Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/EC6e_nP97zOF6HJiQSk5iGSRFrI.roa
File: EC6e_nP97zOF6HJiQSk5iGSRFrI.roa (raw, json)
Hash identifier: 7uj9fIk5Lc9MJRH2JKNIHSC4V2iMwtc2PNvQ59PnOzw=
Subject key identifier: 10:2E:9E:FE:73:FD:EF:33:85:E8:72:62:41:29:39:88:64:91:16:B2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 0193D92BC211713E420877AE76EE3507084F
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/EC6e_nP97zOF6HJiQSk5iGSRFrI.roa
Signing time: Wed 18 Dec 2024 09:49:03 +0000
ROA not before: Wed 18 Dec 2024 09:49:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12076
IP address blocks: 2a02:d21::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:2b:c2:11:71:3e:42:08:77:ae:76:ee:35:07:08:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: Dec 18 09:49:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=102e9efe73fdef3385e8726241293988649116b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:54:09:f6:05:f2:ff:0f:d0:d9:e8:52:3b:
0c:83:b9:aa:16:cd:66:4e:f4:11:8a:12:34:84:c3:
ee:6b:0d:0d:af:6c:31:61:b0:8d:1b:a9:4d:83:69:
38:f3:c8:9a:1e:f0:1b:8d:8a:da:d3:94:b8:5f:b8:
85:c3:d6:0f:e8:f4:d4:c2:72:1f:a1:43:23:fa:15:
93:89:5e:48:40:11:72:65:52:15:b3:0d:47:4b:d6:
db:10:72:19:7a:0b:93:16:98:00:e3:ee:ae:42:25:
3b:8b:0a:7c:a0:c0:b7:06:d4:64:a4:17:b1:e4:23:
2d:a3:58:d9:82:df:34:7a:f1:9c:65:00:a6:51:30:
76:15:7d:55:8a:d3:65:6f:b4:1f:2e:45:f0:46:19:
a1:97:0d:40:71:c0:91:16:07:00:d0:81:23:8e:21:
87:28:f9:f5:78:f6:45:6b:12:5f:8e:f6:03:76:9c:
6f:48:8b:1f:8b:65:de:9e:cc:0c:06:be:31:e3:ea:
6f:bf:f8:bd:1b:d9:4c:d2:dd:7f:f9:c4:31:d4:3c:
b7:d0:97:93:fc:98:59:d6:30:ad:e6:6f:c3:88:90:
70:bc:22:af:07:53:f0:19:66:d1:0d:a9:78:d3:c2:
da:df:4d:6e:20:91:bd:8d:e6:17:de:97:0e:cd:a2:
05:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:9E:FE:73:FD:EF:33:85:E8:72:62:41:29:39:88:64:91:16:B2
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/EC6e_nP97zOF6HJiQSk5iGSRFrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:d21::/36
Signature Algorithm: sha256WithRSAEncryption
e4:e9:c3:09:39:c0:b0:17:46:b8:06:65:c1:f8:29:50:a0:0d:
0a:76:2a:c1:e5:b8:69:9a:83:25:e4:8c:dd:a1:1c:c0:9b:32:
46:4a:bf:2a:3c:53:28:13:70:77:6e:6a:ee:67:e5:df:f8:47:
a3:ff:ac:74:82:68:a0:49:ef:8e:f1:f8:3e:d0:1f:ea:fa:c5:
5e:fd:6c:c6:93:86:cc:15:0c:46:41:8a:38:1c:89:89:c3:ea:
58:cc:12:90:50:4d:57:c9:29:53:ce:30:f1:69:74:d4:d4:53:
01:de:da:f2:89:b3:2b:ce:7c:89:fa:5d:de:24:97:73:55:8f:
26:6a:b3:40:ec:cf:46:bb:72:e6:2d:d0:fd:21:0b:8f:16:be:
2c:d7:40:57:40:06:60:b6:2c:7c:6b:41:57:d1:dd:aa:e7:88:
8e:bb:9f:2f:3e:f7:63:ad:86:81:09:26:5d:e0:54:64:05:66:
f4:22:5d:8b:14:1e:36:1a:c5:30:27:20:00:c2:16:09:7c:7c:
a1:08:8d:ee:c9:78:07:73:12:15:5a:ed:13:65:86:e8:32:8d:
58:dd:44:77:48:83:ab:c9:60:a1:1a:7e:86:86:02:58:5a:93:
b0:7a:64:aa:ec:b7:a0:9b:0f:af:8a:2f:2a:3e:ac:b7:78:a0:
bc:f7:da:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:44 2024 by rpki-client on console.sobornost.net