Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E_6DQNNZRNK2eGqtDJ9Ku8_eyVA.roa
File: E_6DQNNZRNK2eGqtDJ9Ku8_eyVA.roa (raw, json)
Hash identifier: 6+J4Wys0V5TRFd9VTzVSExqwYJ4qNHeVXjUpE5caRrM=
Subject key identifier: 13:FE:83:40:D3:59:44:D2:B6:78:6A:AD:0C:9F:4A:BB:CF:DE:C9:50
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019489A1C017E4A123D5C77876FE60B827E9
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E_6DQNNZRNK2eGqtDJ9Ku8_eyVA.roa
Signing time: Tue 21 Jan 2025 16:11:06 +0000
ROA not before: Tue 21 Jan 2025 16:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:a1:c0:17:e4:a1:23:d5:c7:78:76:fe:60:b8:27:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 21 16:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13fe8340d35944d2b6786aad0c9f4abbcfdec950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:9b:4e:37:ca:28:d5:02:b5:d1:3e:df:81:
e1:f9:67:ce:c2:a6:3e:12:45:ef:cb:82:eb:a4:b5:
ce:a5:53:ec:71:f0:f4:57:d8:5d:96:9d:11:60:fc:
85:9f:66:f8:7f:25:e7:0a:90:4a:4b:bf:b1:91:d2:
f1:15:c0:69:46:3b:5e:7a:0d:af:2b:30:44:a5:d9:
48:6b:fd:cd:f4:81:36:5f:af:83:4f:4d:33:2f:61:
cc:db:fd:65:a6:b0:ec:44:8d:b0:94:a0:59:8b:8a:
1f:6a:44:06:8e:64:a8:5c:08:21:df:54:cf:c5:f8:
23:a4:6a:26:6b:64:5b:2f:15:5d:48:b8:db:7c:8e:
a0:bd:a5:80:0f:9a:a4:28:15:b8:37:a5:51:01:dd:
22:e0:73:00:a7:91:8f:bb:7a:7c:6c:af:4c:b4:b7:
22:5e:57:f7:79:00:b4:09:94:df:8a:15:19:b8:7a:
ed:76:6b:7f:28:b0:6f:bd:48:97:4a:d3:e0:78:6c:
18:4a:8b:44:f3:f2:c5:de:07:f6:0f:82:92:b4:fd:
2f:86:55:97:67:08:1c:ef:38:05:99:ce:d5:35:8b:
69:5f:5c:e1:99:bf:16:ff:66:fc:68:7f:b5:93:65:
92:f1:ec:81:bb:51:be:20:25:d4:e2:a5:53:68:da:
fe:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FE:83:40:D3:59:44:D2:B6:78:6A:AD:0C:9F:4A:BB:CF:DE:C9:50
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/E_6DQNNZRNK2eGqtDJ9Ku8_eyVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
99:63:c9:1f:87:75:b5:89:e1:63:32:c1:7b:49:b6:d7:c6:b0:
f7:8d:37:e6:4d:65:9a:61:1b:92:7a:3c:e7:6f:f7:be:b1:f6:
d2:06:30:69:56:fd:15:e8:9b:02:ab:31:0f:68:d3:f0:23:95:
f5:9b:29:ea:d9:b2:69:ce:0e:8b:d6:f7:5d:45:0f:47:be:c2:
49:76:01:c4:8a:c9:37:0a:9a:45:a7:77:d6:c3:2c:52:4a:ab:
02:c9:5d:9e:39:bb:e2:cd:b3:8e:4d:00:2b:56:57:05:94:5e:
30:5f:56:35:46:61:f6:5b:d1:d7:97:bb:49:28:83:16:7d:81:
19:92:30:98:e8:0c:4a:c1:e0:a4:b4:5f:90:fc:df:9e:40:bf:
95:ce:3e:2c:4f:6a:87:36:8c:ea:a2:bb:e0:45:d9:51:80:d8:
ef:80:bc:e9:ef:79:6c:37:7a:b0:56:e5:94:91:de:93:af:c5:
ab:09:38:43:be:15:e8:b7:a1:e0:14:bb:ab:c7:14:25:2a:eb:
3c:fb:ae:f7:77:e3:c0:6a:ae:9e:b5:c2:ba:d1:51:1f:0d:c8:
d9:d3:00:88:e0:32:52:3b:c5:c3:96:5c:43:50:ae:7c:60:fd:
eb:75:e8:0c:2a:c0:8a:59:0e:91:3f:8b:ca:98:a7:7b:14:96:
bd:47:0e:a5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:12:30 2025 by rpki-client