Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/EJeuf5IKxfq2FL_pg77yzZErIzE.roa
File: EJeuf5IKxfq2FL_pg77yzZErIzE.roa (raw, json)
Hash identifier: 31VL8gTmuVGQ+KVT4KHiciNe+A4vLtk11BvQkgqcfek=
Subject key identifier: 10:97:AE:7F:92:0A:C5:FA:B6:14:BF:E9:83:BE:F2:CD:91:2B:23:31
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 019428271A7517833B37E396CA120710F64E
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/EJeuf5IKxfq2FL_pg77yzZErIzE.roa
Signing time: Thu 02 Jan 2025 17:53:58 +0000
ROA not before: Thu 02 Jan 2025 17:53:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208302
IP address blocks: 2a0e:46c6:600::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:1a:75:17:83:3b:37:e3:96:ca:12:07:10:f6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 2 17:53:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1097ae7f920ac5fab614bfe983bef2cd912b2331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f8:35:52:6b:f8:78:24:95:12:37:00:6c:df:
13:7f:fa:c8:39:3a:f0:30:75:bc:6c:b4:f7:3d:61:
f4:05:8c:68:96:69:88:a9:6d:50:98:1d:c4:47:c6:
7b:de:cf:60:89:50:e0:f5:a4:1f:5e:71:78:88:bb:
7d:8f:1f:56:44:c4:b0:c8:17:1b:22:c8:c0:a5:d1:
c1:5a:6e:c5:08:ba:7c:50:38:c8:90:6b:90:64:b9:
ad:93:dc:a0:71:5b:67:75:91:74:22:b0:af:de:9b:
e7:9d:08:bd:86:f8:92:8f:03:e7:42:96:47:03:0b:
54:d9:b4:80:24:82:4b:9d:41:b9:4d:fb:5a:58:46:
41:47:1c:9c:03:63:cb:e9:60:36:08:42:83:2b:68:
0d:ff:c2:25:d8:76:33:6a:d9:a1:31:e8:82:39:7a:
66:03:ba:dc:4b:2c:6b:4c:ba:02:4b:8b:73:d3:1d:
f5:5c:75:3c:fa:ce:de:9e:28:47:9b:41:34:4d:68:
b2:30:f0:79:f1:8b:94:7e:2a:bb:2a:ee:0a:39:cd:
8f:0d:b0:0c:99:de:ad:db:2d:9c:9f:b0:a5:d3:c7:
94:5e:4a:ce:db:f8:6c:62:0b:e1:e3:66:3d:99:22:
70:bd:c9:28:98:c0:b3:22:ac:15:b3:04:d6:46:79:
c4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:97:AE:7F:92:0A:C5:FA:B6:14:BF:E9:83:BE:F2:CD:91:2B:23:31
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/EJeuf5IKxfq2FL_pg77yzZErIzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c6:600::/40
Signature Algorithm: sha256WithRSAEncryption
61:1c:b6:5a:19:10:15:07:9c:1d:18:97:8c:4a:86:37:6e:ae:
63:17:81:f5:f8:14:85:74:b1:fb:9b:38:5a:c3:32:45:81:46:
6d:a9:83:b5:2b:19:6d:e0:9f:a1:21:59:4b:68:7f:e0:2f:55:
e9:fe:fa:cb:e4:ed:92:0e:63:ca:63:a9:d7:fc:c7:b3:d2:90:
e4:a5:33:83:dd:4e:02:b5:41:ed:53:c4:19:28:29:14:a1:b2:
cd:e3:ee:a2:43:f2:28:5b:64:6c:49:9f:e7:1a:5f:1e:5b:a5:
6e:6c:8c:15:5d:e2:db:01:d6:d4:26:87:cc:25:26:9d:2f:26:
83:33:52:3b:ee:c0:64:01:a4:2b:a9:78:19:6f:59:67:bd:dd:
3f:86:d6:41:5b:37:74:e3:bb:c3:e2:54:94:d5:16:12:77:65:
85:eb:ee:5b:f8:3e:13:97:0d:a6:05:e3:36:5b:ce:81:76:de:
15:28:ef:e1:73:7f:fa:66:79:a8:1d:4e:5d:94:fb:4c:03:4c:
7b:43:e3:e6:94:7a:5e:aa:22:93:be:bd:33:43:c5:a4:e0:17:
7a:b0:9e:1f:ba:08:d3:9f:ec:65:8b:26:ae:f7:a6:61:47:68:
e2:02:2d:a1:3a:80:af:50:f1:2d:82:ca:5b:c5:3f:91:d0:81:
7a:23:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:51 2025 by rpki-client