Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/eUJqNeMrOG92tkRoE1eKe7bdKA0.roa
File: eUJqNeMrOG92tkRoE1eKe7bdKA0.roa (raw, json)
Hash identifier: ZH26TI2Lx95OhTyG7ufuoqyGvbD2mq8daN9NRoWVAZ8=
Subject key identifier: 79:42:6A:35:E3:2B:38:6F:76:B6:44:68:13:57:8A:7B:B6:DD:28:0D
Certificate issuer: /CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068
Certificate serial: 019423D7F70E195F2E4D1CD3CA70881089DB
Authority key identifier: 47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/eUJqNeMrOG92tkRoE1eKe7bdKA0.roa
Signing time: Wed 01 Jan 2025 21:49:03 +0000
ROA not before: Wed 01 Jan 2025 21:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50068
IP address blocks: 193.160.16.0/22 maxlen: 24
2a0c:9cc0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f7:0e:19:5f:2e:4d:1c:d3:ca:70:88:10:89:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b770eac8a7363f4cb8a88c2e36e2d694b39068
Validity
Not Before: Jan 1 21:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79426a35e32b386f76b6446813578a7bb6dd280d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:4e:fe:4e:ea:da:14:a9:9e:46:8e:e4:5d:
f4:03:15:5c:fc:7b:29:c4:e4:fb:a7:e2:0b:11:6e:
93:48:41:62:e5:77:59:14:ec:81:6c:0d:e4:06:0d:
e6:2c:32:ce:c3:c9:36:cd:34:bc:a8:76:8f:3c:b1:
78:55:21:02:11:cd:61:14:7f:b3:35:14:a4:60:de:
a8:81:ac:48:b6:0f:85:19:27:4c:92:6f:31:86:35:
4a:cb:40:97:23:5c:ea:68:cc:12:08:85:67:93:0e:
6d:38:05:d8:df:f8:17:be:3f:ab:e6:df:3b:ea:95:
c1:89:fa:51:71:b0:2c:29:10:77:10:6e:9a:c9:0f:
aa:89:27:9c:f4:b6:51:cc:07:81:cd:b9:85:87:6a:
94:bb:13:22:da:98:bc:f9:7b:3d:45:bf:42:c7:dd:
46:44:71:a4:99:91:ab:d4:c6:50:9d:bc:58:81:cf:
1a:e7:d4:18:3a:e5:f4:37:0b:05:36:be:1f:f0:aa:
96:bd:5b:c1:6c:ff:0f:5a:81:41:4b:8c:5e:d2:0f:
8c:f6:4a:f9:b2:ff:1d:21:e9:ae:29:19:64:cc:cb:
fb:9c:8e:bc:ca:ba:01:45:46:82:a1:ab:94:4a:df:
53:a9:2d:d9:68:0c:aa:44:50:4c:04:98:99:99:b6:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:42:6A:35:E3:2B:38:6F:76:B6:44:68:13:57:8A:7B:B6:DD:28:0D
X509v3 Authority Key Identifier:
keyid:47:B7:70:EA:C8:A7:36:3F:4C:B8:A8:8C:2E:36:E2:D6:94:B3:90:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7dw6sinNj9MuKiMLjbi1pSzkGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/eUJqNeMrOG92tkRoE1eKe7bdKA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6c4f44-549b-455e-b520-f7c539fc6018/1/R7dw6sinNj9MuKiMLjbi1pSzkGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.16.0/22
IPv6:
2a0c:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
15:a3:03:09:3d:9a:ba:09:e5:cd:fa:24:52:d7:28:8c:b0:f7:
00:03:9c:53:95:29:f3:ee:8d:5b:d3:09:f1:80:85:bc:03:75:
d6:87:9d:34:d9:70:4c:47:98:0a:6e:3b:3a:8e:9a:22:02:88:
91:d8:95:78:aa:29:86:87:4f:27:22:4a:e5:09:9a:8c:06:21:
7e:16:ae:55:55:5d:33:ab:6c:3a:22:2f:e1:f6:b0:25:02:ed:
4c:15:45:21:ba:2b:b1:47:ea:47:56:ae:db:b1:08:0b:69:e4:
87:fd:18:e8:f6:a6:89:ef:7d:78:45:e1:6e:a0:00:05:41:45:
d0:cf:92:01:b0:9e:61:70:be:0b:a0:ba:60:98:16:9d:61:5d:
6c:42:e2:84:32:e7:79:4b:9b:ec:b4:b6:6d:14:74:1e:34:74:
76:2f:9e:e0:8b:42:d8:24:29:0d:2e:64:ee:86:26:68:0b:1e:
07:8a:78:3f:8e:f0:5c:8a:cc:f7:fc:69:53:77:48:5f:72:5c:
51:54:79:56:8c:01:46:28:20:8e:6a:56:54:cb:b1:46:ca:50:
91:2d:ab:78:d5:e2:00:81:b5:4f:ef:5d:ce:78:82:00:35:45:
56:1e:e5:93:71:46:e7:9c:59:1e:cd:26:ca:7a:c5:5a:b3:30:
05:b4:30:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:45 2025 by rpki-client