Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/eyQdGysIhp_r6-1FHIzSXU5efx8.roa
File: eyQdGysIhp_r6-1FHIzSXU5efx8.roa (raw, json)
Hash identifier: huANc1mdWopecpKqoSK4uR5EG7Pph6cXGyXeN73ZyWA=
Subject key identifier: 7B:24:1D:1B:2B:08:86:9F:EB:EB:ED:45:1C:8C:D2:5D:4E:5E:7F:1F
Certificate issuer: /CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Certificate serial: 0194221FAAB15355EB6E4829CB85B78D0F7A
Authority key identifier: 5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/eyQdGysIhp_r6-1FHIzSXU5efx8.roa
Signing time: Wed 01 Jan 2025 13:48:08 +0000
ROA not before: Wed 01 Jan 2025 13:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57651
IP address blocks: 2001:78c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:aa:b1:53:55:eb:6e:48:29:cb:85:b7:8d:0f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b241d1b2b08869febebed451c8cd25d4e5e7f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7f:74:2a:0c:98:c4:59:fe:86:a1:d8:e9:c7:
de:46:99:0c:23:3c:cb:4d:f5:4d:fc:34:5a:e6:c3:
3a:25:c3:25:33:78:6f:30:ee:b1:a2:0a:dc:d6:ea:
b8:eb:4d:09:6f:70:c9:b1:4f:49:e1:65:5e:6e:84:
a6:f8:0e:4b:ef:f8:a4:60:d2:ef:38:0d:67:b5:d3:
f5:67:94:0b:6c:92:d4:84:e3:1f:ab:24:1e:d3:8a:
68:4b:75:e9:f0:24:49:d0:44:29:12:77:0e:48:0a:
7f:79:8f:7a:bd:78:2c:44:87:f3:ce:ff:72:e6:3e:
18:b8:48:a6:7b:e8:c9:d0:8d:af:18:0a:50:cf:64:
c2:6c:61:8b:e9:5a:9f:1a:b5:99:e1:74:6b:a8:a0:
0a:4a:90:67:a6:df:1a:04:15:d7:36:3e:cb:ac:29:
29:c9:ee:ae:9d:b0:a9:67:f1:31:c5:4b:ee:a1:97:
79:ea:32:e1:41:9c:38:c0:fd:b5:d8:97:e8:cd:b0:
f1:23:75:cd:7d:37:ed:14:aa:e6:ed:6c:1f:c5:79:
ad:7f:9a:62:60:e0:38:ec:70:5c:45:d6:15:96:50:
45:f0:00:20:0a:f4:e2:c2:b1:21:7b:0a:92:c6:86:
10:97:b1:2c:3b:e0:82:55:06:af:b3:e7:45:74:9d:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:24:1D:1B:2B:08:86:9F:EB:EB:ED:45:1C:8C:D2:5D:4E:5E:7F:1F
X509v3 Authority Key Identifier:
keyid:5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/eyQdGysIhp_r6-1FHIzSXU5efx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:78c::/32
Signature Algorithm: sha256WithRSAEncryption
30:f9:18:4e:13:52:43:df:e7:f7:f2:3e:90:3d:42:e1:93:75:
ab:a3:ae:e0:3b:e0:fc:15:6b:0f:3f:fe:72:e6:f3:c6:43:6b:
f1:87:bb:56:af:1a:71:5d:11:4d:94:c3:91:50:16:a1:bd:ce:
68:26:c3:04:8c:ca:3a:db:b4:d2:9f:e7:1f:ee:81:ff:10:18:
85:19:66:32:95:cc:9a:d9:7d:3e:79:b8:50:5d:c2:95:2c:2d:
62:3d:11:a6:53:22:05:16:67:01:fe:a2:53:d4:78:d3:06:06:
63:d6:00:f0:47:79:7d:a4:af:2d:a5:36:28:e3:59:d6:19:98:
51:52:d8:0a:c0:0a:5f:93:a9:82:e5:38:2b:2b:5a:61:9f:64:
8e:77:a6:39:97:48:6d:4b:9b:a1:c8:f0:4d:23:38:e2:e7:fa:
7b:98:26:69:07:ad:f3:50:4d:b1:7a:2f:de:29:0f:7d:5a:ee:
2e:9f:e3:52:9b:52:db:54:00:4b:e0:82:ed:59:d3:81:72:67:
5c:8b:86:2f:90:ea:f3:ba:1c:a1:b0:97:cc:90:b6:1a:6b:41:
61:9f:28:06:8c:9f:93:19:ee:31:e0:b3:eb:48:23:d5:d1:da:
e0:ac:48:ec:7b:77:59:23:9e:75:33:7f:1b:f2:c3:8e:88:3d:
29:fe:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:27 2025 by rpki-client