Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/eVFhEEeEjABcxs4sJehj8Oe2M_Y.roa
File: eVFhEEeEjABcxs4sJehj8Oe2M_Y.roa (raw, json)
Hash identifier: Oa882vRgCOGxcb5pqHhFFHwKltihDeM/UbTie5bhivY=
Subject key identifier: 79:51:61:10:47:84:8C:00:5C:C6:CE:2C:25:E8:63:F0:E7:B6:33:F6
Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial: 0193555A6D8942CBF37AB1D0211B24E78821
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/eVFhEEeEjABcxs4sJehj8Oe2M_Y.roa
Signing time: Fri 22 Nov 2024 19:30:09 +0000
ROA not before: Fri 22 Nov 2024 19:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215568
IP address blocks: 2a01:f1c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:5a:6d:89:42:cb:f3:7a:b1:d0:21:1b:24:e7:88:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Validity
Not Before: Nov 22 19:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7951611047848c005cc6ce2c25e863f0e7b633f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:93:ae:5a:87:2a:5f:a3:d1:0d:a5:1b:3c:2c:
71:1c:0f:53:d0:55:8a:70:1e:c5:78:bb:0b:ac:c8:
b6:be:7b:d4:74:a6:b6:79:bc:07:07:bf:a5:55:97:
5d:9b:21:98:47:b0:a3:68:c5:d2:5f:b7:fe:a9:ba:
64:a8:9d:8d:81:55:58:89:5a:ee:98:74:da:1c:a8:
ff:57:4d:25:7f:42:95:b8:a6:f0:75:75:da:06:41:
5d:46:d2:73:75:13:de:d3:79:09:28:63:94:a8:42:
52:50:ef:ad:3c:24:d5:21:4d:52:25:7b:57:a5:7f:
6e:84:4c:0e:0c:98:18:f5:0d:c7:ae:55:3a:f3:ee:
95:2c:14:ee:e0:6f:a2:1e:55:b7:6d:c0:ef:7e:3b:
fb:e2:71:b9:22:8c:6a:06:a3:9d:ca:bf:21:cf:38:
62:16:81:2d:78:e4:8e:69:04:ec:d7:82:64:e1:82:
8d:29:f1:1f:93:47:37:97:49:59:fb:04:b7:74:94:
ff:99:38:d1:b2:db:47:fc:13:35:d1:c3:c9:f4:7c:
8d:92:00:6c:9e:57:5d:16:ed:8f:df:ec:9b:db:4e:
e8:a8:30:ea:90:c8:f1:e2:9f:3d:f2:bc:a4:0e:84:
e4:2d:33:30:5b:ee:c6:6d:1b:f7:07:11:9d:8c:d9:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:51:61:10:47:84:8C:00:5C:C6:CE:2C:25:E8:63:F0:E7:B6:33:F6
X509v3 Authority Key Identifier:
keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/eVFhEEeEjABcxs4sJehj8Oe2M_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
14:39:46:18:83:f4:ab:a7:3a:a3:80:d5:2b:7b:1e:57:67:a3:
ae:b7:84:57:67:ca:76:14:b5:85:da:32:be:62:75:dc:44:48:
f4:4a:0e:20:51:17:3a:fa:57:3b:f7:d2:da:05:1a:1f:60:d7:
5e:5f:d5:43:5f:67:73:23:1d:ab:3d:87:5b:c5:d7:82:7f:30:
4a:80:42:73:ed:46:63:15:2c:2a:71:03:e1:6f:98:ce:81:4d:
81:b2:d8:89:ef:ec:da:42:e2:5d:6d:cf:6b:45:c4:c6:52:cf:
a8:2a:98:51:22:3e:56:80:ed:77:93:e4:3b:b1:b8:ee:f8:90:
cb:1c:4e:9d:50:f0:c6:aa:b0:c1:81:09:0e:3d:08:78:af:b9:
f7:03:76:7d:4f:1a:71:c9:f8:be:2f:77:67:b1:dd:3d:b8:08:
f2:f6:9b:d5:84:3c:da:05:80:83:ed:00:5f:b7:77:c2:76:8a:
e7:a9:55:79:8c:b1:51:f2:78:9e:83:12:ee:91:55:61:23:e2:
c5:d2:1a:47:83:4c:62:61:08:90:2e:19:5a:ca:d2:df:3a:5a:
1b:d3:50:3f:3a:86:d7:cc:b9:f5:16:8b:15:d9:22:d8:8e:8c:
14:54:22:ab:18:fb:1a:1d:1b:be:fd:b1:db:90:78:71:82:a9:
9d:ab:95:8b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZNVWm2JQsvzerHQIRsk54ghMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNzhlMDA2NmJiMjdjNWY1MmU3MDI1ZDYxMTkwZGFhOTBi
OTczNDgwHhcNMjQxMTIyMTkzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTUxNjExMDQ3ODQ4YzAwNWNjNmNlMmMyNWU4NjNmMGU3YjYzM2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZOuWocqX6PRDaUbPCxxHA9T0FWK
cB7FeLsLrMi2vnvUdKa2ebwHB7+lVZddmyGYR7CjaMXSX7f+qbpkqJ2NgVVYiVru
mHTaHKj/V00lf0KVuKbwdXXaBkFdRtJzdRPe03kJKGOUqEJSUO+tPCTVIU1SJXtX
pX9uhEwODJgY9Q3HrlU68+6VLBTu4G+iHlW3bcDvfjv74nG5IoxqBqOdyr8hzzhi
FoEteOSOaQTs14Jk4YKNKfEfk0c3l0lZ+wS3dJT/mTjRsttH/BM10cPJ9HyNkgBs
nlddFu2P3+yb207oqDDqkMjx4p898rykDoTkLTMwW+7GbRv3BxGdjNlZnwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHlRYRBHhIwAXMbOLCXoY/DntjP2MB8GA1UdIwQY
MBaAFC944AZrsnxfUucCXWEZDaqQuXNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMzBhYzctZWMwYy00NGRlLTg1YTgt
YjJiNzk2MmMyZDgxLzEvZVZGaEVFZUVqQUJjeHM0c0plaGo4T2UyTV9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yMzBhYzctZWMwYy00NGRlLTg1YTgtYjJiNzk2MmMyZDgx
LzEvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgHxwDAN
BgkqhkiG9w0BAQsFAAOCAQEAFDlGGIP0q6c6o4DVK3seV2ejrreEV2fKdhS1hdoy
vmJ13ERI9EoOIFEXOvpXO/fS2gUaH2DXXl/VQ19ncyMdqz2HW8XXgn8wSoBCc+1G
YxUsKnED4W+YzoFNgbLYie/s2kLiXW3Pa0XExlLPqCqYUSI+VoDtd5PkO7G47viQ
yxxOnVDwxqqwwYEJDj0IeK+59wN2fU8accn4vi93Z7HdPbgI8vab1YQ82gWAg+0A
X7d3wnaK56lVeYyxUfJ4noMS7pFVYSPixdIaR4NMYmEIkC4ZWsrS3zpaG9NQPzqG
18y59RaLFdki2I6MFFQiqxj7Gh0bvv2x25B4cYKpnauViw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:13:33 2025 by rpki-client