Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/EC6RFyKgEr2tzugFdLCS-RvO4ck.roa
File: EC6RFyKgEr2tzugFdLCS-RvO4ck.roa (raw, json)
Hash identifier: lGlOnY+HWb2iSc83vVuRz+89dZ2DbeJk0SqhzDM3fWk=
Subject key identifier: 10:2E:91:17:22:A0:12:BD:AD:CE:E8:05:74:B0:92:F9:1B:CE:E1:C9
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 01942826D28581C10BB896856599EFAC218A
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/EC6RFyKgEr2tzugFdLCS-RvO4ck.roa
Signing time: Thu 02 Jan 2025 17:53:40 +0000
ROA not before: Thu 02 Jan 2025 17:53:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 46.28.48.0/21 maxlen: 24
185.80.220.0/22 maxlen: 24
212.78.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:d2:85:81:c1:0b:b8:96:85:65:99:ef:ac:21:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: Jan 2 17:53:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=102e911722a012bdadcee80574b092f91bcee1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:41:d9:00:6b:3b:c8:4b:2f:d8:48:f7:0d:
af:50:65:a2:b9:31:d5:e7:15:5f:6b:b1:3d:b3:5d:
6f:af:e5:54:07:51:7c:e9:e8:43:6e:24:5a:4d:74:
49:3d:ca:f5:a7:76:ca:36:1b:df:f6:9b:a1:45:62:
bb:44:a1:43:07:f2:66:a3:55:43:7f:34:98:5c:ed:
97:a3:3e:b2:89:d0:36:b4:8e:a9:ec:2b:2b:b8:a9:
ab:82:88:f4:c5:aa:4e:51:1b:8e:af:36:c4:75:02:
62:50:4f:db:e8:24:ee:66:d2:f4:2a:7e:02:b1:41:
8b:77:3a:2b:59:e9:2f:e6:5c:85:20:32:a3:97:4b:
03:c9:4d:81:d3:78:4a:12:9c:18:41:18:69:d8:9c:
98:e0:ef:85:26:92:99:26:8a:bb:cd:ec:cb:7c:d8:
49:2c:93:1e:35:a5:67:32:62:14:56:af:06:d2:29:
60:50:23:d9:4b:4b:23:2a:39:2b:25:62:fd:77:fa:
ed:f7:da:61:bf:2b:23:f7:b9:af:d0:53:97:6a:2b:
13:29:b4:af:74:7e:6c:4e:e1:49:e2:e6:1d:d4:a2:
5d:e8:e0:24:5f:a2:65:e3:0e:ee:06:32:50:e9:a5:
bb:ac:0e:fd:77:dc:a0:7c:98:9f:19:47:c1:7a:17:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:91:17:22:A0:12:BD:AD:CE:E8:05:74:B0:92:F9:1B:CE:E1:C9
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/EC6RFyKgEr2tzugFdLCS-RvO4ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.48.0/21
185.80.220.0/22
212.78.64.0/19
Signature Algorithm: sha256WithRSAEncryption
29:83:b0:9d:e6:b0:a0:b1:c7:55:54:a0:9b:34:76:46:92:7a:
c4:fc:ad:54:e2:f7:5a:27:d4:39:cf:04:84:3d:3c:46:1e:a6:
4b:d6:dd:53:1c:35:96:b0:a2:18:ba:b1:d2:1e:fa:a9:90:4e:
5f:42:fb:46:5a:94:04:68:68:e6:d0:79:ce:95:b4:1d:e0:67:
1b:33:f8:48:32:39:4a:7f:41:4b:e3:fd:8e:21:78:e7:a1:59:
48:dd:82:83:9d:4b:57:89:03:5c:a8:5d:63:19:d1:e1:71:76:
ca:81:b5:5b:97:7e:6c:8c:72:7a:75:a4:9f:14:cb:90:03:8a:
f2:4b:b0:10:92:61:af:fb:5d:96:e2:ae:66:42:7a:9f:db:a1:
8b:54:49:a1:90:40:cf:ac:ab:ad:a1:db:ed:b5:6b:15:a3:56:
34:0a:d9:37:c9:48:fa:1c:30:b6:95:cc:2c:4f:ef:c2:b9:dc:
f2:d0:2b:b4:1d:0d:50:8c:bc:10:50:83:d0:b5:29:69:c0:d4:
e1:ef:48:e1:fe:94:b3:3b:68:8a:51:d7:5e:8d:da:9b:91:fc:
cc:0b:db:d6:34:bf:9e:3c:4b:8b:d0:e5:da:a7:70:b5:24:b8:
8d:18:e4:0a:9a:9e:9e:87:b7:0d:bc:b3:ed:47:95:64:71:73:
3e:02:44:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:32 2025 by rpki-client