Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/EDucXm6wxrJre-qBr4tWf6ZBQS4.roa
File: EDucXm6wxrJre-qBr4tWf6ZBQS4.roa (raw, json)
Hash identifier: A7DWs5LZfbhiFkucQU6R8I4zFR3zFnr3BjoUftQM2w0=
Subject key identifier: 10:3B:9C:5E:6E:B0:C6:B2:6B:7B:EA:81:AF:8B:56:7F:A6:41:41:2E
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 01927FB21EACAA6CA77FD93A491839DD6EFE
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/EDucXm6wxrJre-qBr4tWf6ZBQS4.roa
Signing time: Sat 12 Oct 2024 07:47:12 +0000
ROA not before: Sat 12 Oct 2024 07:47:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212786
IP address blocks: 2a09:e980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7f:b2:1e:ac:aa:6c:a7:7f:d9:3a:49:18:39:dd:6e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Oct 12 07:47:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=103b9c5e6eb0c6b26b7bea81af8b567fa641412e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:b3:0b:0c:ad:96:27:94:a5:b3:39:28:c5:
78:aa:01:39:c8:50:7c:c0:61:73:a3:30:0e:0a:91:
0d:2b:49:65:81:36:c4:72:c8:06:d5:7d:74:8e:fd:
ef:fa:b0:6b:0c:ea:41:af:57:37:7c:0e:39:1c:55:
40:08:8a:ff:83:45:c8:21:0b:da:21:1a:10:db:9b:
17:b7:17:c1:6d:6b:f1:0c:91:58:6f:3d:01:a5:d2:
cc:62:3c:1c:d5:82:86:7d:18:94:b8:99:e3:90:75:
c7:30:d6:c2:05:fa:fc:16:3e:94:69:71:4a:ac:98:
8d:b6:38:83:23:b6:6a:69:d2:1c:bc:a6:db:19:3b:
af:06:72:ec:e1:22:e1:fa:cc:b5:0f:4b:79:72:cc:
63:10:a4:b3:ac:5e:6b:04:0d:3f:11:12:52:cc:8d:
dd:6d:be:d0:96:8e:1b:7c:21:29:b0:f2:91:93:30:
fe:d7:b3:ce:96:f8:f9:da:ab:88:55:3c:5f:f6:d2:
9f:f2:fa:92:5e:87:fa:8b:f8:3d:57:54:c4:42:56:
df:6f:38:8c:e6:cb:7f:5d:27:ea:66:ae:d5:ef:bf:
7c:6b:6b:45:43:40:fa:7a:6e:61:97:f8:38:0f:7f:
f9:c4:9b:68:e6:62:e1:93:c3:fd:e8:75:e0:e6:1e:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3B:9C:5E:6E:B0:C6:B2:6B:7B:EA:81:AF:8B:56:7F:A6:41:41:2E
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/EDucXm6wxrJre-qBr4tWf6ZBQS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:e980::/29
Signature Algorithm: sha256WithRSAEncryption
15:ca:d7:f5:44:9c:40:da:03:3a:07:a5:f8:fd:9d:99:02:b9:
61:e7:df:e7:77:ce:5f:c2:5d:82:28:08:0b:ee:c1:da:bf:ea:
49:f6:74:2c:bd:a9:ed:6a:dd:50:a7:f2:21:7b:1b:90:69:06:
63:88:06:ff:8b:de:62:06:45:b3:e1:9c:21:0f:2d:07:16:01:
d6:80:9e:0a:a5:11:a3:be:4f:ff:8a:11:1d:97:f0:e8:f7:72:
27:78:9d:55:14:8b:7f:fc:3b:a9:0b:8a:86:c2:5e:b1:ee:7f:
1a:6a:79:0b:98:e2:d0:32:1a:78:e9:1a:45:8c:ca:19:1b:33:
fc:3a:d2:e6:38:17:b7:5c:34:e5:ab:7c:df:94:3a:d8:94:fb:
9c:42:6e:1a:4d:e5:20:8d:a7:9b:9a:d7:85:ca:a0:95:4d:b8:
a1:6e:6a:09:62:3c:22:70:f0:8a:56:0f:fd:d6:e4:7b:29:eb:
76:e0:6d:0b:8f:46:af:8b:a8:f0:9f:b2:38:eb:f4:db:da:c1:
90:c2:a0:17:09:9e:02:eb:0b:86:30:e4:cf:53:a4:08:8b:89:
39:f8:a9:dc:67:d5:08:09:6c:de:5f:36:14:90:9d:31:7b:1b:
8d:be:c6:d5:94:63:f3:c1:9c:dd:1f:0f:40:e4:30:52:23:6d:
5c:ff:f1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:55 2025 by rpki-client