Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/EVhtzzYjK-7A1-FFXkSZygpmCzs.roa
File: EVhtzzYjK-7A1-FFXkSZygpmCzs.roa (raw, json)
Hash identifier: donTZTGqv/27HvndsP4MHOdeXIlkLJEwHJlrZ1dm4VI=
Subject key identifier: 11:58:6D:CF:36:23:2B:EE:C0:D7:E1:45:5E:44:99:CA:0A:66:0B:3B
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 01941F8C20AACCCA9C8233E9177D01C801D9
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/EVhtzzYjK-7A1-FFXkSZygpmCzs.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214171
IP address blocks: 5.22.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:20:aa:cc:ca:9c:82:33:e9:17:7d:01:c8:01:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11586dcf36232beec0d7e1455e4499ca0a660b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:47:39:14:c2:0e:d2:a5:78:a1:af:04:33:
db:4d:e7:a0:f0:ea:93:60:db:52:05:5a:10:c8:93:
04:e2:0d:5e:2a:0b:2c:77:cb:88:39:c3:13:ba:f3:
b0:4a:bd:4f:06:7f:f7:f7:ee:db:0d:bb:5c:ec:37:
b8:1b:96:33:d7:5a:1f:3e:8f:96:15:b4:81:f4:b8:
2b:fe:64:f6:5a:49:ce:ae:38:05:37:26:84:91:bb:
45:a7:13:af:2f:11:85:30:77:d9:0b:a0:8e:65:27:
51:b2:2a:b3:3d:b1:cb:7a:64:67:48:e6:67:5a:fd:
d0:04:5c:8f:28:c3:57:27:54:5b:59:49:c6:12:fb:
16:c8:82:66:17:6f:14:85:11:df:67:c1:1d:b7:4d:
3e:05:6b:4d:af:07:06:36:e7:fd:22:6c:da:ab:ad:
61:d2:1c:4b:62:ff:1c:f1:fa:3b:d8:ce:78:28:d2:
92:5a:6e:f5:60:11:a0:05:6d:7e:42:e4:f4:cc:c5:
35:d5:cf:a9:3f:ff:02:43:68:20:06:21:b5:67:ef:
dc:cb:4a:57:50:b6:b9:88:ae:d8:56:6d:7b:3f:00:
85:0a:a3:b7:a3:a0:a1:05:8e:34:ee:3d:00:d3:56:
ca:1e:ee:48:a8:a2:a0:7d:81:89:40:f2:7a:f8:47:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:58:6D:CF:36:23:2B:EE:C0:D7:E1:45:5E:44:99:CA:0A:66:0B:3B
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/EVhtzzYjK-7A1-FFXkSZygpmCzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.203.0/24
Signature Algorithm: sha256WithRSAEncryption
69:da:a3:94:c3:d0:c4:58:19:9c:36:bc:54:08:b3:60:55:07:
ca:d2:45:5d:7d:51:6c:de:08:63:fa:c8:4a:30:8b:28:13:61:
8b:fe:c9:fc:b0:e3:e8:b9:51:5b:06:f8:65:be:b2:47:8f:01:
17:7c:14:b8:7e:51:19:f6:5a:d3:af:8c:f1:ae:5a:6e:28:3c:
d6:63:27:b2:30:91:c8:74:23:8a:e6:11:37:bc:9c:55:59:16:
4d:14:5d:b7:65:c3:fd:ac:58:ae:77:60:d9:5f:ea:23:82:d0:
c8:a9:e7:23:b5:b3:6f:45:9e:7a:88:ec:ec:26:7c:14:dc:38:
48:ae:d4:01:c5:6e:cb:78:ed:24:d0:6c:bc:ee:85:81:4a:9e:
ba:c1:09:50:13:a0:d6:ba:c4:ca:0e:3e:87:79:82:da:92:ab:
06:ba:1f:bb:8b:b6:d5:dc:6b:6e:cf:ad:dd:32:65:f7:fc:24:
6c:c4:12:c9:92:75:f1:5d:6a:d0:49:fb:bf:5f:62:1c:d9:1a:
9a:b4:b1:85:b5:a4:55:fb:5f:c0:13:b2:38:57:01:ba:26:e7:
10:b0:78:52:9c:77:95:52:c1:44:c9:30:f1:85:97:5f:a4:59:
b2:35:03:fb:99:e7:34:b5:44:bc:69:9b:e7:70:e7:3b:ec:17:
a8:0a:99:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:15 2025 by rpki-client