Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/etXSflgmHv3Z7BTXQ40YtMmsSKQ.roa
File: etXSflgmHv3Z7BTXQ40YtMmsSKQ.roa (raw, json)
Hash identifier: GKbNpLwYF4j7naon/02XUN5BlSA6xDoZ+15FoWpR1As=
Subject key identifier: 7A:D5:D2:7E:58:26:1E:FD:D9:EC:14:D7:43:8D:18:B4:C9:AC:48:A4
Certificate issuer: /CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Certificate serial: 0194A7BF6720B3531710DBA09CA1F8F40DD1
Authority key identifier: 13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/etXSflgmHv3Z7BTXQ40YtMmsSKQ.roa
Signing time: Mon 27 Jan 2025 12:32:06 +0000
ROA not before: Mon 27 Jan 2025 12:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213844
IP address blocks: 2a02:54a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:bf:67:20:b3:53:17:10:db:a0:9c:a1:f8:f4:0d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Validity
Not Before: Jan 27 12:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ad5d27e58261efdd9ec14d7438d18b4c9ac48a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:69:df:b3:cf:6f:75:c4:51:fe:fc:a7:a9:
23:41:7d:49:fa:ad:ee:c0:85:4f:ee:dd:44:4b:e9:
5e:fa:2b:a0:07:00:f6:24:1c:4d:9c:f9:6b:43:23:
e5:82:3f:42:6c:c5:a9:26:04:ae:11:59:a9:89:a8:
d5:a9:8d:62:4d:1d:48:72:0e:ad:d3:74:27:42:dd:
4a:ef:0b:da:95:53:6e:77:8b:ef:01:43:bb:f2:41:
35:0c:67:d4:b7:79:f3:03:d4:fe:c9:db:58:32:8c:
86:b7:d6:91:af:76:61:8e:c4:95:49:a7:3a:72:d2:
8c:9e:7c:e2:24:d7:70:df:8b:cd:5d:28:b1:8b:26:
18:e1:4e:04:32:87:83:99:07:dd:67:0e:2f:8e:de:
95:e4:53:1b:b3:77:c8:89:1e:27:fc:7d:a8:53:79:
85:ce:83:66:b1:e1:0e:88:50:f6:72:3b:85:5c:d0:
54:75:67:11:d3:fd:b8:5b:4f:6f:9c:21:1e:a9:a0:
44:c9:b2:34:c5:77:4e:cf:22:c7:2a:7a:64:f8:17:
9c:6a:7b:a0:06:38:d8:43:49:d2:cc:4a:d6:50:63:
2f:0d:81:76:57:36:ec:5b:0f:49:fa:f9:b3:ab:79:
35:8e:d9:cd:20:27:c1:52:71:b8:7e:d2:87:41:6d:
7c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D5:D2:7E:58:26:1E:FD:D9:EC:14:D7:43:8D:18:B4:C9:AC:48:A4
X509v3 Authority Key Identifier:
keyid:13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/etXSflgmHv3Z7BTXQ40YtMmsSKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:54a0::/48
Signature Algorithm: sha256WithRSAEncryption
cc:a2:11:ea:e6:fd:3e:5a:9b:2b:32:72:80:b1:78:e7:71:40:
cc:07:dd:48:eb:b9:02:f9:cc:61:84:db:cc:da:cb:4e:3c:5f:
d0:c4:f2:95:c2:6f:a6:01:be:7f:68:24:61:8f:51:c7:b9:00:
c6:c8:f0:61:f0:f5:cd:5e:03:00:29:e4:90:93:69:36:e3:5a:
dc:42:d3:b5:a4:56:0b:11:d3:19:34:f7:26:9c:c7:61:4b:a6:
90:07:3a:62:3e:8c:8d:8f:db:69:88:ab:b7:05:a2:fc:86:59:
a3:17:96:32:05:4f:04:75:a9:2c:39:8f:73:75:d1:99:ed:22:
2c:26:11:e0:0b:10:92:c6:25:9b:08:27:94:02:b5:42:83:90:
26:9a:e5:0a:7f:88:44:d9:61:55:1e:50:5d:d3:05:03:39:de:
29:70:f7:b7:bc:e7:6c:f7:dd:0d:9a:43:5d:55:20:50:ad:a6:
31:20:27:18:3a:85:fa:12:30:4b:ef:f2:0e:de:7c:82:4c:6e:
5a:49:b5:cc:1d:23:38:16:d5:14:78:88:d0:88:30:2b:12:69:
77:94:e7:a9:af:ec:cc:19:b9:13:ab:b0:b6:cd:f1:8d:b1:a8:
b0:68:c0:a9:47:17:e4:be:27:06:16:e5:6b:a8:36:6b:ae:1f:
0d:c6:11:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:08 2025 by rpki-client