Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eBGadl3-31wXmEY-6JnVcjoYJWo.roa
File: eBGadl3-31wXmEY-6JnVcjoYJWo.roa (raw, json)
Hash identifier: //+VeRNxtsAwU8l+lgrOL0uLTJzH9KVm3TypaDL2krk=
Subject key identifier: 78:11:9A:76:5D:FE:DF:5C:17:98:46:3E:E8:99:D5:72:3A:18:25:6A
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01944B66D98FC2DF4AC058DC1C2A68BAF427
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eBGadl3-31wXmEY-6JnVcjoYJWo.roa
Signing time: Thu 09 Jan 2025 14:10:19 +0000
ROA not before: Thu 09 Jan 2025 14:10:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:194:2c0d:6680/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:66:d9:8f:c2:df:4a:c0:58:dc:1c:2a:68:ba:f4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jan 9 14:10:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78119a765dfedf5c1798463ee899d5723a18256a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e4:94:d0:d1:15:a0:0e:85:b6:2c:60:b0:c1:
f1:ac:5c:ce:c4:5a:24:96:2d:03:fd:4b:66:e3:ed:
65:29:fe:e1:62:1b:1d:00:da:2a:8d:14:23:83:44:
e4:e5:3a:98:33:c9:b0:db:ad:38:1c:79:77:57:b3:
f9:22:c8:58:0b:c2:53:ff:b4:f6:ed:d3:dd:52:74:
bd:46:f1:aa:47:d9:ee:58:5b:77:8d:eb:00:3e:3f:
41:e9:1e:17:e8:86:81:bd:96:ff:3d:3f:ad:57:c6:
5b:b7:3c:fd:84:35:e1:32:de:05:3a:17:45:25:65:
e6:78:89:ff:15:a5:68:dd:8a:52:e7:82:93:5b:52:
2a:df:e6:ee:10:a8:9a:f3:f8:b5:4e:8b:7d:a7:77:
15:39:bb:6a:17:6c:e5:48:12:9a:f6:bc:e6:ec:98:
f7:a9:36:b4:5b:09:07:15:49:54:34:6d:d8:6e:7f:
21:98:d8:ed:f3:3e:a9:a9:d9:27:27:95:7a:ad:ae:
81:63:c7:60:3b:93:63:89:57:52:12:1d:b6:07:b8:
d9:0d:b4:8f:f4:65:e9:e8:fa:a0:0d:f4:d0:24:e5:
92:ac:aa:53:0f:ed:53:77:f6:fb:c3:f2:42:4c:da:
ca:dd:8d:b5:ff:71:0f:96:65:12:96:19:99:27:cb:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:11:9A:76:5D:FE:DF:5C:17:98:46:3E:E8:99:D5:72:3A:18:25:6A
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/eBGadl3-31wXmEY-6JnVcjoYJWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:194:2c0d:6680/128
Signature Algorithm: sha256WithRSAEncryption
1e:e8:a7:20:81:3d:9d:32:b5:5f:8f:68:23:e7:7d:73:69:11:
09:6a:0e:f3:91:10:84:f1:1d:82:20:f7:c4:bd:4b:d0:ab:d6:
48:26:99:2c:db:ad:87:a9:dc:1d:fe:23:15:55:46:f0:59:39:
a2:d6:af:3d:24:d6:a4:0e:f3:50:c1:27:9d:fe:d2:92:32:96:
da:66:6e:58:6d:68:80:10:3e:b7:e5:e8:86:09:b6:03:7e:cb:
0a:68:8c:db:36:a5:c8:ee:11:15:68:82:aa:01:11:e3:96:d3:
52:0b:a6:2d:49:29:9c:57:f1:cd:bc:63:68:60:68:64:1d:e3:
1f:59:2c:f6:c3:a3:90:d2:33:05:ae:df:c2:aa:b4:aa:d7:63:
8e:d5:db:70:58:a8:f2:14:dc:0e:54:ee:4b:08:93:d1:3d:83:
ca:e4:75:ea:96:9e:70:dc:10:bf:33:75:64:22:e0:ac:df:92:
81:49:50:23:04:82:c3:6f:09:93:7c:c2:a5:5a:3b:f7:f1:9d:
a3:50:34:42:c6:a9:7a:57:6a:c2:1f:ab:3e:28:b4:0a:a9:80:
78:ef:f8:a3:fe:0f:88:cc:79:e1:2f:5e:ae:93:d0:50:fc:d7:
3f:97:1f:a6:c9:a5:14:55:29:ba:f8:a7:81:55:a6:dc:f3:1a:
e2:14:26:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:10:57 2025 by rpki-client