Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/EYT9qGz0kMb-Dp1y5gYsZJ7DkHo.roa
File: EYT9qGz0kMb-Dp1y5gYsZJ7DkHo.roa (raw, json)
Hash identifier: X/0k7jNweDTFtMsqjBIbuHLVSC+Xzo9lBm/j8WSfyF8=
Subject key identifier: 11:84:FD:A8:6C:F4:90:C6:FE:0E:9D:72:E6:06:2C:64:9E:C3:90:7A
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0194BD28AB980CDF7A6EFAFB76D6885207C9
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/EYT9qGz0kMb-Dp1y5gYsZJ7DkHo.roa
Signing time: Fri 31 Jan 2025 16:19:06 +0000
ROA not before: Fri 31 Jan 2025 16:19:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a06:d644::/32 maxlen: 32
2a09:2984::/32 maxlen: 32
2a09:e307::/32 maxlen: 32
2a09:ef06::/32 maxlen: 32
2a0b:9004::/32 maxlen: 32
2a0d:3c42::/32 maxlen: 32
2a0d:3c47::/32 maxlen: 32
2a0d:95c0::/32 maxlen: 32
2a0d:95c2::/32 maxlen: 32
2a0d:afc1::/32 maxlen: 32
2a0d:afc4::/32 maxlen: 32
2a0d:afc5::/32 maxlen: 32
2a0d:afc7::/32 maxlen: 32
2a0d:c100::/32 maxlen: 32
2a0d:c102::/32 maxlen: 32
2a0d:c104::/32 maxlen: 32
2a0f:3104::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:28:ab:98:0c:df:7a:6e:fa:fb:76:d6:88:52:07:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 31 16:19:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1184fda86cf490c6fe0e9d72e6062c649ec3907a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:b9:a7:53:81:93:6d:f1:13:b8:d4:d3:0c:
88:5d:5e:c7:9c:3d:4a:76:c0:0f:a4:bb:13:dc:0f:
12:8e:a6:a2:85:d6:39:bb:80:f3:30:98:15:23:e3:
88:c3:ef:4d:d8:4a:9c:ef:9b:bb:e6:2f:32:fd:dc:
a4:1a:e0:a3:a3:57:00:5d:c5:95:5e:a9:85:ee:e2:
ff:c3:a8:28:ae:11:58:f6:83:ee:eb:e2:6d:a5:9c:
4e:7f:f4:88:13:8f:cb:6f:bd:dd:83:6d:34:7a:3e:
7c:ce:7c:d6:7d:99:f8:77:f1:15:f2:e3:22:58:1e:
20:09:e1:e3:8f:7c:d7:a6:77:b7:46:12:08:fb:7c:
a2:b7:30:88:e1:3a:d9:2d:1e:01:5e:58:c2:46:93:
f6:c2:d3:24:ad:00:0d:a0:e1:a6:c1:97:15:3b:86:
d8:b6:55:d5:d3:52:95:c0:b9:83:17:d0:ba:d6:22:
91:16:48:ce:b6:58:b1:5d:f1:c5:c0:41:7f:dc:0a:
57:ad:1e:32:d4:35:68:b2:6f:2b:f2:f2:61:77:3d:
27:a3:d2:c3:df:66:38:76:7d:05:9f:08:c5:ec:92:
37:78:4a:c8:7f:3d:ae:3a:d5:4c:cd:47:df:1f:d7:
fa:c2:cd:53:82:dd:dc:6e:f7:71:cb:a2:9b:2c:6c:
1a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:84:FD:A8:6C:F4:90:C6:FE:0E:9D:72:E6:06:2C:64:9E:C3:90:7A
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/EYT9qGz0kMb-Dp1y5gYsZJ7DkHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d644::/32
2a09:2984::/32
2a09:e307::/32
2a09:ef06::/32
2a0b:9004::/32
2a0d:3c42::/32
2a0d:3c47::/32
2a0d:95c0::/32
2a0d:95c2::/32
2a0d:afc1::/32
2a0d:afc4::/31
2a0d:afc7::/32
2a0d:c100::/32
2a0d:c102::/32
2a0d:c104::/32
2a0f:3104::/32
Signature Algorithm: sha256WithRSAEncryption
40:4d:3a:02:bc:bd:37:db:57:b9:bf:d1:ba:b5:be:4b:85:ab:
64:16:6b:00:31:2b:93:f5:6c:6d:dc:0b:7b:e5:ef:96:d4:e2:
0a:60:77:95:6d:4f:31:db:5f:9b:1a:b1:c0:0c:8c:fc:25:4c:
8b:03:30:39:f4:6c:d2:00:4a:a1:58:6c:66:ae:f0:8d:7d:c0:
3f:49:75:4a:e0:7a:db:55:ff:bd:d8:39:f8:da:e4:14:27:7c:
20:8c:09:f0:a1:4c:62:dd:8f:c9:c4:90:24:53:62:7e:04:cd:
71:36:12:96:b3:88:3c:42:a6:39:63:d3:1c:a3:e8:bf:c4:c9:
85:e7:c1:16:aa:49:a8:87:0e:c8:61:57:ad:e3:58:80:df:b5:
e1:40:cd:47:db:24:7f:7c:04:f0:57:df:9c:4a:c6:d7:de:cf:
18:3b:e2:b6:96:e9:57:ec:ea:1f:8a:92:cc:35:f9:bf:1c:cc:
1b:7d:45:83:b9:15:5f:12:7f:5e:47:83:9c:a9:1a:bd:17:eb:
04:b3:2a:74:cc:4c:f8:35:55:c1:bf:73:32:ee:e2:3f:1e:70:
c5:a8:c1:6f:9a:41:96:f3:dd:18:03:6f:9f:2d:85:5a:d1:22:
7f:bd:46:cb:3b:a1:44:a0:4f:89:2d:2b:f9:fc:b7:a6:af:f5:
95:d4:e5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:40:43 2025 by rpki-client