Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/EjMycGQbi9i2PVH8krb_LoQTWt8.roa
File: EjMycGQbi9i2PVH8krb_LoQTWt8.roa (raw, json)
Hash identifier: xgomaUo8izUli/3UtMK6fm9p2iafbdsMmKHmne9Pynk=
Subject key identifier: 12:33:32:70:64:1B:8B:D8:B6:3D:51:FC:92:B6:FF:2E:84:13:5A:DF
Certificate issuer: /CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Certificate serial: 0193AAE7DD527D70E0DF6A31327A19053E78
Authority key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/EjMycGQbi9i2PVH8krb_LoQTWt8.roa
Signing time: Mon 09 Dec 2024 10:12:22 +0000
ROA not before: Mon 09 Dec 2024 10:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30788
IP address blocks: 2a0a:f8c0::/29 maxlen: 29
2a0c:c185::/32 maxlen: 32
2a0c:c187::/32 maxlen: 32
2a0f:8445::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:e7:dd:52:7d:70:e0:df:6a:31:32:7a:19:05:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Validity
Not Before: Dec 9 10:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12333270641b8bd8b63d51fc92b6ff2e84135adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:f5:bc:a2:d6:38:12:43:b7:8e:11:ae:f4:
c8:a1:db:ff:c6:b6:61:ed:02:2e:4c:a6:12:4a:80:
43:9d:48:40:d5:d1:5d:1d:c0:ca:3f:f3:84:15:43:
0e:69:c2:9a:dd:6b:17:bd:07:09:85:12:fe:64:1c:
41:e0:8f:df:f1:86:c6:35:73:34:72:2e:50:57:19:
c5:0e:72:fe:b9:86:c9:ba:36:38:df:b3:bb:2f:73:
e3:58:8d:1e:c9:de:a9:71:b8:ef:dc:f3:d7:ee:60:
2a:7e:8e:3c:f4:ba:40:7b:c9:42:c0:92:0c:c8:04:
76:dc:3f:26:74:ae:5c:0c:f4:a6:b9:c8:55:a2:2f:
40:b0:64:de:0d:56:59:f2:87:84:b4:6d:8d:2e:b1:
a7:8d:df:0c:90:ce:f9:76:0e:ef:65:42:1a:02:a8:
8c:80:9f:3e:f7:38:e5:36:ea:e4:62:74:99:ef:81:
b6:07:8b:6c:b4:b1:81:5f:e0:78:3c:09:64:81:f7:
ed:08:f2:71:a3:18:d7:33:4e:f5:81:e4:f5:27:be:
2f:4d:ff:eb:59:1a:35:93:a3:1b:1c:60:3f:05:be:
bc:f7:34:0b:2f:55:ad:36:e3:0e:3a:6b:6f:67:5c:
1e:bc:7b:0f:ef:d0:c0:d2:58:cc:cc:00:8b:7b:7f:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:33:32:70:64:1B:8B:D8:B6:3D:51:FC:92:B6:FF:2E:84:13:5A:DF
X509v3 Authority Key Identifier:
keyid:F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/EjMycGQbi9i2PVH8krb_LoQTWt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:f8c0::/29
2a0c:c185::/32
2a0c:c187::/32
2a0f:8445::/32
Signature Algorithm: sha256WithRSAEncryption
4f:ad:4c:36:94:43:80:31:de:42:77:da:47:93:5d:5f:1c:8a:
56:c3:ac:c5:20:d5:35:f3:9d:f0:07:e8:4a:e6:e6:cc:a5:d3:
b5:84:0c:11:6c:9f:e4:5f:b2:30:26:c8:6b:97:c1:9b:dd:7b:
34:c7:65:d0:2d:73:25:19:10:93:a2:21:02:61:c5:8d:e1:5a:
18:96:bf:87:6a:fb:76:76:07:3a:c3:5b:96:88:5f:b9:b1:60:
09:7a:fb:c1:4b:fa:04:60:06:83:7a:c0:01:01:95:46:07:3f:
20:3c:5f:c5:2b:6c:c0:db:d0:99:0e:5f:c0:14:ff:98:a3:7f:
ab:6d:92:06:66:b5:a3:05:15:52:be:ec:80:bd:4f:26:97:72:
1c:91:45:1c:ea:c4:44:4f:4d:9e:0a:c0:5f:11:a3:df:34:0d:
7f:7f:a7:f9:b0:e7:53:c8:01:81:c9:59:ba:d4:43:f3:75:d8:
2e:38:88:6a:3e:6d:41:23:5a:f7:c7:f8:1d:5f:e1:9e:2e:31:
8e:8a:9c:16:12:cd:43:ad:61:42:a9:8b:6c:84:f6:66:c6:4c:
70:7d:12:f5:3c:89:6b:24:6f:7d:44:3b:f8:d9:a2:9b:65:79:
fd:22:7b:be:89:06:80:af:45:b4:6f:0e:b1:24:4b:8b:f5:2e:
31:cf:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:04:31 2025 by rpki-client