Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/EJhirdIUoLNzmOue7FES6MTfC-0.roa
File: EJhirdIUoLNzmOue7FES6MTfC-0.roa (raw, json)
Hash identifier: Xuw71OYfiNCPQrZen32SWEw0XBOhe82dHbmW00wdcjI=
Subject key identifier: 10:98:62:AD:D2:14:A0:B3:73:98:EB:9E:EC:51:12:E8:C4:DF:0B:ED
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B56F98D962ABA0A5F33D05E7F61401
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/EJhirdIUoLNzmOue7FES6MTfC-0.roa
Signing time: Thu 02 Jan 2025 15:49:49 +0000
ROA not before: Thu 02 Jan 2025 15:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2723
IP address blocks: 213.161.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6f:98:d9:62:ab:a0:a5:f3:3d:05:e7:f6:14:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=109862add214a0b37398eb9eec5112e8c4df0bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:a1:23:be:83:5b:58:ea:ab:c2:f6:0d:6b:
c4:c9:06:49:38:94:84:f8:03:27:98:19:cc:b0:14:
49:93:ac:ca:13:4c:13:ad:e4:59:c8:4a:43:b4:eb:
97:0d:01:fa:aa:d5:42:bb:5e:04:16:8c:67:23:2d:
bb:f0:5e:af:b1:d3:51:2b:23:85:07:f1:c0:72:41:
78:c1:61:44:4f:a6:b7:56:92:58:3b:77:b6:4b:95:
44:82:7c:da:db:d2:1e:86:9a:af:06:4e:b2:10:57:
b4:95:b6:91:49:c0:8d:bf:2b:c2:82:20:0c:5f:ab:
16:a0:20:59:cf:f1:0d:85:9d:3c:55:ee:4f:ac:20:
fd:b6:ec:fd:00:5c:45:f7:21:ba:07:f4:6e:be:f5:
8f:b5:83:7b:34:ea:3e:a7:43:12:4b:4d:df:fe:65:
4d:82:02:3e:9b:55:90:8b:9a:0a:a9:c2:fd:dd:d8:
d8:95:61:4e:31:95:08:0b:6e:25:f9:83:b1:0a:82:
f8:97:f5:df:7e:ec:38:ff:84:ee:10:47:b4:dd:b0:
bf:92:02:fe:37:a5:74:cc:67:0a:81:46:95:19:cf:
c7:f0:a7:04:05:55:5d:3e:c9:2d:b4:ab:59:b8:81:
d7:e5:33:20:01:20:be:5f:80:aa:0f:04:36:3f:93:
7b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:98:62:AD:D2:14:A0:B3:73:98:EB:9E:EC:51:12:E8:C4:DF:0B:ED
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/EJhirdIUoLNzmOue7FES6MTfC-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.161.82.0/24
Signature Algorithm: sha256WithRSAEncryption
85:6e:06:49:48:f1:55:de:09:8b:99:cc:e2:18:3d:93:d6:3e:
37:29:ca:ef:f4:29:4d:b2:b6:35:0f:05:18:0a:9a:f2:c0:57:
58:5c:af:3f:d6:9e:72:fe:03:9e:d1:37:39:48:25:ec:3a:58:
7a:ed:e2:3c:ed:eb:b0:07:b4:53:18:3e:9b:8d:85:72:91:5c:
c4:49:98:1a:00:d1:2d:f3:84:47:a6:a2:e8:ae:be:63:43:48:
05:20:09:96:08:63:40:7c:25:d0:78:d1:59:a0:8e:a2:20:0d:
1a:36:24:33:40:e6:dd:9c:48:e4:ea:ce:f3:44:06:29:7c:34:
9c:d6:85:c9:79:11:b2:04:d1:fc:db:0c:a9:66:32:4b:44:89:
f0:ef:17:39:ba:c7:7b:e3:a6:53:ca:6a:fb:c5:1f:08:b1:39:
73:50:42:2d:ce:92:f9:d6:b7:16:2d:49:54:85:00:f1:47:0c:
8c:39:53:5d:b0:f1:10:ae:ee:04:74:98:9d:0c:7d:00:22:47:
97:1a:cf:7f:ae:da:09:2d:65:3f:5e:ea:ae:00:b3:38:3b:6b:
1f:f9:3a:a5:4e:29:ad:60:b1:db:6b:db:a6:d5:31:39:f1:e9:
68:27:52:06:c7:1b:a5:f1:43:22:21:12:ff:93:8d:46:64:91:
a3:49:ff:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:30 2025 by rpki-client