Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/EgLx-bJTyjARWh9uBb0Oz6YkNAU.roa
File: EgLx-bJTyjARWh9uBb0Oz6YkNAU.roa (raw, json)
Hash identifier: QbL76kYlS2nG07IPmQx5Ni9UzpTzyRxGW+6xwmf2ouk=
Subject key identifier: 12:02:F1:F9:B2:53:CA:30:11:5A:1F:6E:05:BD:0E:CF:A6:24:34:05
Certificate issuer: /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial: 01939DFB741C17B22E1BA7ECC2004856C25E
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/EgLx-bJTyjARWh9uBb0Oz6YkNAU.roa
Signing time: Fri 06 Dec 2024 21:58:42 +0000
ROA not before: Fri 06 Dec 2024 21:58:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215568
IP address blocks: 2a01:f240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9d:fb:74:1c:17:b2:2e:1b:a7:ec:c2:00:48:56:c2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Validity
Not Before: Dec 6 21:58:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1202f1f9b253ca30115a1f6e05bd0ecfa6243405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:83:10:85:ab:ef:5c:52:69:34:15:05:36:
90:87:4d:55:da:f6:2a:b4:17:e1:de:ae:9f:fc:32:
62:88:62:cb:9e:c3:57:e5:11:df:13:ec:6a:ab:2a:
ab:ac:fa:3c:83:a4:79:c2:04:60:f3:6b:c8:ff:a7:
1d:d6:9b:b1:bd:8c:f1:a7:2f:7e:b8:28:8e:8d:9b:
ac:f3:8f:ed:d0:d1:d2:a0:c8:bf:e0:b5:24:b4:e9:
7e:bf:5b:cd:0c:96:0d:ef:1e:b8:93:2d:9f:7b:58:
bc:50:dc:67:6e:25:93:98:df:fe:a7:67:a6:9e:f1:
dd:58:18:ba:39:73:24:86:cc:37:87:6b:a8:82:54:
59:57:c4:18:57:1c:45:10:26:15:7a:87:f4:52:c8:
19:1f:7f:f6:6c:56:fa:6d:1f:15:7e:fa:65:52:c8:
5d:af:00:a5:8f:65:2d:68:df:c9:1c:8b:c6:c7:7a:
79:31:c0:4d:8b:ad:90:a7:d1:9e:6b:59:62:b2:21:
0f:97:ab:02:94:e2:58:26:3a:27:6a:c1:5d:6a:cc:
b5:91:9b:bf:80:b2:87:84:89:23:60:8d:1e:83:e7:
9d:b4:1a:22:e2:3e:0c:0a:07:41:5d:64:66:dc:d6:
53:b9:6b:fa:d4:b0:13:33:35:2f:f0:d0:ad:e9:d0:
32:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:02:F1:F9:B2:53:CA:30:11:5A:1F:6E:05:BD:0E:CF:A6:24:34:05
X509v3 Authority Key Identifier:
keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/EgLx-bJTyjARWh9uBb0Oz6YkNAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f240::/29
Signature Algorithm: sha256WithRSAEncryption
8a:e3:42:ac:ee:75:ec:a1:ac:ba:a7:bc:e5:df:19:c2:2e:a2:
69:ae:44:02:60:c6:e3:3a:04:a5:2e:bc:3b:88:3a:6d:85:4b:
eb:66:87:38:b4:fc:b8:9f:23:e1:9a:a3:7d:b8:de:c8:22:de:
9b:15:fb:13:f6:d9:4f:44:40:c7:0c:7e:5b:4b:74:f5:84:c6:
c0:79:5e:93:5d:6b:d5:a5:3d:c7:45:ec:d1:63:0f:01:80:5f:
ed:8f:6c:6b:2f:b5:0b:e2:39:8d:d9:a5:81:99:ea:ec:8b:cb:
c2:a1:50:75:e3:db:d2:c0:2f:15:43:56:c1:b2:54:c4:f0:95:
b5:5b:0d:55:ae:88:14:27:19:46:ad:8a:43:1f:8c:11:18:1a:
de:33:96:dd:35:a5:5b:cb:0c:06:f4:4d:14:7d:07:12:ad:9c:
31:14:7c:5d:ce:b6:1f:c8:db:1c:81:fb:56:c5:ef:66:bb:c2:
1e:75:d3:b9:08:da:19:55:2f:fd:75:4c:cb:8d:21:66:55:05:
bc:ef:31:c9:04:84:b0:22:a9:d4:f6:a0:3a:e6:c2:d0:5e:53:
3f:06:b8:12:f3:5d:06:82:16:6c:36:79:cf:4e:c4:08:fd:c0:
f0:5d:ad:3f:22:9d:70:a3:43:89:ed:0b:79:c0:25:10:c7:35:
f5:5c:a2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:21 2024 by rpki-client on console.sobornost.net