Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/E0ztfcYqRXNTHVQ8th7DBM0JCFs.roa
File: E0ztfcYqRXNTHVQ8th7DBM0JCFs.roa (raw, json)
Hash identifier: LXPJ0gjb0to5N+vRXKqM1sCi601PFomLREP+hCV5J8k=
Subject key identifier: 13:4C:ED:7D:C6:2A:45:73:53:1D:54:3C:B6:1E:C3:04:CD:09:08:5B
Certificate issuer: /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Certificate serial: 0194221F670103758FD93892F1342FC7B7B0
Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/E0ztfcYqRXNTHVQ8th7DBM0JCFs.roa
Signing time: Wed 01 Jan 2025 13:47:50 +0000
ROA not before: Wed 01 Jan 2025 13:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60257
IP address blocks: 193.56.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:67:01:03:75:8f:d9:38:92:f1:34:2f:c7:b7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Validity
Not Before: Jan 1 13:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=134ced7dc62a4573531d543cb61ec304cd09085b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1f:06:55:63:1a:ce:04:0b:2e:6d:94:ec:c1:
32:c7:3c:c5:7b:ee:93:cd:d5:67:d3:e3:c5:58:0c:
b3:d3:3b:f4:ce:db:fa:15:64:f8:8d:79:16:ba:86:
4f:9b:45:86:b5:f5:4a:b3:61:35:82:3c:01:4c:34:
ec:0d:fb:aa:94:86:83:79:f9:1a:8d:d4:f8:2b:a2:
44:13:e7:4c:f7:79:22:94:80:3c:0b:67:30:e5:1e:
92:46:33:a5:51:55:34:62:7b:ef:e6:66:a1:53:15:
d1:28:b5:54:c2:02:fc:ad:6a:88:b4:19:cf:47:90:
ea:f4:f2:0a:c6:f3:dc:22:17:8b:8a:03:91:d0:8c:
39:53:61:0d:0f:75:e9:fc:b4:d8:0e:60:f8:2a:36:
f9:77:c2:e5:61:12:fb:36:f4:ae:c6:35:8e:72:21:
be:ea:69:ab:60:8a:5a:e2:1c:d8:36:c1:f8:0d:4e:
47:06:3b:c3:a0:cb:24:d2:d3:47:55:b2:53:6f:81:
6e:ee:00:b3:8c:0b:94:07:81:86:d6:8c:b2:88:40:
e3:d3:73:7a:7f:80:61:bf:fd:ac:51:08:e6:5a:3e:
41:9a:c8:58:a2:bd:8d:0c:f2:0f:46:84:b3:d1:65:
5b:bf:ec:06:2b:a7:70:2a:19:de:0d:14:39:a6:48:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4C:ED:7D:C6:2A:45:73:53:1D:54:3C:B6:1E:C3:04:CD:09:08:5B
X509v3 Authority Key Identifier:
keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/E0ztfcYqRXNTHVQ8th7DBM0JCFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.176.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:3c:1e:aa:4d:cc:d4:cc:91:3a:c5:1e:e5:d9:0b:dd:1f:f7:
a2:a8:c1:7d:d3:9d:07:60:fa:28:9b:d8:55:93:b8:04:ec:03:
35:1d:57:76:3b:dc:fd:ee:de:c5:98:ec:56:74:4f:d5:a2:66:
b6:91:98:a2:88:0b:f7:29:65:0f:9f:84:a3:d2:64:75:de:ed:
33:be:d4:4c:42:0c:90:ae:79:95:47:89:a6:e6:27:08:5d:0c:
fb:ec:fd:c0:5d:2f:58:b5:ad:e3:e4:38:b3:05:1f:fa:11:06:
4a:75:b7:23:71:70:d7:f0:3c:a9:be:cb:fe:66:af:ca:99:19:
83:b4:7d:69:17:0e:d1:aa:26:2d:80:b7:b0:02:6f:37:c1:a8:
cd:50:aa:79:f7:df:9e:93:c6:5e:ba:36:bb:1b:25:15:c2:1c:
0d:a9:42:0f:31:e6:eb:7d:28:73:0f:74:de:24:ca:54:c9:e3:
9a:93:0f:da:e0:05:85:45:6a:82:93:a7:04:32:12:d7:e8:5c:
a9:5e:bd:df:ca:5e:05:88:d1:d8:57:8b:02:68:53:be:06:dd:
c2:ca:45:b9:e5:2b:91:31:eb:3b:37:57:12:af:ca:8c:50:a6:
5a:04:4a:a6:ed:a4:6a:1b:34:c5:2a:e4:a1:1c:ad:01:1e:cc:
a7:05:ab:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:49:33 2025 by rpki-client