Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/EFBcZPb6_mZvfvPadjhXTV0PCfY.roa
File: EFBcZPb6_mZvfvPadjhXTV0PCfY.roa (raw, json)
Hash identifier: wUQRfjt1GHe4z0S84des18YVeYbUGKJFeL4fYYWyRUU=
Subject key identifier: 10:50:5C:64:F6:FA:FE:66:6F:7E:F3:DA:76:38:57:4D:5D:0F:09:F6
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 32B25837
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/EFBcZPb6_mZvfvPadjhXTV0PCfY.roa
Signing time: Sat 01 Jan 2022 06:56:48 +0000
ROA not before: Sat 01 Jan 2022 06:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49915
IP address blocks: 62.69.150.0/24 maxlen: 24
62.69.148.0/23 maxlen: 24
91.216.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850548791 (0x32b25837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Jan 1 06:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10505c64f6fafe666f7ef3da7638574d5d0f09f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:83:bc:f3:97:73:1b:68:23:fa:33:29:47:
f2:73:6a:ae:63:a8:c1:c1:68:75:53:36:6b:44:45:
8a:ea:04:91:05:1d:7c:39:60:5a:17:93:14:7a:a3:
33:57:f7:b8:5b:e2:62:7f:f0:c2:2a:41:7a:3f:6b:
6a:39:c4:78:a4:56:c1:81:d9:09:54:5b:5d:c0:50:
47:6a:34:6c:5c:c5:23:c6:f2:57:1d:4c:0a:eb:6f:
b4:fe:31:ad:58:a9:0e:34:e0:56:54:e8:be:d7:97:
48:c8:64:55:ba:1a:71:e8:2f:08:75:a7:8e:8d:ae:
1e:6d:0b:6b:97:c3:2a:40:e1:41:3b:37:61:5b:94:
d7:c7:c8:47:d4:ad:64:95:08:46:15:b1:f9:c3:2b:
85:8e:7c:33:3d:5b:bf:25:32:72:eb:8b:0e:b9:9f:
eb:2d:b3:d1:d3:9b:54:00:81:ab:db:89:99:19:da:
61:80:8e:ae:6b:75:e1:b1:0c:3c:b9:67:8c:e3:41:
2d:b9:b1:0d:fa:1d:ed:4f:d7:9f:5a:7f:95:ed:4b:
20:cd:c5:d4:c0:a1:88:dd:70:84:26:5f:73:ae:44:
57:3b:5a:a5:f9:f8:5a:8a:28:c4:51:1d:86:8f:61:
bc:d1:87:cd:9e:7d:c3:b0:ee:a5:20:0d:aa:cb:90:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:50:5C:64:F6:FA:FE:66:6F:7E:F3:DA:76:38:57:4D:5D:0F:09:F6
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/EFBcZPb6_mZvfvPadjhXTV0PCfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.148.0-62.69.150.255
91.216.158.0/24
Signature Algorithm: sha256WithRSAEncryption
67:18:64:d6:25:ce:76:8c:1b:6f:b3:94:36:e9:80:8c:b8:16:
fc:4d:71:99:43:f1:fb:aa:2a:1e:48:3f:78:b4:6b:c6:0f:bc:
b1:76:f6:ba:51:a2:a7:6f:bf:21:65:c6:db:ec:09:8b:88:92:
fa:2e:d3:84:89:07:a2:db:0c:4b:08:1d:ac:c5:6c:5e:b2:a4:
e0:63:5b:d0:74:52:b5:09:7d:f2:43:b0:d9:89:6f:a2:d4:8d:
c0:84:1a:c8:83:97:b8:3d:99:86:3a:a4:b3:4d:1f:3b:9e:88:
8a:0e:02:aa:b6:f6:61:58:59:16:a6:c2:c8:cc:51:78:be:64:
74:fd:ef:dd:8d:16:f1:17:7f:15:d8:63:71:89:57:2f:7b:98:
38:85:57:18:48:a7:40:c4:cf:15:ed:cc:a2:70:f3:32:af:c9:
6e:2e:72:02:6a:52:58:09:5d:33:7e:f5:0c:d1:09:d8:2a:b7:
b6:2f:94:78:07:d3:13:4c:b8:41:1e:5f:ad:3d:a5:fe:50:c1:
5b:9f:32:04:db:d3:ad:e8:33:92:72:a3:c1:44:2c:c0:a7:a4:
e9:18:16:c8:5a:84:4f:c3:7a:4f:3f:5a:22:0d:c4:17:f0:bf:
01:96:39:54:42:66:fd:40:40:fb:9a:27:af:ac:1a:db:3a:66:
9b:74:3a:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEMrJYNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZjIxNTIxYTcxMjcxNTdmN2RhZjBhZDA5MTM5NGFkNWExY2NlNzc5MB4XDTIyMDEw
MTA2NTY0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTA1MDVjNjRmNmZh
ZmU2NjZmN2VmM2RhNzYzODU3NGQ1ZDBmMDlmNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK6wg7zzl3MbaCP6MylH8nNqrmOowcFodVM2a0RFiuoEkQUd
fDlgWheTFHqjM1f3uFviYn/wwipBej9rajnEeKRWwYHZCVRbXcBQR2o0bFzFI8by
Vx1MCutvtP4xrVipDjTgVlTovteXSMhkVboacegvCHWnjo2uHm0La5fDKkDhQTs3
YVuU18fIR9StZJUIRhWx+cMrhY58Mz1bvyUycuuLDrmf6y2z0dObVACBq9uJmRna
YYCOrmt14bEMPLlnjONBLbmxDfod7U/Xn1p/le1LIM3F1MChiN1whCZfc65EVzta
pfn4WoooxFEdho9hvNGHzZ59w7DupSANqsuQ+AMCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBQQUFxk9vr+Zm9+89p2OFdNXQ8J9jAfBgNVHSMEGDAWgBQPIVIacScVf32v
CtCROUrVoczneTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0R5RlNHbkVuRlg5OXJ3clFrVGxLMWFITTUzay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjIvZTgzMWIxLTllYzAtNDZmMi04NjBkLWZhZDVmZDc5NzBiYS8x
L0VGQmNaUGI2X21admZ2UGFkamhYVFYwUENmWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIv
ZTgzMWIxLTllYzAtNDZmMi04NjBkLWZhZDVmZDc5NzBiYS8xL0R5RlNHbkVuRlg5
OXJ3clFrVGxLMWFITTUzay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQCPkWUAwQAPkWWAwQAW9ieMA0G
CSqGSIb3DQEBCwUAA4IBAQBnGGTWJc52jBtvs5Q26YCMuBb8TXGZQ/H7qioeSD94
tGvGD7yxdva6UaKnb78hZcbb7AmLiJL6LtOEiQei2wxLCB2sxWxesqTgY1vQdFK1
CX3yQ7DZiW+i1I3AhBrIg5e4PZmGOqSzTR87noiKDgKqtvZhWFkWpsLIzFF4vmR0
/e/djRbxF38V2GNxiVcve5g4hVcYSKdAxM8V7cyicPMyr8luLnICalJYCV0zfvUM
0QnYKre2L5R4B9MTTLhBHl+tPaX+UMFbnzIE29Ot6DOScqPBRCzAp6TpGBbIWoRP
w3pPP1oiDcQX8L8BljlUQmb9QED7mievrBrbOmabdDpF
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:48:20 2025 by rpki-client