Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/eyay8k87IZ35zExne_TItpV8sx8.roa
File: eyay8k87IZ35zExne_TItpV8sx8.roa (raw, json)
Hash identifier: R4dfvsdY6rqeKZAy6+PjcZg0XFtA0pn4PmY2bSJ2pqQ=
Subject key identifier: 7B:26:B2:F2:4F:3B:21:9D:F9:CC:4C:67:7B:F4:C8:B6:95:7C:B3:1F
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 2B1968F0
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/eyay8k87IZ35zExne_TItpV8sx8.roa
Signing time: Thu 21 Apr 2022 09:41:16 +0000
ROA not before: Thu 21 Apr 2022 09:41:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39150
IP address blocks: 2a02:d0c0::/32 maxlen: 32
2a02:ec40::/29 maxlen: 29
2a02:d0c1::/32 maxlen: 32
2a02:ec40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723085552 (0x2b1968f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Apr 21 09:41:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b26b2f24f3b219df9cc4c677bf4c8b6957cb31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:0b:b8:b9:76:6b:3d:2c:c5:58:d5:8a:eb:
92:ce:ce:ac:f1:5b:e2:0e:74:99:c5:e8:22:aa:62:
68:f2:95:66:78:1d:1e:21:96:a4:f0:6c:66:d6:54:
5b:aa:98:e6:1c:d9:f5:29:45:88:94:98:28:ae:1c:
4a:61:84:07:c8:49:6e:88:5a:3d:ec:18:70:72:82:
ed:2c:10:7d:82:17:5e:7c:4d:39:09:20:ba:4b:ae:
13:23:25:e0:a2:4b:68:33:43:aa:a2:5c:e9:4f:05:
d4:8f:01:82:fb:30:cb:aa:ce:a3:05:e8:a8:e1:8a:
21:8b:18:a9:46:d8:57:7c:94:73:a8:6d:26:d9:aa:
a4:d9:20:24:e8:97:a8:74:c8:78:de:e1:60:67:da:
9c:33:42:d9:92:c3:05:b7:ed:c9:51:97:e5:c1:e1:
de:5c:09:21:18:f4:7b:72:d8:bd:2a:3a:64:0b:a4:
04:d4:3f:58:1f:34:12:27:a5:73:98:86:e9:93:32:
e2:07:0c:8c:a3:62:a7:c0:13:25:44:30:ff:96:b0:
af:3a:33:2b:c7:cd:a9:f8:f7:2a:39:f7:7b:f2:f0:
d6:60:c3:77:d9:1c:f7:d1:a9:e3:60:e0:cc:cb:51:
7b:2f:2a:8e:66:36:c1:fb:13:e3:a8:0b:2d:7e:11:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:26:B2:F2:4F:3B:21:9D:F9:CC:4C:67:7B:F4:C8:B6:95:7C:B3:1F
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/eyay8k87IZ35zExne_TItpV8sx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:d0c0::/31
2a02:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
5b:18:07:89:d9:32:29:0b:6b:bf:b1:9e:b7:43:1c:90:9f:e6:
24:ad:60:0c:65:b4:83:1c:ff:05:88:4f:75:fa:f5:f4:36:cd:
93:e0:51:ee:8a:cd:a6:0b:5c:fe:aa:ad:92:ac:d9:ee:43:3a:
a2:e4:ba:70:f3:79:6f:58:bc:ee:cb:ed:3f:fe:4e:f1:f0:ed:
23:45:28:40:2e:d0:c4:e2:72:25:de:f6:f4:50:4d:cb:0a:aa:
f5:89:88:50:6f:91:b7:9b:14:9e:10:71:4e:45:ec:79:30:20:
78:e0:6c:f0:a7:46:f2:25:d6:f8:a2:74:f2:2d:12:85:14:c5:
5e:a8:1d:72:75:ce:d1:9e:5e:df:9d:5d:d6:62:af:29:4f:cd:
7c:ae:dc:19:12:22:9f:5c:8f:a1:d6:57:a3:37:e2:05:e4:bd:
f8:b7:5c:fe:75:c5:d7:15:3e:00:48:23:ee:ee:1e:01:b5:c5:
47:f4:a8:27:c3:da:33:49:f6:4a:09:4d:84:35:bc:ac:ea:3d:
f0:a2:99:c2:d4:fe:6c:91:89:e7:54:35:df:09:74:80:08:34:
9d:c2:d1:fb:98:9a:12:cb:4d:1d:5f:f5:76:5f:7b:d2:c1:5f:
d4:cf:23:71:c9:a0:8d:ff:2b:a3:7c:0b:42:fd:8b:7e:61:58:
f6:e6:0d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:42 2025 by rpki-client