Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/2egoBI98WGSFjUDvzY3tK9WUJm0.roa
File: 2egoBI98WGSFjUDvzY3tK9WUJm0.roa (raw, json)
Hash identifier: InkhzPsMYOC9gJrOI6iKHryXagP6TOio1KQRp4uTugc=
Subject key identifier: D9:E8:28:04:8F:7C:58:64:85:8D:40:EF:CD:8D:ED:2B:D5:94:26:6D
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369F5B3B6AF780DCFF82937DC9DC0F8
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/2egoBI98WGSFjUDvzY3tK9WUJm0.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214717
IP address blocks: 2a0f:7803:fa80::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f5:b3:b6:af:78:0d:cf:f8:29:37:dc:9d:c0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9e828048f7c5864858d40efcd8ded2bd594266d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:d3:fa:a9:b3:a7:b1:78:70:c9:9a:10:02:
23:28:4f:12:af:ee:83:52:b6:5d:87:51:c4:a2:90:
96:f8:b2:d6:c9:09:54:53:c4:9c:96:2a:55:9b:e0:
ab:20:1d:f0:08:10:50:98:dd:61:c3:7d:71:1d:8c:
0a:ac:ed:52:bd:cf:1f:af:6f:66:90:e2:59:ce:a3:
3c:64:60:d5:38:65:c7:d4:66:9f:c4:34:11:69:31:
ae:0e:ee:93:7b:9d:86:27:ca:0c:72:74:00:d4:0b:
29:2f:ce:e6:0a:d1:f9:59:62:a9:3d:50:b0:b0:21:
a2:a1:f4:83:c9:b0:77:56:d2:38:cd:79:09:55:2c:
c0:ec:3c:5d:3a:ca:03:e7:b0:45:0c:6b:46:7e:39:
07:f2:18:ee:00:48:3f:7a:5d:39:e6:82:68:c1:6c:
6e:5b:14:0b:d3:e4:66:e9:97:a0:c3:95:40:e0:26:
5d:a6:ef:9b:41:c2:19:ba:64:66:20:59:5b:25:1a:
c1:3e:89:d4:c8:4f:5c:2d:06:0b:9f:dc:f2:9c:05:
ad:16:c0:eb:41:c9:c3:4f:a4:03:76:3f:6a:5e:8c:
64:d6:46:ec:7b:b2:9b:5c:5d:6f:b6:a8:21:34:1b:
27:a5:b6:31:ee:22:59:4e:9c:bc:0c:ee:90:3c:d7:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E8:28:04:8F:7C:58:64:85:8D:40:EF:CD:8D:ED:2B:D5:94:26:6D
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/2egoBI98WGSFjUDvzY3tK9WUJm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fa80::/44
Signature Algorithm: sha256WithRSAEncryption
28:d6:a9:79:e0:9e:45:5c:93:c0:cf:b9:62:20:95:d9:f9:71:
99:af:36:8e:66:81:e5:d8:c8:24:06:1a:5f:86:10:75:2a:c9:
91:78:fb:26:4c:3f:b5:6e:78:68:75:d8:e8:bf:dd:3e:81:0d:
ef:fc:59:c9:1f:ce:bf:04:5d:54:ed:99:b0:28:6e:6e:67:9e:
57:86:79:ac:42:34:61:6d:83:14:b8:a5:1b:9d:31:2a:65:cd:
8e:49:64:83:d1:44:3c:55:48:a9:24:44:ff:23:76:10:5c:a1:
2c:5c:95:cd:d5:a8:af:ee:33:43:36:d3:35:70:95:95:e2:3b:
83:f6:cc:0e:4f:21:d1:76:eb:24:a5:68:23:cf:9f:e4:13:1c:
2d:53:63:01:92:73:ec:19:94:89:ff:b5:03:15:0e:13:a3:39:
5c:63:41:0e:23:c0:7e:65:40:f5:6e:e7:2b:1d:74:4c:7e:df:
c9:fd:23:69:d8:99:b1:ab:a2:28:d8:e8:cc:5e:7d:11:64:cf:
dc:8c:2c:6d:31:47:59:9b:2a:bc:19:dd:6b:08:ed:3b:11:5e:
7c:f8:66:94:48:f9:ef:a4:89:da:f3:2d:97:84:b2:cd:eb:5e:
67:6d:fd:62:63:9f:c9:62:0e:b2:72:65:30:7a:d6:8c:27:ef:
ff:6d:10:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:13 2025 by rpki-client