Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/Eja8uROuzIbK3iaci49r3-WhTxE.roa
File: Eja8uROuzIbK3iaci49r3-WhTxE.roa (raw, json)
Hash identifier: ZAVnNyA2dIyWXYHRVd60vJEBGOSH2/TqvMkOURX86Bo=
Subject key identifier: 12:36:BC:B9:13:AE:CC:86:CA:DE:26:9C:8B:8F:6B:DF:E5:A1:4F:11
Certificate issuer: /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial: 01942368E34C7BC0087598B4C528A081DE6E
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/Eja8uROuzIbK3iaci49r3-WhTxE.roa
Signing time: Wed 01 Jan 2025 19:47:43 +0000
ROA not before: Wed 01 Jan 2025 19:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 2a14:2340::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:e3:4c:7b:c0:08:75:98:b4:c5:28:a0:81:de:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Validity
Not Before: Jan 1 19:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1236bcb913aecc86cade269c8b8f6bdfe5a14f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:b4:ef:9f:a2:dd:4b:ba:04:a5:39:b2:76:
f5:08:a8:ff:a9:1d:ae:3a:f6:24:65:4c:2b:5c:bb:
d3:b6:d7:65:bc:ba:c9:9c:39:dd:cc:1f:05:9d:e2:
57:e8:30:6d:a3:be:0f:22:9a:a4:e5:07:e9:22:1e:
f2:38:16:9c:f4:33:15:ea:f8:45:e1:fe:b2:29:94:
65:73:b4:f4:48:f3:1e:08:eb:0d:43:55:9b:c8:fb:
a9:16:a3:7a:28:c6:f7:cb:fa:40:9e:48:41:f4:12:
98:80:f0:8a:5c:27:97:4f:6c:4c:eb:7f:1a:4a:93:
9d:21:69:0e:3e:a8:0c:b9:6a:45:74:d9:04:eb:28:
86:a2:11:a6:0b:19:1b:7a:d5:fe:ab:20:0c:c8:35:
46:e8:cb:6f:d7:a8:98:bf:77:94:64:3d:f9:cf:b5:
be:53:8c:63:25:f7:4c:52:77:e0:39:dd:28:02:e8:
c2:a2:f9:e6:34:52:63:d8:8b:19:52:32:e7:29:bc:
09:0c:c1:aa:ee:29:e1:59:78:34:1b:ab:bc:52:53:
35:05:ef:da:8e:5f:50:0f:f1:58:83:95:a4:0a:cb:
a2:39:5d:5a:b6:4f:7e:ba:24:90:ac:a4:6a:77:e6:
b6:4c:dd:ab:bc:93:cb:6a:a4:cb:dd:40:4e:06:a4:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:36:BC:B9:13:AE:CC:86:CA:DE:26:9C:8B:8F:6B:DF:E5:A1:4F:11
X509v3 Authority Key Identifier:
keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/Eja8uROuzIbK3iaci49r3-WhTxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2340::/48
Signature Algorithm: sha256WithRSAEncryption
31:e7:dd:bc:89:db:bf:6a:33:1f:b9:97:b4:0b:99:2f:c1:a9:
ae:4d:3a:50:dc:37:c4:aa:b0:41:9d:38:9b:21:52:19:02:9e:
79:20:61:09:3e:2a:c9:bc:5a:c5:1c:8b:a1:82:d7:dc:86:69:
28:92:9a:36:7f:4d:32:c6:5f:1a:12:42:d7:7f:0c:dd:b0:80:
4e:63:fb:2b:02:cf:92:08:50:cf:b2:19:69:d2:7f:17:51:de:
b9:0f:b7:8d:65:ae:58:a1:e8:39:1d:fc:76:40:c0:39:6e:c4:
22:08:9a:3e:c5:06:54:93:c6:bf:dc:dd:c0:35:e8:40:14:2c:
e6:aa:62:70:7a:f9:e0:7e:8c:93:91:0c:24:44:9d:6c:5a:26:
20:11:db:fc:34:a3:c9:fc:13:67:69:bc:1e:3a:04:4c:91:9d:
08:6d:c2:46:b0:1b:fe:35:f9:d7:af:f1:21:77:a2:1b:68:bd:
3b:72:a5:6f:75:c7:d0:92:f9:39:58:e2:1f:1e:0f:e3:b1:b6:
52:3c:bf:e6:b6:23:a2:ce:c9:11:e6:28:1c:45:0e:5b:ff:9a:
30:fb:62:e0:29:67:26:d5:17:c9:40:8b:3a:12:c4:13:4c:b1:
1d:97:d9:fc:00:d0:62:32:ae:7f:59:cb:9f:c8:f0:79:a9:e8:
cc:a0:22:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:13:04 2025 by rpki-client