Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EI-BOCqR84BLJQXV-IAhb-grW20.roa
File: EI-BOCqR84BLJQXV-IAhb-grW20.roa (raw, json)
Hash identifier: p/Cl/hSR9yUr6e+xQpGhDz7WYQzaI9eZOGWw6QLnmlk=
Subject key identifier: 10:8F:81:38:2A:91:F3:80:4B:25:05:D5:F8:80:21:6F:E8:2B:5B:6D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0195C770C1BD520E8284172CC71F0F9F741D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EI-BOCqR84BLJQXV-IAhb-grW20.roa
Signing time: Mon 24 Mar 2025 09:16:50 +0000
ROA not before: Mon 24 Mar 2025 09:16:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21082
IP address blocks: 212.192.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:70:c1:bd:52:0e:82:84:17:2c:c7:1f:0f:9f:74:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 24 09:16:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=108f81382a91f3804b2505d5f880216fe82b5b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:37:12:a6:93:bb:23:42:45:d2:87:3a:05:
e1:9f:53:03:ca:18:a7:24:fa:66:17:28:38:39:7e:
ab:3c:1e:69:b8:6c:30:a5:19:b1:3e:ee:97:b2:f6:
9d:04:f0:46:eb:fe:87:29:69:e0:c7:1c:c3:b3:a2:
d0:d6:b4:29:65:83:34:8e:60:ab:dc:90:97:ac:c4:
60:a6:e1:14:6c:97:32:50:79:fa:71:fd:6c:ec:ba:
43:22:81:50:e1:06:08:3b:5d:a6:4d:69:60:81:da:
f9:06:aa:32:b7:c9:ad:1a:d0:4d:82:62:35:48:5f:
8d:f4:b9:b1:a9:1c:a2:a2:2f:51:3c:87:10:1b:7a:
8a:ee:3f:ce:82:a5:ce:85:b5:52:b5:07:d7:28:89:
35:08:84:27:6f:da:b0:d1:45:11:ac:de:17:fd:dd:
13:59:fd:0a:29:6c:6e:45:ef:53:ae:15:a4:75:fc:
38:34:c6:15:bb:94:5f:e6:4a:0e:1f:4f:aa:6e:ea:
cb:e0:18:a7:99:cc:a0:6c:27:d2:78:42:5d:d6:e3:
cf:2b:c5:27:75:1d:82:c4:34:45:02:81:a5:71:9c:
65:75:d8:ba:f4:45:72:b8:c6:06:b7:e8:59:4e:6a:
3c:83:02:72:e3:2d:11:2c:28:18:ec:e8:b1:c0:1d:
36:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8F:81:38:2A:91:F3:80:4B:25:05:D5:F8:80:21:6F:E8:2B:5B:6D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EI-BOCqR84BLJQXV-IAhb-grW20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.222.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e0:17:62:4e:9d:a8:12:b0:bc:b2:1f:cf:3b:92:dd:f5:30:
ae:70:69:5a:3f:9d:85:0f:c4:56:21:4c:a3:b7:22:3b:a3:22:
4e:5d:5d:0b:6f:07:32:e2:07:ec:e9:5a:18:8e:5e:d2:12:1d:
20:a3:a6:45:8e:b0:3f:07:ef:40:f3:ac:9b:cf:79:b4:3c:8f:
18:6c:99:03:c8:a3:b1:7d:e9:44:c6:59:45:dd:b2:52:6d:28:
39:c9:d6:48:bc:6c:95:19:59:1f:e5:70:c2:8d:99:ac:8c:9c:
d4:eb:a2:7e:9a:b7:f5:81:94:82:20:a3:cf:b4:e9:e3:46:e5:
db:01:61:aa:9e:c0:cd:c8:4e:42:84:ed:40:7c:61:cf:18:d7:
a8:e9:69:57:d6:de:eb:47:94:29:ea:c0:03:f0:e3:db:66:1a:
05:b2:7f:4d:f9:e3:b4:ba:af:dc:56:69:b0:08:bc:0a:25:92:
a1:f8:8d:f7:63:89:e5:d6:e9:fb:f5:84:0b:a5:d6:55:87:0d:
39:d9:1f:33:fb:f7:a4:9b:f2:bd:3d:1a:4d:a0:33:20:68:5b:
da:b8:63:f6:9e:e3:25:bb:31:62:9f:f5:36:ac:36:b2:5b:6b:
36:fa:af:0a:9c:0f:ab:b2:a0:a1:3e:47:99:18:14:6e:97:e5:
02:99:1f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:52 2025 by rpki-client