Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5cc6e1-fe5f-4803-95f2-9f614074da2d/1/E6ashEmWs_n1q01G5qRJCd93YHo.roa
File: E6ashEmWs_n1q01G5qRJCd93YHo.roa (raw, json)
Hash identifier: IdKr4VsaXXkCuefj/0oPFPzS/5/FTDcFjCalduCmMnA=
Subject key identifier: 13:A6:AC:84:49:96:B3:F9:F5:AB:4D:46:E6:A4:49:09:DF:77:60:7A
Certificate issuer: /CN=b71d8ba400b7e4bf4c4ae1bc307621ec2347e6de
Certificate serial: 01856EB8F801C282166532686CBE679DE515
Authority key identifier: B7:1D:8B:A4:00:B7:E4:BF:4C:4A:E1:BC:30:76:21:EC:23:47:E6:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx2LpAC35L9MSuG8MHYh7CNH5t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5cc6e1-fe5f-4803-95f2-9f614074da2d/1/E6ashEmWs_n1q01G5qRJCd93YHo.roa
Signing time: Sun 01 Jan 2023 19:04:53 +0000
ROA not before: Sun 01 Jan 2023 19:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49697
IP address blocks: 2001:678:a00::/48 maxlen: 128
2001:678:974::/48 maxlen: 128
2001:678:97c::/48 maxlen: 128
2001:678:964::/48 maxlen: 128
2001:67c:1250::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:f8:01:c2:82:16:65:32:68:6c:be:67:9d:e5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71d8ba400b7e4bf4c4ae1bc307621ec2347e6de
Validity
Not Before: Jan 1 19:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13a6ac844996b3f9f5ab4d46e6a44909df77607a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a3:15:9e:0c:40:4f:0d:e2:20:ae:24:22:27:
0e:b6:9e:19:77:18:5c:6d:e8:40:a9:a3:60:23:64:
62:25:05:40:4a:46:33:a3:ae:db:3a:2d:b8:1d:a7:
aa:ad:3c:0a:34:12:8b:bc:34:c6:45:74:1a:b2:21:
47:c8:a2:14:0c:52:7a:72:30:a4:39:36:a9:68:d2:
8c:4b:b5:1e:38:5a:11:d0:40:ee:23:47:1c:a0:f9:
a4:1c:56:bd:7f:88:2b:76:4c:11:a0:cb:8b:ec:53:
3d:17:26:96:19:26:42:ba:8c:6a:96:8f:f2:ba:c5:
92:6d:c4:ed:fa:f2:e3:7f:6f:b5:72:36:fb:4a:18:
23:c1:18:11:cd:4f:d0:f7:38:e4:08:ba:6e:18:23:
2d:f7:1e:51:cb:62:02:71:f0:68:f5:2a:30:c3:38:
f3:d7:8c:9d:31:ec:3e:14:d8:b3:79:df:a0:e0:65:
6a:48:52:30:9d:26:d8:5f:22:e0:17:64:dc:28:82:
9a:46:ef:56:dc:f2:99:90:24:55:ba:13:13:5f:e4:
c1:42:ef:3d:96:cd:83:d1:7f:d6:66:af:b4:25:be:
90:f3:0a:44:75:a6:24:e5:dc:65:80:e6:a3:1e:57:
de:7d:ac:00:ee:37:09:f4:52:76:6e:7b:ef:60:2e:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A6:AC:84:49:96:B3:F9:F5:AB:4D:46:E6:A4:49:09:DF:77:60:7A
X509v3 Authority Key Identifier:
keyid:B7:1D:8B:A4:00:B7:E4:BF:4C:4A:E1:BC:30:76:21:EC:23:47:E6:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx2LpAC35L9MSuG8MHYh7CNH5t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5cc6e1-fe5f-4803-95f2-9f614074da2d/1/E6ashEmWs_n1q01G5qRJCd93YHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5cc6e1-fe5f-4803-95f2-9f614074da2d/1/tx2LpAC35L9MSuG8MHYh7CNH5t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:964::/48
2001:678:974::/48
2001:678:97c::/48
2001:678:a00::/48
2001:67c:1250::/48
Signature Algorithm: sha256WithRSAEncryption
ad:3b:9e:3a:ea:2d:5a:4f:0a:89:88:19:be:af:fc:c3:f1:70:
cc:ab:d1:12:0e:d3:c6:9b:6c:4f:e9:bd:59:22:79:28:30:0c:
d1:bd:2b:23:11:81:af:9a:50:8a:61:1c:68:72:4a:d9:36:6b:
64:3c:29:85:9e:04:1a:d1:f0:f8:b9:dc:87:55:ce:f6:45:16:
9b:68:fe:a8:c1:ac:3e:ab:ab:3d:27:76:49:32:ef:5b:16:03:
b3:c9:47:f0:0e:72:89:c2:ca:00:83:62:0c:24:50:3a:07:c5:
b9:09:d0:e8:82:4c:33:4f:47:5d:50:ea:c8:a4:df:ce:21:93:
2d:d7:f4:37:7d:e8:2b:87:fe:f0:b0:c9:f3:6a:66:03:02:59:
f8:57:1b:44:e1:59:7c:dc:6a:63:f9:53:21:9e:45:2f:5e:d3:
0b:5b:c8:e1:6c:6f:be:3b:00:13:4b:0b:88:65:dc:84:3f:13:
0e:64:82:0d:e8:f1:11:2e:a7:e7:d3:5e:4d:c7:68:8b:bc:db:
b0:e3:9d:16:c2:18:7f:40:1d:bb:68:7b:95:26:46:37:2c:17:
d7:45:0a:12:97:b9:eb:af:19:76:f2:2e:f9:54:0a:95:2f:9a:
36:5d:3c:3e:34:4d:9a:30:80:31:8e:d0:10:f8:cb:00:0c:90:
88:b8:6c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:37 2025 by rpki-client