Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/EB2pKsJqEpEjhB4YuLKeyjkIp9Q.roa
File: EB2pKsJqEpEjhB4YuLKeyjkIp9Q.roa (raw, json)
Hash identifier: ruDUWZ/Fl5sEVfjlgGOsVStJ3zZdJ/uyG7EZiN/zjl0=
Subject key identifier: 10:1D:A9:2A:C2:6A:12:91:23:84:1E:18:B8:B2:9E:CA:39:08:A7:D4
Certificate issuer: /CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Certificate serial: 0194266C12DD39886BBCB63D3D8F9BEC9093
Authority key identifier: 2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/EB2pKsJqEpEjhB4YuLKeyjkIp9Q.roa
Signing time: Thu 02 Jan 2025 09:50:04 +0000
ROA not before: Thu 02 Jan 2025 09:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209000
IP address blocks: 45.136.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:12:dd:39:88:6b:bc:b6:3d:3d:8f:9b:ec:90:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e19966c0ea5df3a987f8365524b5128cba7fc90
Validity
Not Before: Jan 2 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=101da92ac26a129123841e18b8b29eca3908a7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:c9:b5:0e:cf:5c:30:11:2d:1d:20:cf:d2:
98:02:bc:f7:1a:75:48:fa:21:74:23:d3:e4:4b:29:
c7:25:51:2e:56:5f:7b:3e:6c:d9:81:e9:b0:c2:8a:
a2:92:07:c8:52:e2:f4:c5:11:d0:a4:d6:cf:68:cf:
fb:fa:7e:fb:76:fd:25:30:97:49:0b:c8:68:71:7f:
0a:90:19:98:f3:43:72:ce:0e:57:f3:81:8f:fb:6e:
e9:f1:5b:21:79:cc:a4:ad:69:23:8f:5c:37:a0:74:
67:16:db:32:36:47:fe:c5:20:f7:c1:1b:25:6a:0b:
6d:4b:f4:8c:dc:06:59:af:46:f0:4e:81:ff:a6:3b:
97:4f:82:38:77:f7:b2:98:d9:a4:c9:5a:76:7f:6e:
ca:01:6e:6f:42:10:61:84:54:42:ac:5e:1d:c9:4a:
e8:c6:3d:92:98:e3:da:34:1a:84:6f:33:95:c1:47:
42:6e:53:eb:78:9a:f5:96:d8:40:c9:03:fb:9a:84:
83:0d:e7:13:21:30:34:b2:30:2b:7a:99:b1:ef:4e:
da:f4:2c:f4:c6:75:a1:f9:80:fb:6d:93:86:29:28:
f5:c5:89:e7:96:1d:f4:35:ce:5b:4e:66:26:a4:95:
47:d3:54:ce:a6:40:59:1e:47:52:ee:be:e8:19:fc:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1D:A9:2A:C2:6A:12:91:23:84:1E:18:B8:B2:9E:CA:39:08:A7:D4
X509v3 Authority Key Identifier:
keyid:2E:19:96:6C:0E:A5:DF:3A:98:7F:83:65:52:4B:51:28:CB:A7:FC:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhmWbA6l3zqYf4NlUktRKMun_JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/EB2pKsJqEpEjhB4YuLKeyjkIp9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a6b613-66bd-4312-8f0c-36b5dda9fbe8/1/LhmWbA6l3zqYf4NlUktRKMun_JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.55.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3b:a6:39:e8:b0:10:20:ae:3a:ac:f0:c9:42:68:29:37:69:
6d:7a:f8:d9:5f:3a:d2:9b:50:07:03:75:c0:7e:d4:39:5e:ab:
77:74:5c:77:92:67:7e:e2:23:3e:4d:a7:9f:73:66:31:ef:a5:
5e:84:a4:14:3c:58:f0:c7:7c:5c:10:34:86:03:8a:c7:02:0e:
49:9d:37:61:5f:a8:d0:cf:2b:e4:ef:8e:47:ab:a2:6f:3b:72:
3b:ed:e5:b2:50:99:9c:0e:d6:c7:e7:02:f7:37:12:4a:fc:00:
e1:1a:61:80:9f:a8:f1:18:0c:c9:65:d5:08:85:06:2f:fd:76:
a1:11:37:b4:69:94:80:da:dc:0b:d9:b4:55:39:c3:b3:ef:78:
92:6a:7d:59:94:64:8d:74:4e:c5:50:fe:e8:05:25:09:87:55:
9d:eb:33:7e:8b:1c:89:7d:ef:fd:ac:eb:8c:77:e0:ed:6e:27:
46:ab:8f:76:65:8b:b4:77:2e:87:f0:fa:26:30:b9:02:49:3f:
d0:28:d3:77:74:0a:7a:52:a3:eb:5c:6c:d9:0b:e9:24:3a:a2:
33:2e:50:e2:a5:d4:5c:c5:c2:0f:e2:17:80:6f:fc:55:15:4f:
47:47:f3:8e:0c:99:d9:ba:43:fb:44:fb:32:58:b3:76:3b:6c:
19:37:c2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:02 2025 by rpki-client