Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/EwIzZdJ1IhMaFw8VKQftgylzjgE.roa
File: EwIzZdJ1IhMaFw8VKQftgylzjgE.roa (raw, json)
Hash identifier: TssNiQ/Zpv1pzvYDHFFLNu5wfEVQ4u0fKOIDHY91aqk=
Subject key identifier: 13:02:33:65:D2:75:22:13:1A:17:0F:15:29:07:ED:83:29:73:8E:01
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 0194221FF7F25ABDCE7D1F81247224201D58
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/EwIzZdJ1IhMaFw8VKQftgylzjgE.roa
Signing time: Wed 01 Jan 2025 13:48:27 +0000
ROA not before: Wed 01 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196858
IP address blocks: 213.227.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f7:f2:5a:bd:ce:7d:1f:81:24:72:24:20:1d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Jan 1 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13023365d27522131a170f152907ed8329738e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c8:50:ae:bc:ed:32:5d:8a:3d:17:5b:ef:07:
ef:35:bc:84:ba:36:06:98:69:01:7f:b3:a0:70:67:
bb:da:87:78:fb:72:fe:b9:54:a2:ce:d2:5f:de:50:
b0:d5:81:63:cc:92:0c:2c:56:99:b2:fc:75:ac:59:
a2:a2:7b:d7:2a:16:f8:e0:3d:ab:cc:24:7b:49:7b:
45:b0:7b:8b:4c:65:f4:8d:21:de:5c:a7:15:40:fb:
d9:73:23:08:f3:af:83:80:5f:11:04:6a:44:b7:1d:
2f:cf:6f:74:88:65:d4:4d:55:59:b9:8e:7d:a9:b0:
26:63:21:e5:88:a0:05:4c:a1:63:85:9d:58:b2:61:
ac:b3:51:5f:27:7c:21:3b:f0:6e:cd:7d:97:36:4d:
68:5b:c4:c6:a3:9b:8e:de:f5:eb:ab:26:3e:4b:79:
38:50:97:2b:be:e8:65:27:e8:87:c8:5f:8e:ad:1b:
6e:6c:61:79:79:27:51:1a:ef:67:01:b9:db:0f:98:
2c:10:e2:2b:ea:25:1a:72:62:84:2a:d7:70:17:ff:
d6:19:4c:5f:85:f4:77:d9:df:a0:b6:51:6e:cf:04:
16:f4:2a:5d:65:87:6d:c1:01:9d:f9:ce:6d:71:7c:
3c:eb:4c:c5:a7:c7:f2:f5:42:e3:08:93:c1:cc:84:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:02:33:65:D2:75:22:13:1A:17:0F:15:29:07:ED:83:29:73:8E:01
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/EwIzZdJ1IhMaFw8VKQftgylzjgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.227.66.0/23
Signature Algorithm: sha256WithRSAEncryption
59:6f:f4:da:41:10:7e:6e:bd:b6:87:d3:31:0e:62:f8:cf:65:
24:39:96:6c:25:53:f7:67:18:3b:8b:8d:30:8d:9e:5b:b2:2b:
94:77:36:20:2f:5c:fd:67:41:78:2b:d9:36:7c:bf:a5:c5:d4:
5f:dd:e3:98:03:e2:11:cf:82:c7:e4:58:81:52:f4:e2:e4:cd:
a2:ca:1b:0b:cf:f4:c4:65:a3:bc:dc:65:4b:e5:26:f5:d3:b4:
2f:3c:b9:16:8b:d5:59:94:27:88:fb:4a:bd:2d:d9:04:ad:05:
98:5f:80:e7:09:43:2e:e5:44:91:ee:9d:49:b0:0b:0c:0a:86:
6c:7d:6d:b1:bd:e9:e4:6d:a5:f8:27:de:6e:db:14:08:6b:35:
f7:99:ce:41:92:42:76:aa:a6:c1:02:96:16:c8:50:ad:2b:35:
83:68:3e:80:06:91:f4:cd:26:95:cb:db:e9:da:03:fc:55:c9:
77:c7:e9:32:2e:fa:13:de:64:9f:82:55:80:3a:57:7c:61:41:
7f:ad:0d:73:bc:23:3c:94:a2:06:12:22:47:81:b6:f6:66:f6:
2c:14:3f:0a:42:14:83:6f:77:23:a2:d8:19:48:6f:df:70:2d:
0d:e2:e3:94:5e:ad:28:ba:39:12:6a:8b:dd:75:04:25:3e:b9:
7d:c3:9e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:12:31 2025 by rpki-client