Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/6uJNPiwoYxi9hNKAg19flx6Z-JE.roa
File: 6uJNPiwoYxi9hNKAg19flx6Z-JE.roa (raw, json)
Hash identifier: eV4dHdagpEFZTfHws57gt6hHOl3AWXnI4Iwf4CeoZiI=
Subject key identifier: EA:E2:4D:3E:2C:28:63:18:BD:84:D2:80:83:5F:5F:97:1E:99:F8:91
Certificate issuer: /CN=ee720dfe6719724e230102e3425c6c2df247d879
Certificate serial: 01966C2E09E0898FBC1B3CD0A4431376EA04
Authority key identifier: EE:72:0D:FE:67:19:72:4E:23:01:02:E3:42:5C:6C:2D:F2:47:D8:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nIN_mcZck4jAQLjQlxsLfJH2Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/6uJNPiwoYxi9hNKAg19flx6Z-JE.roa
Signing time: Fri 25 Apr 2025 09:01:18 +0000
ROA not before: Fri 25 Apr 2025 09:01:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201214
IP address blocks: 2a03:66a0::/32 maxlen: 48
2a03:66a0:1000::/48 maxlen: 48
2a03:66a0:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:2e:09:e0:89:8f:bc:1b:3c:d0:a4:43:13:76:ea:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee720dfe6719724e230102e3425c6c2df247d879
Validity
Not Before: Apr 25 09:01:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eae24d3e2c286318bd84d280835f5f971e99f891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:bd:cc:17:59:ab:27:91:ad:4c:8c:5c:29:
66:64:42:14:42:f2:84:fc:6f:88:58:52:ce:e0:cb:
1a:2b:3b:ff:bb:71:41:08:16:60:da:8b:84:53:34:
ec:0f:d3:0c:f3:32:46:a4:a3:d7:5c:6f:5b:6a:03:
b6:d8:81:2e:27:14:3b:90:17:3f:86:31:6b:f2:62:
a9:23:46:69:0d:69:1a:29:27:86:c8:1b:4c:1b:5f:
d6:dc:56:6b:c3:b9:60:7c:d8:fb:e0:f4:8d:53:73:
6f:4c:ff:6b:86:c5:72:8e:9a:76:8e:bf:ca:be:71:
5f:e3:70:5b:4e:58:a8:92:dc:65:59:88:71:0e:c2:
83:de:54:14:51:e5:48:71:98:a4:bd:77:99:45:32:
bf:4c:61:70:c0:b6:a8:f9:6d:22:34:d5:31:e2:0a:
55:94:07:9c:fd:b7:75:2c:b9:a8:79:79:cb:8a:7b:
a4:d2:d1:2c:d5:84:fa:c0:d1:57:bf:c8:d1:f1:24:
0d:32:1f:4d:4a:85:4c:27:b6:83:26:11:d5:01:dd:
6e:e0:c6:59:1b:59:ed:9b:c4:45:24:26:c2:05:f7:
d8:fb:2f:45:11:60:31:c6:41:76:b8:a8:4a:13:e9:
67:5d:4c:47:21:ef:d2:18:1a:69:f3:c5:79:d7:7e:
27:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E2:4D:3E:2C:28:63:18:BD:84:D2:80:83:5F:5F:97:1E:99:F8:91
X509v3 Authority Key Identifier:
keyid:EE:72:0D:FE:67:19:72:4E:23:01:02:E3:42:5C:6C:2D:F2:47:D8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nIN_mcZck4jAQLjQlxsLfJH2Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/6uJNPiwoYxi9hNKAg19flx6Z-JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/7nIN_mcZck4jAQLjQlxsLfJH2Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:66a0::/32
Signature Algorithm: sha256WithRSAEncryption
0e:13:da:92:2e:0f:40:f6:16:cc:4b:11:63:33:5d:e5:18:19:
72:06:b4:d7:f4:72:44:09:1e:a4:b1:1e:f8:47:73:51:ce:08:
5a:df:60:b5:21:33:09:b3:4b:ed:81:d2:db:44:67:4e:b4:62:
da:c5:7e:e2:3a:a9:db:05:0b:79:22:ce:31:07:ea:95:43:f1:
24:22:23:f8:7a:74:b0:d8:06:f1:38:3e:a9:6d:50:a4:de:f2:
cb:b3:bb:73:9b:08:0d:7c:d6:ca:ed:30:f1:c0:4e:2f:86:c8:
f2:f1:1c:01:96:52:f8:c5:e5:16:40:f4:51:b0:5d:99:ac:66:
b7:3c:a1:f0:9a:2e:41:25:64:e8:6f:2c:5b:e0:1c:21:7f:92:
70:c5:ee:df:8e:d6:99:e1:c4:2f:30:a7:2e:fa:fd:82:0d:19:
06:6b:79:e4:52:c9:e5:ce:46:6a:3f:95:68:78:63:0a:e3:5e:
22:50:87:c9:e0:94:e5:ba:1d:18:14:4e:d4:a7:1c:a7:fb:a1:
7d:8d:ae:fe:90:18:97:32:0b:33:94:69:4d:51:04:33:04:64:
12:75:d8:e2:7f:e8:52:2b:fd:c1:fb:52:53:3f:9b:6b:d7:a5:
d0:3e:79:6a:11:02:36:28:93:6c:28:f4:5b:23:78:e4:f1:d6:
fc:8b:fb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:08:27 2025 by rpki-client