Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/Ep5Q_paEMkoQ8JMNVQev_VtcdmY.roa
File: Ep5Q_paEMkoQ8JMNVQev_VtcdmY.roa (raw, json)
Hash identifier: Bu1EiGDnBTDp8uoDAPAoyCI9ib5FJjnia2bO4NVERCs=
Subject key identifier: 12:9E:50:FE:96:84:32:4A:10:F0:93:0D:55:07:AF:FD:5B:5C:76:66
Certificate issuer: /CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Certificate serial: 0194236A14430AFF4639EB6A760F011DCCCF
Authority key identifier: 28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/Ep5Q_paEMkoQ8JMNVQev_VtcdmY.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35207
IP address blocks: 2a0c:7180::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:14:43:0a:ff:46:39:eb:6a:76:0f:01:1d:cc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=129e50fe9684324a10f0930d5507affd5b5c7666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:6d:3f:4e:a7:19:93:c9:79:99:dc:e3:17:
e5:e7:79:71:ee:c7:28:6f:9a:91:b3:39:b7:e8:26:
84:b4:5b:d6:70:22:46:d2:99:7e:a9:4a:df:e1:dc:
25:c8:3b:0d:20:55:cc:36:e7:16:80:3d:bf:fb:bc:
84:a9:d9:55:2f:17:76:46:9a:64:df:89:fc:cd:63:
8d:1b:13:86:e5:ab:cf:92:9c:d2:32:f5:e6:48:b2:
71:25:78:10:bd:8e:81:f9:91:07:55:4f:b1:c2:8e:
3e:5f:f3:a7:c3:6b:f1:ff:88:8e:54:99:8e:bd:d4:
c6:5a:0c:cc:95:ae:d0:68:88:ce:03:7d:80:c8:75:
78:62:2b:b1:92:2c:48:1d:3d:29:15:99:2a:94:b3:
dc:7f:1f:86:2e:6d:77:32:be:94:4f:98:83:0b:e5:
32:0a:78:04:68:5e:2a:86:4d:0b:8b:ce:43:22:d0:
45:11:d1:43:c7:0f:1a:ff:e4:98:c1:5f:50:da:ff:
c5:f8:37:9f:da:44:ba:08:05:90:c5:af:52:50:86:
96:89:09:99:35:a5:ea:8f:63:ea:e2:17:a9:ac:32:
1c:dd:00:a6:95:09:b5:ff:5b:c0:a8:cd:42:52:f0:
8f:26:1b:82:8a:9c:91:92:03:01:3a:a3:6d:6c:02:
03:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9E:50:FE:96:84:32:4A:10:F0:93:0D:55:07:AF:FD:5B:5C:76:66
X509v3 Authority Key Identifier:
keyid:28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/Ep5Q_paEMkoQ8JMNVQev_VtcdmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7180::/30
Signature Algorithm: sha256WithRSAEncryption
4b:7e:8b:c1:6b:7b:e3:24:9e:0f:38:60:25:03:cd:60:20:54:
79:4e:9e:8f:69:14:78:d7:a4:37:5b:a9:63:8e:2e:46:fa:86:
09:15:36:05:7c:9a:1d:43:06:b9:5c:35:d2:ab:ea:3e:58:ce:
82:bf:b8:2d:90:ef:e4:0e:87:14:8f:b8:9d:6a:a7:37:d3:2f:
71:9e:ba:50:3e:03:8b:74:e3:db:e5:65:6f:f5:b1:4b:2d:ee:
cd:e7:12:42:25:5b:ac:dd:12:57:43:c8:62:94:69:e9:02:c0:
40:43:7d:20:f4:6b:7f:ac:0a:62:d3:f6:66:dd:1f:fd:03:59:
e6:4d:e9:41:66:9e:56:f2:90:41:04:9d:1b:21:2c:92:e1:65:
8e:83:cb:c6:02:7e:8f:15:e6:1a:69:e5:84:18:ad:60:2b:fe:
7f:b4:24:bf:af:03:0c:18:2d:c0:fe:47:4a:2d:06:00:11:05:
d8:32:04:46:b3:32:7d:45:6d:f9:48:46:e4:e4:f8:c6:03:d0:
f8:ab:b3:33:eb:b5:d4:83:59:b7:c2:b4:11:eb:0a:9d:46:ee:
7d:16:da:40:25:e8:99:ed:ab:18:d0:80:4e:3d:b8:4f:f4:fd:
63:9c:03:b6:d3:d2:73:70:98:57:7b:a0:54:50:53:dd:a3:2f:
c0:c6:3e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:10:54 2025 by rpki-client