Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/eMzLxlc8jKdcG8FXSCxiqjg4bCw.roa
File: eMzLxlc8jKdcG8FXSCxiqjg4bCw.roa (raw, json)
Hash identifier: z5NubicU2ASNc6vzCkA6Macsv8S+3wauI5VrO96d5hI=
Subject key identifier: 78:CC:CB:C6:57:3C:8C:A7:5C:1B:C1:57:48:2C:62:AA:38:38:6C:2C
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01942369F8332EB2BB4F3C5AFFD8E9FF31E4
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/eMzLxlc8jKdcG8FXSCxiqjg4bCw.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 2a0f:7802:e000::/40 maxlen: 48
2a0f:7802:e100::/40 maxlen: 48
2a0f:7802:e200::/40 maxlen: 48
2a0f:7803:fb40::/44 maxlen: 48
2a0f:7803:ff90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f8:33:2e:b2:bb:4f:3c:5a:ff:d8:e9:ff:31:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78cccbc6573c8ca75c1bc157482c62aa38386c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:0e:9b:4c:c1:fa:da:e1:d1:6e:36:eb:84:
85:ff:cb:ab:66:9b:f9:09:47:bc:a9:6f:eb:a2:d1:
29:8c:85:a6:43:4f:00:e9:23:8c:79:b8:99:32:19:
e7:2d:c8:e3:44:e5:d6:ef:20:a8:53:de:d6:e5:fd:
b0:77:72:ce:0d:12:f8:e1:c4:06:8b:dd:ca:df:22:
78:f8:52:31:74:56:ab:e8:99:c6:82:c8:29:4a:3d:
c2:6e:7e:1c:68:31:d8:1a:5d:07:45:3d:a3:c4:b9:
a8:1d:44:97:97:b5:19:5c:ca:db:05:52:c0:47:a9:
0e:4b:c4:53:a0:60:b7:ff:75:19:64:e1:d8:90:f6:
ad:a6:3e:95:db:73:aa:8e:1c:9e:d7:80:14:f2:3e:
64:05:34:a2:36:32:09:a4:f8:ea:80:40:b6:54:9d:
52:28:7c:f9:b2:b9:80:46:78:4e:39:fb:c3:2b:08:
85:a7:a8:45:3e:39:28:70:3d:78:fe:85:c6:66:d1:
6f:de:22:70:a6:65:b7:0d:ed:07:ae:12:c7:b2:3c:
30:7a:40:d8:f0:c6:55:14:90:a6:40:4a:e5:df:8a:
bf:19:c9:4e:93:f2:a1:b6:b5:a7:73:89:c3:9a:78:
0f:bc:92:7b:36:f9:8d:52:d0:16:2e:f9:3e:5d:a5:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CC:CB:C6:57:3C:8C:A7:5C:1B:C1:57:48:2C:62:AA:38:38:6C:2C
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/eMzLxlc8jKdcG8FXSCxiqjg4bCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7802:e000::-2a0f:7802:e2ff:ffff:ffff:ffff:ffff:ffff
2a0f:7803:fb40::/44
2a0f:7803:ff90::/44
Signature Algorithm: sha256WithRSAEncryption
43:c5:41:7e:d4:56:78:0a:f2:51:03:a6:63:3d:76:ec:bd:8b:
f2:09:21:7d:59:43:4d:84:5c:e2:53:a7:e7:8b:21:82:b2:d5:
07:3f:47:73:25:53:ee:c7:92:79:cb:97:80:48:fa:8a:ec:03:
b4:f6:ff:1d:18:63:14:1a:d3:02:85:e4:ca:c0:fb:84:42:7e:
2e:3b:82:b4:17:29:17:6a:b9:fc:1d:61:cc:bb:2e:9b:97:7b:
6d:8c:17:b2:02:59:59:13:10:a4:92:26:41:fc:f6:2a:de:f8:
60:80:cc:9d:80:fa:3e:ce:bf:c7:31:07:b8:76:cf:38:be:1c:
d1:d1:c1:1d:c8:54:ea:ae:5c:5c:aa:d0:8f:26:cd:3f:39:d6:
19:6b:79:d7:ce:c7:ba:4d:7e:99:d9:20:76:d5:33:e0:b0:ae:
d5:9d:38:0e:d8:30:74:60:e0:df:db:b4:34:ed:e8:c8:ac:c3:
a0:11:39:43:00:d8:bc:27:da:29:1b:fe:01:3c:e1:9d:27:1d:
ca:67:49:04:70:31:ec:e5:b7:8b:d0:ab:17:25:83:67:a4:da:
f9:7f:1b:8f:70:c4:d4:31:62:94:6e:66:c4:51:b0:f5:f7:a5:
ce:59:44:8c:3c:6f:f3:f3:88:70:4b:62:3d:00:f9:b7:52:d1:
d5:22:dc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net