Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RGra-Y7OulLiuStJ8S4qsKlPLiE.roa
File: RGra-Y7OulLiuStJ8S4qsKlPLiE.roa (raw, json)
Hash identifier: EF8Dr3u6tLhsTb6fn18ERVSQgAWS/V9eS/LNh7fmBMw=
Subject key identifier: 44:6A:DA:F9:8E:CE:BA:52:E2:B9:2B:49:F1:2E:2A:B0:A9:4F:2E:21
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018F9A5618274F719A879EA63E8EF8F64D44
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RGra-Y7OulLiuStJ8S4qsKlPLiE.roa
Signing time: Tue 21 May 2024 08:48:04 +0000
ROA not before: Tue 21 May 2024 08:48:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215158
IP address blocks: 2a0d:e080::/29 maxlen: 29
2a11:c0c0::/29 maxlen: 29
2a11:d900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9a:56:18:27:4f:71:9a:87:9e:a6:3e:8e:f8:f6:4d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: May 21 08:48:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=446adaf98eceba52e2b92b49f12e2ab0a94f2e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:da:56:0f:13:d2:b6:40:27:47:42:03:04:58:
ac:ca:78:f9:b7:e4:77:25:a3:bc:87:00:f5:ed:f2:
50:12:74:b4:1f:84:84:a8:f9:a7:5b:88:b6:f9:92:
0b:12:07:4b:13:84:5b:3c:e8:f6:a9:7b:63:ac:5a:
b6:58:bf:e7:28:02:c5:67:8b:c5:a2:ec:72:f0:07:
96:de:f1:e4:2f:a9:6c:a3:2d:0e:32:47:81:e6:17:
55:d9:3d:a3:c4:83:14:9d:1b:30:09:c3:b1:40:f0:
a1:e4:fb:b0:af:67:70:f1:0f:c4:55:e3:e0:4f:50:
6b:93:94:6c:0c:a7:c9:c9:de:32:d7:27:43:e7:6b:
27:eb:0c:53:60:1a:f5:62:86:c8:95:b5:48:c1:07:
03:ca:b1:75:4e:ae:28:9f:86:95:a9:96:47:95:c1:
f7:0e:aa:85:d9:18:90:20:b2:2a:3c:f6:cf:6d:f8:
f6:0b:70:03:97:b9:2f:f3:0d:33:ae:ae:43:02:22:
59:63:28:e7:6d:b0:9a:0a:f6:3a:f2:67:d1:03:3f:
7e:fc:95:4b:93:d9:2a:de:72:f3:1d:f8:3c:a8:9a:
2d:db:3e:d6:c3:8a:c9:7c:5d:22:ae:aa:9d:ca:af:
d1:3d:66:ae:a7:ea:dc:6a:98:ed:22:2d:be:72:7c:
e6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6A:DA:F9:8E:CE:BA:52:E2:B9:2B:49:F1:2E:2A:B0:A9:4F:2E:21
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RGra-Y7OulLiuStJ8S4qsKlPLiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:e080::/29
2a11:c0c0::/29
2a11:d900::/29
Signature Algorithm: sha256WithRSAEncryption
68:12:3a:70:a0:05:f8:1d:5a:c5:d2:65:2f:83:df:e7:30:71:
ee:54:d7:2f:f2:84:3c:f5:c1:54:5e:8f:b8:10:21:2b:7a:56:
96:d0:b6:a0:52:ed:7f:49:0f:ac:c7:68:23:ee:18:ad:36:4f:
0b:6b:f5:f7:b7:f7:95:6b:6f:21:8d:14:2b:76:25:60:bb:e0:
eb:a6:df:60:b4:3f:3c:fb:df:60:5e:c8:71:34:29:ae:57:93:
56:ff:26:c4:d3:67:88:09:7f:9a:fd:ea:30:86:26:42:70:da:
4f:4b:57:48:db:14:b0:f0:3c:0e:2c:3f:30:07:43:18:34:13:
fe:0a:72:f3:e6:ff:dd:ee:05:4b:0c:09:cf:c4:b6:bd:a5:98:
eb:93:67:a8:de:12:70:a8:e0:96:30:4b:12:3f:77:eb:83:10:
b2:c4:4b:e9:5b:0c:87:b6:6b:c2:37:b5:58:33:c8:87:75:54:
34:6d:63:c8:37:54:6d:a7:e4:93:13:f4:2b:cc:96:e7:26:cc:
04:de:3e:fc:b6:cf:5f:28:a2:d9:ac:3a:2b:2e:d7:bd:bb:db:
2e:f4:9e:66:ba:51:d7:ed:cf:27:96:56:55:e5:d3:bf:69:80:
bc:6e:aa:5b:38:72:e3:ea:ed:38:04:15:57:7d:ab:96:3b:95:
42:57:77:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:57 2025 by rpki-client