Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-1eeEbi_Sd11joR-K7ZMrORdkcg.roa
File: 1-1eeEbi_Sd11joR-K7ZMrORdkcg.roa (raw, json)
Hash identifier: SHKhcQagyDM/n5ozkyFQiXiAvdDFHAGO5b/lsX15zV0=
Subject key identifier: FB:57:9E:11:B8:BF:49:DD:75:8E:84:7E:2B:B6:4C:AC:E4:5D:91:C8
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01945992F77ED75F0EB18F6E4D01BFD7B9B3
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-1eeEbi_Sd11joR-K7ZMrORdkcg.roa
Signing time: Sun 12 Jan 2025 08:13:11 +0000
ROA not before: Sun 12 Jan 2025 08:13:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:59:92:f7:7e:d7:5f:0e:b1:8f:6e:4d:01:bf:d7:b9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 12 08:13:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb579e11b8bf49dd758e847e2bb64cace45d91c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:ca:75:de:6a:f2:e4:51:a9:34:eb:f4:58:
96:35:d9:01:f3:5c:a0:2f:8c:0d:02:da:f8:da:cc:
9f:d7:ff:5a:c2:76:b5:13:63:72:46:6e:d6:f5:de:
af:bb:22:e5:0e:a2:f8:ed:34:69:28:a0:a2:22:b6:
bf:87:f1:4b:64:32:0c:d1:ca:89:d2:89:97:8b:56:
3a:73:a0:12:d0:f0:fa:57:d0:2b:5d:43:d5:cf:a1:
60:c8:53:aa:20:3e:d9:93:34:68:a9:02:76:cf:c5:
c3:2e:50:4d:6b:9f:a0:82:bc:25:38:57:69:60:97:
f9:6a:f5:ad:ec:08:88:25:c5:42:c2:1a:4a:c8:4e:
77:2a:32:fc:05:dc:89:b5:fb:5c:f1:fc:b8:69:83:
be:f8:36:bd:f3:1e:26:ce:b3:5c:85:fc:f1:03:d3:
cb:41:69:7f:e1:21:91:b9:c6:e7:53:1d:2f:9d:c4:
66:0e:eb:80:c5:81:33:82:cf:df:f2:5e:75:dd:44:
45:34:59:5d:13:7c:9b:bc:d7:72:51:0e:63:01:96:
9f:63:25:81:98:19:77:52:34:04:99:94:34:a5:09:
35:59:2f:2c:75:6c:5e:0a:92:c6:89:fd:47:c0:7e:
32:5c:90:6e:2e:3a:7d:d2:12:9f:17:23:e4:9f:7f:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:57:9E:11:B8:BF:49:DD:75:8E:84:7E:2B:B6:4C:AC:E4:5D:91:C8
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/1-1eeEbi_Sd11joR-K7ZMrORdkcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
4c:8f:c3:ab:a2:36:36:9d:1e:8a:a3:e0:51:3b:0a:c6:19:6a:
a0:c0:a5:ac:3a:8b:d4:4b:96:45:1a:d9:74:e0:9a:25:87:4c:
51:88:40:c8:38:99:66:11:ba:61:c2:aa:a0:d8:e2:e8:3e:d5:
f2:33:14:ee:f2:6f:f5:b3:80:48:26:07:eb:8e:97:56:42:da:
c9:c4:45:13:d2:e4:80:b0:3d:ad:c2:dc:9d:67:e3:d1:1a:f1:
1e:e6:e0:2e:8f:ac:84:89:69:10:67:62:4d:d3:78:65:67:49:
54:7b:28:f0:38:c2:d7:d4:41:c8:32:b7:5c:af:47:12:47:d6:
ab:c6:4e:8c:0b:7f:d7:e8:03:0e:9d:8f:99:b8:a8:21:28:de:
c4:f7:c4:a9:30:1e:af:c1:52:58:09:15:d3:df:ea:0a:91:39:
9e:40:c6:78:fc:7b:f8:ed:45:04:dd:b6:5e:9e:55:36:52:2b:
ab:c8:74:70:28:69:f6:9e:3c:f1:cc:a1:8d:d8:0a:e6:24:2c:
45:28:00:0a:42:a3:8b:34:e1:af:8d:e3:ae:51:2c:ef:61:c7:
ab:96:ac:85:bf:4b:c1:8b:3c:a2:51:d8:6e:72:c0:e9:a0:95:
75:65:f5:bf:50:39:94:83:30:7d:80:61:10:3d:4b:c8:ff:d0:
9f:05:2b:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:08:34 2025 by rpki-client