Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/IEjkM4UlmR7RP25StfzCTE71geI.roa
File: IEjkM4UlmR7RP25StfzCTE71geI.roa (raw, json)
Hash identifier: LDDsqCiZxQDbT23pcR6KvWTV6f0gbk84/s8UFvr5l0o=
Subject key identifier: 20:48:E4:33:85:25:99:1E:D1:3F:6E:52:B5:FC:C2:4C:4E:F5:81:E2
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 018CCA2A1D4683FA1B63FEBE7AC0709B91D4
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/IEjkM4UlmR7RP25StfzCTE71geI.roa
Signing time: Tue 02 Jan 2024 12:33:26 +0000
ROA not before: Tue 02 Jan 2024 12:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64475
IP address blocks: 2a0f:3786:80::/41 maxlen: 48
2a0f:3786:20::/44 maxlen: 44
2a0f:3786:10::/44 maxlen: 44
2a0f:3786::/40 maxlen: 40
2a0f:3786:100::/48 maxlen: 48
2a0f:3785::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:1d:46:83:fa:1b:63:fe:be:7a:c0:70:9b:91:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Jan 2 12:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2048e4338525991ed13f6e52b5fcc24c4ef581e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:74:39:96:bd:36:ec:fb:3a:97:e9:93:84:
ee:8a:42:ef:cc:97:62:da:61:b4:81:16:f0:98:7d:
3a:b9:d2:15:95:ab:16:4f:1b:20:ad:f5:91:16:aa:
89:09:67:6f:78:6e:3c:da:f5:f1:53:79:f9:7c:90:
de:0b:cc:12:7a:76:30:f0:8f:1a:36:e1:c7:64:c8:
21:bc:69:a1:e8:30:60:d1:f7:60:0b:e8:05:53:5d:
c8:b4:e4:33:a6:1d:f8:d8:84:15:7e:06:70:88:f0:
f9:3e:d2:46:1b:c3:63:08:bf:dc:f1:88:b5:58:55:
f2:7f:ba:de:ec:9c:df:86:5a:e7:79:96:03:28:2d:
b1:77:37:e5:e4:30:cd:31:03:71:a5:24:14:86:5d:
5d:d0:d8:c3:ed:cc:fe:b4:9f:03:3c:aa:5f:54:7f:
fc:5c:4c:e4:88:92:53:7a:ba:16:4a:f7:e2:51:48:
77:6b:52:81:81:fc:3b:cb:9c:26:0b:f0:16:66:11:
6d:1a:14:2a:82:41:22:86:af:7e:28:c1:58:4a:e8:
78:31:98:ae:77:1c:94:de:d9:1a:14:d2:b3:de:ff:
f5:f5:8a:c3:8e:b6:9b:c2:6e:b3:63:ba:46:5e:7e:
c7:fd:26:02:85:e8:86:df:e3:80:80:fd:66:9a:9d:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:48:E4:33:85:25:99:1E:D1:3F:6E:52:B5:FC:C2:4C:4E:F5:81:E2
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/IEjkM4UlmR7RP25StfzCTE71geI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3785::-2a0f:3786:100:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a6:fc:ed:97:64:db:02:35:f1:b3:29:cd:60:54:b9:bc:9d:d8:
f5:9d:26:b7:b1:8f:88:41:e4:f4:89:83:c6:af:38:37:26:8b:
4f:17:7c:22:1a:9c:da:f2:69:51:5d:91:3c:84:53:50:69:7b:
24:06:20:de:0e:3e:f9:b4:67:02:f9:35:a4:a5:3b:c9:44:e3:
ee:93:bb:b3:7b:5f:a6:66:8b:32:99:12:d2:7d:74:59:da:52:
a8:39:db:d9:bd:e2:70:a3:8e:99:8c:46:05:22:8c:14:4b:f1:
aa:43:fa:59:94:56:93:09:0f:5d:d2:c3:f5:97:54:7e:18:00:
70:40:5d:ca:f1:68:74:42:52:b8:5e:dd:84:01:d8:04:d8:6d:
e8:b7:bb:43:3f:0f:3d:cb:8d:b7:f2:e2:3a:09:88:af:f5:2a:
8f:fa:d2:dc:1f:30:fa:2f:25:e9:e9:22:71:46:14:33:d4:05:
e0:5b:11:bd:16:52:68:45:20:bd:5f:0a:75:d8:ff:68:77:41:
03:7e:60:31:4f:b5:6e:c0:8b:e8:7c:58:5d:ab:9f:f0:1c:a8:
8a:c0:af:db:4c:23:6d:9e:83:02:1d:af:90:2e:77:b6:e3:7d:
82:93:f9:5d:c7:71:48:cc:e3:c1:71:09:0a:28:f5:f7:f5:74:
7c:39:03:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:51 2025 by rpki-client