Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/e2t_YK8D3Ou1mmIN3DyY4Pc2jEg.roa
File: e2t_YK8D3Ou1mmIN3DyY4Pc2jEg.roa (raw, json)
Hash identifier: V0vGoPDHLUENP/XyiwK9EqYrZgItywt6SEGOJGfN9/k=
Subject key identifier: 7B:6B:7F:60:AF:03:DC:EB:B5:9A:62:0D:DC:3C:98:E0:F7:36:8C:48
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 018A70D7F02AC73FAD3D962D5DFDC55FE67B
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/e2t_YK8D3Ou1mmIN3DyY4Pc2jEg.roa
Signing time: Thu 07 Sep 2023 18:11:54 +0000
ROA not before: Thu 07 Sep 2023 18:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216349
IP address blocks: 2a10:a9c0::/29 maxlen: 29
2a07:f244::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:70:d7:f0:2a:c7:3f:ad:3d:96:2d:5d:fd:c5:5f:e6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Sep 7 18:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b6b7f60af03dcebb59a620ddc3c98e0f7368c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b9:d5:d5:43:15:b4:41:9e:2b:c4:fa:4d:26:
09:cf:67:28:5c:25:52:42:6f:14:f7:40:e9:fc:cb:
75:c4:bf:98:22:41:06:a6:09:02:7f:41:64:a4:f5:
c3:ab:d6:d3:bd:19:30:af:07:88:fa:4a:e1:95:e0:
db:ee:72:90:c7:61:6c:04:19:b7:f3:0b:ab:94:77:
b3:21:b5:82:89:cc:6a:59:98:30:db:df:f7:82:0b:
d7:d4:0a:1d:f5:4e:ed:ba:04:5a:e0:b3:98:f0:d5:
4d:01:56:69:8c:74:4a:7f:61:69:4a:5e:80:10:69:
13:ec:5e:40:49:5f:bc:73:2f:88:56:ea:71:b0:24:
cc:e5:1f:db:dc:9d:1c:82:f0:99:b5:7b:43:ba:5c:
4d:6e:fe:a0:bf:77:a0:1c:6c:34:14:36:a6:d3:71:
51:93:41:40:15:92:32:66:de:d4:2e:eb:cd:08:ab:
b5:c7:d1:51:4d:55:75:57:1f:64:55:5c:1f:8a:17:
9b:11:c3:28:99:e8:7c:f7:6e:ca:18:c7:83:b8:dc:
9c:5f:5f:18:ba:ac:3e:ef:d6:1c:a2:1a:cf:4d:84:
53:26:c9:b0:66:8f:88:d9:79:0f:b7:d0:9b:fb:f6:
e7:2d:db:44:e9:1d:fc:08:3d:10:98:a3:0b:99:8e:
6e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6B:7F:60:AF:03:DC:EB:B5:9A:62:0D:DC:3C:98:E0:F7:36:8C:48
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/e2t_YK8D3Ou1mmIN3DyY4Pc2jEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f244::/30
2a10:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
4e:5b:c0:d6:d4:5d:df:03:32:92:64:23:7d:79:fd:83:63:be:
28:47:31:c0:34:98:2e:87:ed:f7:41:d0:42:c4:2e:61:00:04:
ff:ae:c1:88:14:ee:64:eb:f8:21:c3:e9:c4:15:c5:5a:e5:dc:
52:ec:6a:03:a5:00:ee:77:e6:1a:ee:8d:23:3a:83:30:e7:6d:
3a:39:cb:fe:aa:4e:00:b2:06:5b:64:e8:ca:ec:53:ec:a1:7f:
a6:52:c6:1c:60:0c:c5:87:1c:7a:18:3a:d8:19:1c:6c:d9:a2:
ea:65:4a:81:bb:04:b8:09:5d:28:39:50:c9:4b:36:ba:f2:5a:
2a:41:54:c1:a5:59:c4:71:bc:82:4c:36:15:4a:f7:39:fb:62:
12:1f:ea:67:05:dd:d8:62:81:bd:06:28:68:3b:59:a7:ba:fc:
73:8b:21:66:e2:d7:94:35:55:a8:43:fa:36:63:95:05:67:7b:
4e:63:43:ab:54:aa:7e:59:7f:7c:32:2c:ff:65:cb:2d:15:35:
f0:d5:92:0a:e9:76:b2:4e:a0:e2:df:69:46:62:cf:be:5f:bd:
5d:37:ba:fa:ce:ae:ec:1e:c2:d0:05:4b:c4:19:41:06:df:a9:
34:d0:e8:aa:eb:f5:24:9f:22:ba:06:0d:b8:2d:e8:bb:ae:25:
24:73:96:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:54 2025 by rpki-client