Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a1c55b-ac96-4963-89ad-7ca11b7a0a6e/1/EwG3XB3B__EUzubfhxj8G0fs5hs.roa
File: EwG3XB3B__EUzubfhxj8G0fs5hs.roa (raw, json)
Hash identifier: sC0pp86EkwPCvFaANmNvExiA1rEI3c9kNGVFXOWIoIc=
Subject key identifier: 13:01:B7:5C:1D:C1:FF:F1:14:CE:E6:DF:87:18:FC:1B:47:EC:E6:1B
Certificate issuer: /CN=6af2af2fe2a3efe54a14fa09262030acd0711d78
Certificate serial: 0181D54A0C3E00F17FA068E8CE83A5944A07
Authority key identifier: 6A:F2:AF:2F:E2:A3:EF:E5:4A:14:FA:09:26:20:30:AC:D0:71:1D:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avKvL-Kj7-VKFPoJJiAwrNBxHXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a1c55b-ac96-4963-89ad-7ca11b7a0a6e/1/EwG3XB3B__EUzubfhxj8G0fs5hs.roa
Signing time: Wed 06 Jul 2022 20:53:28 +0000
ROA not before: Wed 06 Jul 2022 20:53:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 80.243.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d5:4a:0c:3e:00:f1:7f:a0:68:e8:ce:83:a5:94:4a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2af2fe2a3efe54a14fa09262030acd0711d78
Validity
Not Before: Jul 6 20:53:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1301b75c1dc1fff114cee6df8718fc1b47ece61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:1a:72:08:27:b2:b3:72:0a:29:2a:12:29:
14:1a:4e:4c:e4:d2:e9:a4:51:96:0b:c3:50:b3:f8:
bc:b1:b0:c9:07:be:6f:fe:7d:f1:68:83:e4:61:0a:
13:86:93:0d:4d:f8:4c:e6:e3:31:e1:bd:5d:aa:85:
d1:60:81:aa:5f:fd:e7:ca:7b:11:f7:d8:e7:3a:5c:
08:42:9a:ab:98:58:51:e3:27:99:b9:bd:5a:5e:fd:
db:7e:74:d5:ba:62:fa:8c:47:6d:c4:bb:59:06:aa:
3b:8b:5f:05:a0:e7:d5:d4:59:3b:86:15:6c:f6:f1:
c1:39:16:29:0d:e0:5d:45:ed:35:5b:7e:c8:9e:26:
d1:6e:b9:eb:bc:0c:d1:56:86:db:3d:ef:bc:6d:1b:
29:ac:19:5a:7e:5d:ad:33:1d:57:48:38:2a:d9:23:
2e:44:80:1a:0d:94:e3:02:3e:35:91:1e:c1:95:5a:
7f:4f:ad:4e:74:10:b3:3e:2a:26:78:16:56:0e:3c:
43:56:e8:e5:e3:15:41:4d:85:93:5e:42:90:31:6d:
fc:ec:d6:68:69:f9:df:35:ce:e5:22:a8:fd:df:b6:
c0:7f:24:4b:aa:a3:d9:c8:f7:63:67:9c:94:92:51:
6d:d4:8d:ae:c1:4d:83:45:79:be:94:e3:b5:96:b4:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:01:B7:5C:1D:C1:FF:F1:14:CE:E6:DF:87:18:FC:1B:47:EC:E6:1B
X509v3 Authority Key Identifier:
keyid:6A:F2:AF:2F:E2:A3:EF:E5:4A:14:FA:09:26:20:30:AC:D0:71:1D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avKvL-Kj7-VKFPoJJiAwrNBxHXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a1c55b-ac96-4963-89ad-7ca11b7a0a6e/1/EwG3XB3B__EUzubfhxj8G0fs5hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a1c55b-ac96-4963-89ad-7ca11b7a0a6e/1/avKvL-Kj7-VKFPoJJiAwrNBxHXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.228.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:e2:9e:f0:31:42:72:16:c1:8f:6e:b5:5c:4a:22:af:b7:7f:
3c:99:e7:07:c2:c0:df:c6:49:20:f5:79:5c:63:bc:91:5a:66:
4b:d4:06:b7:45:f9:06:31:41:9a:88:83:f2:4a:32:5c:c9:4d:
0b:f0:4b:42:f5:15:9e:f0:ca:6b:83:09:d1:ef:44:d1:87:9b:
1f:1e:c9:51:7e:d9:56:32:24:42:6d:5c:d5:d7:b9:51:48:1c:
2f:2c:79:49:c9:d6:c2:f9:44:3d:01:5c:0c:3c:82:f8:e7:fc:
75:7f:56:ad:d2:9e:db:03:05:36:b3:dc:70:34:eb:94:c3:7d:
90:d8:e3:42:76:22:36:00:4b:c9:99:b4:56:fe:c3:f2:ea:04:
58:98:5a:11:fe:97:9a:d0:c4:0f:e4:12:ab:8e:2c:cf:c8:64:
4d:55:a4:c3:4f:3a:e5:82:a8:61:42:ab:b2:0b:f6:97:04:3d:
bb:95:ef:89:8b:3b:2e:30:19:09:4a:c5:5e:6a:fa:f4:54:6c:
56:af:72:03:68:82:70:7c:bf:81:a2:4b:6d:dd:e6:20:5c:b4:
5d:45:cb:4b:ba:9e:6a:b9:0a:c5:b2:8b:a6:7d:7d:20:24:50:
02:0d:cc:e7:dc:1a:ce:68:7f:35:4f:03:84:86:d1:e9:2d:a4:
cb:7a:c1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:52:51 2025 by rpki-client