Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/egERklG4JDoNVaiZcO7pQtm8HwI.roa
File: egERklG4JDoNVaiZcO7pQtm8HwI.roa (raw, json)
Hash identifier: UCPCOxDDKaXVSI1SbOM7CcRIC7mRuotxlKVUCRUv8VQ=
Subject key identifier: 7A:01:11:92:51:B8:24:3A:0D:55:A8:99:70:EE:E9:42:D9:BC:1F:02
Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial: 019423D7D356CAB46B437267AAB6AB2EE5D0
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/egERklG4JDoNVaiZcO7pQtm8HwI.roa
Signing time: Wed 01 Jan 2025 21:48:54 +0000
ROA not before: Wed 01 Jan 2025 21:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 553
IP address blocks: 141.47.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d3:56:ca:b4:6b:43:72:67:aa:b6:ab:2e:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Validity
Not Before: Jan 1 21:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a01119251b8243a0d55a89970eee942d9bc1f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:60:d1:95:c4:9f:ad:1f:8f:fc:1d:da:fa:a1:
6b:ba:3b:7d:fe:c5:83:00:cd:2f:cc:62:ea:01:25:
89:e9:22:6a:4a:13:64:38:92:bf:cf:93:f0:37:86:
f2:cf:1d:b8:69:45:f6:93:f0:4a:a6:fe:0c:b5:2c:
07:45:7c:7e:eb:84:83:5d:b4:0a:81:3b:d0:2f:54:
cb:ce:b1:d5:5c:a7:d0:3c:15:e1:a0:cb:99:82:b6:
e3:01:3d:ac:93:4a:6a:e3:13:43:50:51:2d:3e:24:
b4:2f:1e:0f:93:76:e3:d2:f4:f1:cb:2a:57:d5:eb:
94:bf:af:06:65:a8:5a:7d:cd:8e:9e:67:4b:65:f4:
53:d0:aa:59:7e:82:9b:fe:e9:af:55:9a:32:ac:25:
0c:98:37:02:5c:3a:01:5a:b0:57:0e:28:ae:61:ea:
5e:ea:02:d1:4c:b8:41:cf:41:59:5a:8c:a0:32:e1:
e2:06:da:fe:31:00:d9:c2:bb:40:88:87:26:7b:ff:
e2:46:df:2a:cb:57:8f:38:31:61:24:ae:85:a7:7b:
7c:0e:3b:60:75:31:6d:63:fa:32:f7:d1:10:47:b7:
0e:33:c2:7b:23:9b:6f:e7:e8:05:dc:db:06:12:8f:
e7:cb:9e:81:52:2a:7b:b2:fd:0a:e3:3e:32:e6:96:
c4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:01:11:92:51:B8:24:3A:0D:55:A8:99:70:EE:E9:42:D9:BC:1F:02
X509v3 Authority Key Identifier:
keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/egERklG4JDoNVaiZcO7pQtm8HwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.47.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:a6:89:a4:45:39:12:f8:8d:89:4a:71:80:18:be:55:7e:a4:
32:44:6a:87:5f:05:07:4a:8c:55:eb:71:f1:e9:aa:6f:2a:36:
46:52:35:8b:40:b6:51:40:17:e4:85:81:8e:1f:90:d5:70:7b:
ac:06:3c:fd:9d:2c:c6:70:d0:6d:48:08:af:5d:12:b8:c0:ee:
9e:e7:6f:bc:98:1a:87:f5:91:d7:8f:a9:b0:a7:e9:ff:27:c7:
49:3f:07:7a:e7:8c:3c:16:a7:b7:ff:ed:88:5f:3f:56:6f:2a:
d0:ad:07:10:f8:a9:0a:e5:82:8e:01:56:7f:66:9d:6e:09:60:
01:3b:d0:ed:e4:d3:0f:34:42:ee:e3:be:f0:28:a5:91:88:a4:
44:28:a2:4d:35:be:05:ac:8d:ff:de:a4:d0:03:d5:40:5e:63:
3d:b8:64:36:85:79:c2:49:5a:94:c4:14:cf:02:af:3f:ff:06:
75:f4:33:ba:a5:57:5f:ff:e3:73:ae:ed:0b:dd:a3:aa:50:b2:
c5:03:53:9b:0f:71:32:e3:d0:f0:41:b7:6c:36:fc:21:d3:ab:
49:0a:64:79:ea:d5:49:fc:ae:5e:ba:80:6b:6c:ba:2c:e5:b0:
2b:94:70:37:56:04:b1:fe:62:6e:60:ac:0c:7c:2f:c6:fe:81:
26:c7:b7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:54:41 2025 by rpki-client