Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/eCmzdgoopVT7S6Dx89qMLIuTKQQ.roa
File: eCmzdgoopVT7S6Dx89qMLIuTKQQ.roa (raw, json)
Hash identifier: rhcsh28US9SuBCBfuCBe29wHE0hEwBZioCucu8gjbms=
Subject key identifier: 78:29:B3:76:0A:28:A5:54:FB:4B:A0:F1:F3:DA:8C:2C:8B:93:29:04
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 05407761
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/eCmzdgoopVT7S6Dx89qMLIuTKQQ.roa
Signing time: Tue 17 May 2022 06:06:30 +0000
ROA not before: Tue 17 May 2022 06:06:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 185.95.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88110945 (0x5407761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: May 17 06:06:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7829b3760a28a554fb4ba0f1f3da8c2c8b932904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:70:03:19:6d:69:8c:23:9a:72:4b:f1:a7:
a5:da:10:39:b2:4d:89:57:05:aa:66:8c:0f:2d:ed:
7e:7f:8f:83:80:c1:aa:60:3b:66:25:8e:f7:19:a3:
4f:06:c2:37:ff:27:5b:54:7f:7c:d5:fc:f9:7a:f3:
ca:9a:87:37:ca:5b:3b:5f:7d:ca:ee:82:63:6e:f1:
df:0c:fb:01:a5:78:1e:fb:ad:d2:40:f7:bf:01:13:
93:b3:07:8a:44:42:66:1d:7d:b7:a6:be:42:e4:1d:
48:2a:61:df:0e:39:3f:08:df:fc:80:fd:da:71:4c:
04:a2:84:39:5a:ff:9d:78:a8:b1:da:05:92:a6:34:
61:77:03:de:81:18:8f:1c:80:98:19:58:73:76:e8:
f7:23:53:da:47:5f:c4:da:b0:53:30:64:63:19:8e:
82:6e:40:d1:49:4c:4d:9b:44:1c:38:53:6c:95:1d:
c8:5d:a1:6e:ff:34:95:8c:69:4f:de:fb:7a:59:9a:
be:be:06:ad:23:4f:70:c0:af:83:75:6c:3a:e7:53:
01:64:16:1c:8b:cc:4f:05:5f:93:3a:7a:5b:8c:b1:
3d:cb:a9:76:19:7f:9a:e2:41:e8:81:fe:90:8b:e4:
78:e4:25:44:72:24:64:87:5b:70:d8:b2:98:58:53:
c4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:29:B3:76:0A:28:A5:54:FB:4B:A0:F1:F3:DA:8C:2C:8B:93:29:04
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/eCmzdgoopVT7S6Dx89qMLIuTKQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.158.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d5:d4:97:6c:bf:7e:64:fd:6f:ba:ba:bb:8a:99:de:75:a2:
f3:60:b3:65:5d:87:cc:a5:72:cf:be:1d:d0:40:f4:a9:fa:b0:
4f:64:2c:6c:e4:32:cc:91:61:d8:cd:67:5c:7f:92:48:a2:a8:
ed:02:9e:11:80:7b:94:fc:4a:c0:d6:c2:f5:65:5c:2c:83:12:
29:ce:cf:16:a2:7b:15:2a:bb:3d:cf:ee:ca:99:57:3e:e4:f6:
62:9d:46:3e:91:99:59:af:1c:e8:73:17:c2:22:31:e3:1f:b9:
f9:b3:67:d0:24:1a:4d:e3:74:32:44:a7:d0:29:90:34:6f:43:
e4:d7:b3:fe:d1:13:fd:f5:18:52:29:18:21:1b:5a:28:02:be:
bd:f9:e6:7c:34:6b:de:de:7e:d5:a4:21:c9:92:b7:c1:77:45:
98:ac:ee:ad:5d:14:d6:a9:78:86:c3:c1:5f:03:8e:de:cc:ef:
20:5b:f7:2d:5d:1f:b3:38:00:a8:2c:a4:2b:f0:8e:ac:1a:b2:
b1:ae:95:db:6c:f4:fc:f8:2f:d8:5a:36:fe:ce:7b:1a:10:d5:
8f:c5:f7:cc:47:89:da:98:47:ad:5b:e4:7d:57:be:c5:2d:fc:
8c:71:93:dd:9b:cf:d9:ad:9c:b5:69:5d:2b:09:8b:09:8a:2e:
2b:41:bd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:12 2025 by rpki-client