Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/45oepcPp24ddD7U9F9fgcfRE2_A.roa
File: 45oepcPp24ddD7U9F9fgcfRE2_A.roa (raw, json)
Hash identifier: JFFqkItzCIGw3eiTO4eyZ8lxk2ns3Bweomn6UBCbaB0=
Subject key identifier: E3:9A:1E:A5:C3:E9:DB:87:5D:0F:B5:3D:17:D7:E0:71:F4:44:DB:F0
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 0194258F49BED18B782A5018D6786DF5D375
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/45oepcPp24ddD7U9F9fgcfRE2_A.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15542
IP address blocks: 2001:67c:2c24::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:49:be:d1:8b:78:2a:50:18:d6:78:6d:f5:d3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e39a1ea5c3e9db875d0fb53d17d7e071f444dbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a9:86:74:a0:85:71:59:3c:03:94:97:90:0c:
42:4c:05:81:c8:6f:92:a6:dd:53:69:a7:00:ff:d3:
fa:a3:b9:ff:ab:f6:98:65:4e:4f:e5:32:59:95:43:
81:08:f6:78:b6:01:c4:29:93:40:01:80:3e:7b:19:
b3:d7:82:f7:e8:ff:2c:37:9c:19:51:df:a2:44:96:
e1:57:a2:75:5c:23:c4:da:e4:d0:02:f3:5e:03:98:
81:f2:cd:9d:2a:59:e4:4a:98:4b:ff:82:83:b8:06:
e7:16:2f:2b:e2:c0:e8:8d:0c:78:a9:df:b5:b7:67:
fa:57:e3:b4:d7:26:90:f1:98:07:1e:b9:53:d7:a8:
cc:33:32:00:95:b4:f0:55:f7:d0:e8:80:99:7c:b8:
16:2e:88:30:39:29:47:12:79:7f:0b:c7:77:8f:f1:
2b:69:6c:39:36:1d:1d:bd:dd:cb:f2:0a:45:7f:4d:
37:9d:1b:23:3b:f7:39:07:6a:03:9a:2b:01:20:7c:
57:3f:3a:aa:ee:f1:6b:6e:ea:7e:a6:88:1b:82:84:
4f:92:bc:fb:d7:db:d1:3b:d1:80:50:41:e6:4b:16:
f0:0f:58:11:19:51:ce:d6:ab:be:1c:e6:50:48:1f:
c9:e8:20:a4:c7:b4:53:44:7a:0f:de:21:e2:8f:ef:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9A:1E:A5:C3:E9:DB:87:5D:0F:B5:3D:17:D7:E0:71:F4:44:DB:F0
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/45oepcPp24ddD7U9F9fgcfRE2_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c24::/48
Signature Algorithm: sha256WithRSAEncryption
4e:44:da:59:12:7e:76:a0:34:92:f3:45:7a:c8:1b:96:de:c7:
92:e9:ea:5a:3a:59:25:ac:13:b8:e2:ea:b3:f0:0b:1b:79:ae:
59:fd:0d:22:85:44:b1:73:10:db:be:0c:46:fb:91:d5:57:8b:
4e:1f:74:de:15:34:a6:f5:96:4f:cb:45:25:e2:54:2c:b6:f3:
36:fd:5f:1d:39:5e:63:42:c7:55:d0:4c:2a:e5:01:76:ac:5c:
d8:86:94:a8:83:c1:09:26:60:52:3e:ae:0b:a9:b5:57:04:e1:
4c:8f:69:cc:a5:27:e8:e2:a1:14:bc:6e:85:e7:7d:31:4f:f3:
03:5f:e9:c5:4f:59:c9:ec:5a:58:57:b5:a8:ad:f1:6a:cb:65:
57:54:76:12:bf:9a:ce:b9:37:8b:bc:6a:8e:8e:66:0d:1c:0c:
a5:de:f8:49:1a:c9:94:10:ef:ca:c7:62:63:5a:1f:8c:31:58:
9d:5e:ae:68:9d:77:45:c8:e0:92:e9:fe:c7:a8:9b:51:6c:ff:
16:49:2a:a6:9d:4d:5f:2b:9b:aa:fc:43:eb:16:ed:73:5c:ee:
2b:f7:10:f7:e2:82:8c:ed:18:b1:dc:8e:c0:3d:a8:1e:cf:00:
aa:0b:1a:32:10:40:bd:a5:54:17:43:ce:b4:f4:3f:bc:d4:61:
f3:9e:71:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:14:14 2025 by rpki-client