Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/eNFG-PCCE4y-AFcmWiHx3RyG7nQ.roa
File: eNFG-PCCE4y-AFcmWiHx3RyG7nQ.roa (raw, json)
Hash identifier: UjvYsBltNXDFlhfaOzku1vtdcH3iWC+A6hFXawcbjCc=
Subject key identifier: 78:D1:46:F8:F0:82:13:8C:BE:00:57:26:5A:21:F1:DD:1C:86:EE:74
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 019426D9560DF2C8C0B9A406F744D57A9CF9
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/eNFG-PCCE4y-AFcmWiHx3RyG7nQ.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9166
IP address blocks: 62.233.0.0/20 maxlen: 24
212.113.64.0/19 maxlen: 24
2a02:2398::/29 maxlen: 48
2a02:239c:0:20::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:56:0d:f2:c8:c0:b9:a4:06:f7:44:d5:7a:9c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d146f8f082138cbe0057265a21f1dd1c86ee74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:8a:35:ef:08:b0:0b:71:f8:60:7a:9e:b3:
e5:80:59:2d:72:1e:1f:b1:d5:1e:5a:0d:69:87:24:
40:d2:8d:09:45:07:b4:d2:f9:55:ef:c2:a9:1b:9b:
bc:fb:88:a2:a7:b0:db:da:5c:1b:eb:39:b0:43:79:
c1:4f:82:22:2b:fb:c5:8a:6d:66:00:0a:bf:6a:ae:
82:dc:6c:1e:09:f6:04:70:84:ac:94:e6:b5:da:20:
f0:09:0b:3d:3b:09:28:3f:de:44:20:5f:1a:ac:35:
85:dd:e2:50:e2:be:b8:95:f6:ad:1d:c9:bb:30:c1:
d9:fa:8a:ae:b8:e8:6a:47:f9:75:80:25:5d:42:24:
a4:b9:0d:80:92:46:c1:18:2f:6b:9e:cb:04:d7:48:
80:c3:90:6a:3b:5e:89:44:01:40:71:99:e6:40:0c:
be:ea:67:15:94:e7:97:9c:f6:18:bf:70:e7:e7:30:
b7:26:f7:fc:57:fe:a6:e3:57:9d:2e:cc:d6:29:03:
f1:69:a4:6a:f9:fa:3d:3c:e8:66:67:86:a2:a5:e8:
60:1e:6d:5b:07:32:a0:d2:b7:06:46:50:3a:7c:8d:
27:61:2d:d3:6f:67:8d:85:80:2b:b3:b6:6a:b0:d9:
82:6b:18:05:98:c6:72:e4:ae:ae:a2:de:82:8c:98:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D1:46:F8:F0:82:13:8C:BE:00:57:26:5A:21:F1:DD:1C:86:EE:74
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/eNFG-PCCE4y-AFcmWiHx3RyG7nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.0.0/20
212.113.64.0/19
IPv6:
2a02:2398::/29
Signature Algorithm: sha256WithRSAEncryption
4a:9c:e6:af:3a:fa:84:16:94:0d:13:2c:84:1d:3c:c9:9c:e7:
32:b0:b4:27:75:e0:d7:b8:8d:85:a7:26:38:07:ae:93:ec:19:
c7:4c:3f:b1:db:1c:3c:30:6d:15:c3:f9:61:a2:da:8d:c9:14:
22:78:2a:e6:d1:cb:8e:b8:f2:be:de:43:ca:ef:28:ae:1c:5d:
7e:c1:60:24:b5:db:31:28:21:9b:96:4b:69:bd:9f:e7:c4:77:
35:83:a5:31:a5:be:46:c0:26:dd:ac:b7:c7:df:66:a1:90:d7:
0e:03:13:04:61:f4:a2:51:e5:6c:17:0b:af:55:52:31:f5:1e:
2e:30:4b:48:5c:9f:2b:04:aa:26:f4:2c:92:8d:57:4f:76:27:
83:f2:56:d8:d3:6b:52:ff:6b:19:2c:d6:39:b0:00:2e:97:d5:
31:40:56:9c:51:b4:0c:a7:0c:a4:c1:7f:3d:73:0f:a5:d2:33:
a4:25:3f:d2:12:31:b3:0b:5b:ee:a8:57:56:07:30:b2:c9:a0:
0b:57:d6:e0:66:3b:37:4c:64:0f:bc:47:4d:31:ff:28:e1:ff:
2b:dc:6b:b9:15:9e:a7:ce:bf:cf:be:56:97:e3:31:24:c4:0e:
02:d5:24:5b:db:12:9a:6e:f0:1a:5c:0e:16:61:ef:e9:22:4a:
88:46:e9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:24 2025 by rpki-client