Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/8LEaGJ2CuKxeHjxR7nj6ufV6Y7Y.roa
File: 8LEaGJ2CuKxeHjxR7nj6ufV6Y7Y.roa (raw, json)
Hash identifier: oPPydQy+Sv4ZpQjf6oDCm3YgcVIg/Za6wdL618vPB84=
Subject key identifier: F0:B1:1A:18:9D:82:B8:AC:5E:1E:3C:51:EE:78:FA:B9:F5:7A:63:B6
Certificate issuer: /CN=e738a5f93064239ab4ff793df8a879e1baa8e1c7
Certificate serial: 019427B5737CD06643DF42B5ACBC56D60CFC
Authority key identifier: E7:38:A5:F9:30:64:23:9A:B4:FF:79:3D:F8:A8:79:E1:BA:A8:E1:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/8LEaGJ2CuKxeHjxR7nj6ufV6Y7Y.roa
Signing time: Thu 02 Jan 2025 15:49:50 +0000
ROA not before: Thu 02 Jan 2025 15:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212596
IP address blocks: 2001:678:e60::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:73:7c:d0:66:43:df:42:b5:ac:bc:56:d6:0c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e738a5f93064239ab4ff793df8a879e1baa8e1c7
Validity
Not Before: Jan 2 15:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0b11a189d82b8ac5e1e3c51ee78fab9f57a63b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:76:8a:d3:c4:33:b0:70:1d:3d:2d:9c:82:
20:17:af:e4:89:f4:64:cf:0b:c8:d9:f0:0a:cd:d8:
66:30:0f:45:bc:f9:41:d0:1b:ce:51:01:c7:cc:91:
c3:69:5a:4a:36:45:99:7c:f4:39:99:d6:5e:95:ae:
61:cc:fc:07:de:2b:5f:1b:95:ec:6d:bd:03:3b:55:
9a:48:98:a2:d3:2d:e7:e5:a8:4c:15:42:97:70:9c:
ac:0b:71:2c:65:68:a6:51:a9:52:1e:58:48:4f:f5:
1a:05:4e:9c:70:9c:1f:3f:b1:75:68:c1:f2:b0:1f:
d8:86:ae:72:68:78:bf:77:43:1e:c4:9c:db:4e:bd:
e6:13:b2:d7:a0:e3:18:e8:ae:17:c3:d2:53:1c:49:
f4:14:2b:94:33:e8:4f:b6:4d:0e:c0:ce:d2:76:b6:
11:90:71:03:78:37:e2:17:52:ea:f2:92:a4:96:b3:
27:03:95:78:17:52:69:73:e8:e4:f7:06:ad:1d:b5:
df:bd:00:33:87:1d:70:7b:3b:a4:4c:6b:94:d5:8b:
9f:dc:5e:ec:97:46:11:d8:0e:53:b1:9f:24:52:6d:
2c:1e:50:11:62:93:36:6c:bd:03:ec:96:6e:30:54:
dd:13:7d:57:45:fe:aa:e8:e6:19:44:8a:1a:1b:0c:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B1:1A:18:9D:82:B8:AC:5E:1E:3C:51:EE:78:FA:B9:F5:7A:63:B6
X509v3 Authority Key Identifier:
keyid:E7:38:A5:F9:30:64:23:9A:B4:FF:79:3D:F8:A8:79:E1:BA:A8:E1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zil-TBkI5q0_3k9-Kh54bqo4cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/8LEaGJ2CuKxeHjxR7nj6ufV6Y7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e76701-9873-4fe0-9b71-f89bcff6959f/1/5zil-TBkI5q0_3k9-Kh54bqo4cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e60::/48
Signature Algorithm: sha256WithRSAEncryption
3a:cf:f2:e5:69:9f:21:06:16:63:af:86:32:68:dd:14:f7:f9:
0a:30:60:67:d3:5b:c5:3a:1d:5c:1e:d0:b4:9f:ce:d2:fc:e8:
20:86:07:54:44:07:00:73:7f:49:96:30:c7:28:63:35:1e:aa:
34:1d:54:38:f7:b5:57:04:70:e7:11:22:f4:a4:82:7b:dd:f7:
84:fb:54:67:ab:07:ba:b0:2e:9f:34:23:a2:12:07:00:1b:58:
e4:c5:6a:bc:2d:0a:d9:8a:5c:12:7a:1f:10:8a:2e:26:71:ee:
6d:d3:c3:81:77:e1:f3:53:42:fe:f8:5c:86:71:85:3c:69:9d:
60:65:5f:80:69:c7:cc:57:d0:d9:1b:0a:a7:63:ec:5a:45:cb:
2f:fb:52:64:9e:33:d5:b2:44:7f:f3:fc:a6:a2:5f:17:a7:94:
8d:b7:08:9c:a1:f9:fb:c3:75:ec:65:cb:64:e5:95:cb:f7:04:
c2:96:a1:3a:71:05:ae:06:53:73:df:36:12:42:a2:7c:4c:86:
30:23:66:b6:d3:68:96:4c:9d:7e:30:9d:24:bf:09:ed:c8:89:
0a:04:bb:9f:35:ee:ea:84:14:9a:f5:52:24:b4:57:20:28:49:
af:e4:5b:8d:db:fe:bc:52:de:f6:bd:ea:0d:03:3c:74:9e:14:
89:c4:c8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:48 2025 by rpki-client