Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/eZIEFgBJU4XMsDODJF_Qh5daqig.roa
File: eZIEFgBJU4XMsDODJF_Qh5daqig.roa (raw, json)
Hash identifier: QB6Ap2HopDkfiGK/ll+DE26kM8PVZ0ppQSxKwCrTbr4=
Subject key identifier: 79:92:04:16:00:49:53:85:CC:B0:33:83:24:5F:D0:87:97:5A:AA:28
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 019425215EAC839B4D5E6299CE142BBAF17D
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/eZIEFgBJU4XMsDODJF_Qh5daqig.roa
Signing time: Thu 02 Jan 2025 03:48:51 +0000
ROA not before: Thu 02 Jan 2025 03:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 2a14:30c1::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:5e:ac:83:9b:4d:5e:62:99:ce:14:2b:ba:f1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Jan 2 03:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7992041600495385ccb03383245fd087975aaa28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:fb:1b:cb:af:59:28:a2:9c:40:4c:33:50:
2d:90:83:15:16:0f:4a:e7:df:a2:29:55:16:ac:1f:
ba:43:54:f8:fe:b3:c9:96:3b:d2:7c:37:1e:52:24:
06:79:91:e4:2c:65:06:23:ee:d3:6f:60:74:78:86:
d8:c0:21:ae:58:52:5e:c0:00:6a:6b:a5:7c:1d:78:
39:ed:77:15:16:da:ff:71:a5:e7:6d:ad:f3:31:83:
42:c3:0b:e0:ed:5f:2a:ec:8d:70:40:46:70:7e:91:
50:bf:2a:a2:65:c3:8e:2c:68:1a:65:d5:e4:d1:cd:
a9:5a:c6:99:e9:e5:15:2c:f3:b8:51:3f:ab:d8:af:
86:6d:9c:cc:ca:be:78:4e:3a:51:f4:94:53:87:20:
3e:ce:a7:8d:e4:f8:54:c3:4e:f2:ab:95:1f:72:cb:
3c:51:07:ae:a5:f2:5f:2f:7e:c5:ed:64:fa:e7:dd:
3e:d2:30:ff:23:93:fc:b2:3b:97:2f:91:48:4d:2c:
e2:1e:75:2f:5d:51:21:f2:c7:8c:cf:52:a8:df:c5:
f6:4f:33:10:fe:f3:88:70:95:7c:99:8f:ec:bc:d9:
d0:34:e7:50:1d:2b:a0:6e:44:13:04:8d:02:c9:66:
b1:80:10:f5:80:fd:9c:ea:09:ae:9b:32:1f:66:c4:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:92:04:16:00:49:53:85:CC:B0:33:83:24:5F:D0:87:97:5A:AA:28
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/eZIEFgBJU4XMsDODJF_Qh5daqig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:30c1::/32
Signature Algorithm: sha256WithRSAEncryption
10:6a:4d:70:b1:d3:c0:59:7b:ea:9c:07:b0:60:67:48:5d:e1:
5c:32:13:cc:5e:20:6b:61:1b:97:47:04:a4:1b:07:34:dd:0c:
ec:b3:7d:5a:bb:75:9e:0c:17:65:93:e4:ab:46:57:06:44:1b:
26:41:01:8e:54:8c:26:94:68:33:aa:57:dc:c4:c8:28:98:ce:
ed:8b:1a:f3:ec:90:56:3e:40:a7:8e:33:8a:28:ec:00:42:c1:
50:b8:7a:e5:60:ec:ca:ae:77:3a:da:f1:1a:13:69:ce:43:ff:
c9:b6:2d:ee:cc:d1:d3:a1:4e:37:2b:1a:78:00:64:1c:eb:66:
7e:03:83:53:71:e6:a8:2a:b7:ed:77:ff:e8:f2:a6:83:d8:27:
3b:70:82:3e:ce:ea:47:73:c7:a9:74:cb:30:ef:25:94:3c:63:
41:60:be:80:d0:85:12:ff:77:57:26:32:a8:93:7e:5e:27:2b:
eb:91:5c:76:5a:5a:b2:71:b7:83:1c:0d:11:3c:c4:6b:d2:68:
4e:a0:70:be:ee:59:9b:33:62:80:5e:dd:5e:e1:05:57:49:7a:
d2:fb:3a:40:d4:2d:d6:c5:dc:50:ae:ff:62:12:79:3a:9c:2c:
ba:47:0c:ec:3a:03:8c:65:a8:30:20:a7:66:fd:21:45:14:98:
6a:a8:7f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:25:36 2025 by rpki-client