:01:00:64:7b:ca:19:03:30:59:b0:
d1:30:48:d2:62:eb:8e:76:d7:65:d3:56:0c:7d:45:
cb:fc:28:c9:2a:ea:39:2c:3e:4b:7f:40:be:f6:51:
56:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:94:1C:0C:38:50:2B:CF:96:3A:16:1F:04:ED:C0:FB:3E:7B:D9:BF
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/EpQcDDhQK8-WOhYfBO3A-z572b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4581::/48
Signature Algorithm: sha256WithRSAEncryption
5a:2f:8d:ab:80:6c:63:1b:98:8f:0b:cf:26:5c:83:15:4a:ad:
97:00:89:b4:c2:36:9f:68:6f:e5:eb:b9:03:d1:51:4b:ce:4d:
92:4c:2b:52:9a:61:ec:cc:06:f8:85:35:7f:b8:71:4a:ca:36:
2d:c5:ff:9c:ba:0e:dc:8c:82:b6:4f:a4:34:f8:50:61:0f:9c:
0c:42:2b:e3:61:49:25:bf:56:bf:d9:fd:0d:61:a9:98:4d:bd:
ce:af:53:f5:99:e0:d9:8a:9d:13:29:65:af:b3:af:6f:c4:b5:
7f:9e:e9:c7:d8:d5:97:c8:ec:84:94:4a:61:2d:cf:44:63:23:
a8:89:56:e2:52:ee:52:24:57:c1:30:74:cb:c4:1b:66:8b:09:
90:8a:88:4f:ef:47:93:14:8f:fa:cd:1a:0b:5a:33:51:f1:e5:
a5:db:e4:a6:fa:87:ac:58:c6:64:a7:e2:64:71:9a:c7:43:a9:
2c:bb:81:21:d3:9a:1b:6e:f0:e7:07:25:8a:36:01:00:05:b2:
ec:53:67:4f:98:ef:14:55:4e:ac:75:27:e6:31:bb:65:6f:ce:
4f:27:59:30:9e:ee:8e:ee:19:46:12:97:4c:c0:1f:db:53:e3:
c3:51:7c:0f:2b:6d:37:d1:42:a9:39:79:ec:be:2a:da:b6:65:
ec:9e:7b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:06 2025 by rpki-client