Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/c_EYCLV9zOdKOWXipoRI6yQts4Y.roa
File: c_EYCLV9zOdKOWXipoRI6yQts4Y.roa (raw, json)
Hash identifier: j30aYzSXCBkY/wOX+uear/BJwwp2jlJ/zrrsktU+jgc=
Subject key identifier: 73:F1:18:08:B5:7D:CC:E7:4A:39:65:E2:A6:84:48:EB:24:2D:B3:86
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01912B405F6EC9ECD1E923E6A35C3B6EC47C
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/c_EYCLV9zOdKOWXipoRI6yQts4Y.roa
Signing time: Wed 07 Aug 2024 05:12:04 +0000
ROA not before: Wed 07 Aug 2024 05:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2b:40:5f:6e:c9:ec:d1:e9:23:e6:a3:5c:3b:6e:c4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 7 05:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73f11808b57dcce74a3965e2a68448eb242db386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:b2:22:c9:3d:50:79:cc:53:33:55:82:56:
a3:cc:53:d4:43:11:ae:d6:57:54:3f:73:cd:f1:b5:
16:cd:cc:eb:ba:32:68:91:d6:98:37:ac:ef:87:ea:
db:23:7a:ec:41:f3:4f:8b:7a:d7:48:33:ef:aa:27:
06:cc:fd:64:41:eb:d3:0f:d8:f9:27:0b:ed:42:07:
b7:3a:05:3f:cc:a3:c6:70:6c:8f:67:45:39:80:a4:
80:d6:7b:ff:08:35:50:d8:95:64:fe:4f:c3:4d:5d:
69:27:ed:ec:89:e4:d5:65:7b:4b:bf:d0:8e:aa:75:
a7:56:23:0f:92:9a:67:34:27:36:cd:aa:05:34:1c:
6b:59:f5:21:66:ef:d5:b7:20:18:e6:5a:22:5e:70:
66:f5:05:60:10:fd:40:d1:86:ac:d6:ea:c1:ef:45:
cf:5f:d5:9f:38:23:55:1e:0e:5a:a3:48:4a:f1:d9:
25:47:15:66:7e:98:c0:51:68:72:34:75:6c:df:d0:
87:8e:58:72:bb:32:44:dc:e6:27:3a:6a:70:9d:88:
14:fe:a5:df:d8:4f:a0:49:d1:36:f0:24:1a:93:67:
4f:1d:81:aa:4b:28:d0:0a:ef:78:f6:dc:a9:61:08:
0d:36:1d:7c:e9:03:84:8e:05:27:5e:3d:10:87:2b:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F1:18:08:B5:7D:CC:E7:4A:39:65:E2:A6:84:48:EB:24:2D:B3:86
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/c_EYCLV9zOdKOWXipoRI6yQts4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
85:ac:63:ae:32:17:ae:fb:7d:e6:b4:8e:ef:5e:86:39:4a:49:
7e:a2:f4:a9:d2:79:5a:79:42:49:43:91:62:c5:57:60:11:17:
df:55:f5:a1:d8:bf:49:f1:68:ab:e4:6c:01:1f:25:79:6c:80:
27:52:84:b7:fc:29:c9:b6:96:03:47:96:5e:63:78:e4:12:39:
d4:00:5c:71:ca:e1:7a:fe:5b:bc:70:79:31:94:76:0a:af:3f:
ec:82:cc:4f:d4:1a:1c:3d:40:17:2b:2d:80:11:b9:ef:e9:51:
5c:c0:94:aa:ee:01:4e:ca:f9:e6:2f:f8:ad:cb:47:c0:c7:76:
7e:9c:fd:59:d7:92:0c:9e:de:8a:bb:99:f2:c8:da:04:9b:d1:
8b:06:39:65:83:e5:b4:dc:87:95:2d:32:e4:65:c0:70:00:b0:
86:e0:4f:b4:6a:d5:b4:21:f4:02:36:9c:fa:09:2b:2b:eb:d1:
3c:66:72:45:97:72:93:a3:2e:ff:92:19:51:ba:8b:fa:3d:16:
96:7d:3e:d2:98:3b:21:aa:08:d7:3e:84:bc:72:43:9f:70:47:
bd:ab:05:6e:3e:70:c4:1b:d3:54:7f:6e:eb:ae:69:c7:0c:48:
f7:35:9c:cc:eb:d8:1f:d8:a0:2f:25:fc:6d:09:b0:0a:d8:1f:
3b:c8:d5:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:08 2025 by rpki-client