Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/E4eOxviR1gLoHK7pcDgc8k-WjAA.roa
File: E4eOxviR1gLoHK7pcDgc8k-WjAA.roa (raw, json)
Hash identifier: 356DxlQbwYH9ug7JLANzuZyo+wSDHoG6CdAEqDwLkbA=
Subject key identifier: 13:87:8E:C6:F8:91:D6:02:E8:1C:AE:E9:70:38:1C:F2:4F:96:8C:00
Certificate issuer: /CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
Certificate serial: 01856E666BB74CCF71CBE401D3FBAEDFEC23
Authority key identifier: EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/E4eOxviR1gLoHK7pcDgc8k-WjAA.roa
Signing time: Sun 01 Jan 2023 17:34:44 +0000
ROA not before: Sun 01 Jan 2023 17:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2001:67c:b08::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:6b:b7:4c:cf:71:cb:e4:01:d3:fb:ae:df:ec:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
Validity
Not Before: Jan 1 17:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13878ec6f891d602e81caee970381cf24f968c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:19:72:a8:07:3f:81:a0:9b:48:e4:fd:67:c8:
e0:db:af:da:07:31:69:db:58:26:b0:41:8c:e3:16:
82:b1:d0:97:ed:44:31:19:f4:3d:ba:9b:3e:00:54:
42:f6:f1:a4:64:2e:c2:bf:30:d1:8b:b9:ee:c2:ba:
26:d5:e3:2b:61:cf:1d:34:4d:f4:5f:cc:e4:54:86:
b0:12:bb:78:66:76:8f:57:65:ec:11:65:7d:d5:9c:
4c:62:74:97:34:68:fd:6a:78:ba:25:5a:bb:61:08:
26:b2:14:ca:50:1e:7c:82:bb:15:b1:c2:d9:ca:e6:
eb:27:78:4e:aa:90:87:52:2e:19:2a:57:d6:11:21:
ac:e7:bc:36:bb:8f:5d:dc:18:0c:6e:50:13:d9:81:
c2:60:f4:1e:e5:40:31:5c:7b:f5:90:37:4c:0d:8d:
c2:ef:8f:3c:de:54:a7:aa:c5:a0:c3:81:32:4c:52:
6c:81:09:8f:51:64:c5:a5:af:ca:6a:72:ee:45:4f:
01:7a:0e:d4:02:33:30:87:08:87:95:e3:35:af:bf:
9b:ae:b3:46:31:54:0f:87:99:ec:1a:22:b2:de:2f:
12:69:e4:f3:ca:cf:3c:ff:ce:69:dc:e9:39:59:69:
44:c1:44:b3:68:20:ba:12:ba:9a:0e:ba:7d:a1:b7:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:87:8E:C6:F8:91:D6:02:E8:1C:AE:E9:70:38:1C:F2:4F:96:8C:00
X509v3 Authority Key Identifier:
keyid:EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/E4eOxviR1gLoHK7pcDgc8k-WjAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b08::/48
Signature Algorithm: sha256WithRSAEncryption
28:96:0c:d0:c8:20:78:bb:eb:ce:a5:f1:9f:c5:26:e9:c8:0d:
dd:02:d2:13:20:60:b0:d3:60:ad:3a:fb:2e:5d:56:7c:32:82:
d5:1e:c8:19:51:91:b5:d6:6a:65:68:11:50:28:57:ab:4d:65:
f3:5f:27:a0:88:ce:8d:89:83:99:70:e7:8b:82:e3:c3:ef:25:
2c:60:4a:dd:09:e0:83:4d:df:1f:86:a0:78:c9:c6:68:00:a9:
e9:ac:2f:60:99:9b:03:3f:81:8c:f0:52:66:36:7a:11:24:fa:
b4:78:79:cb:6a:c2:b2:9a:88:3a:60:81:03:98:44:58:d9:e3:
df:9d:43:6a:56:d2:2e:42:69:53:3a:ad:db:14:40:ff:c3:4e:
71:83:74:50:f8:29:90:5f:da:0f:46:c1:6f:62:51:24:e6:c0:
2e:e7:e2:76:31:41:fa:ad:58:34:81:ab:20:18:7d:d2:59:19:
df:10:f2:83:80:b7:ce:49:e9:c2:6b:9a:e2:a9:81:16:8a:15:
e9:27:c4:11:a7:2e:f6:d0:27:e1:21:e1:f0:d6:c8:19:74:1d:
0c:a9:aa:9f:9a:3a:34:ef:1e:53:d8:94:f3:83:48:01:ff:d8:
74:ae:a2:5e:28:5a:95:aa:06:a6:6d:0a:b9:cc:76:4d:df:41:
45:84:64:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:56:05 2025 by rpki-client