Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/eB73hmkPs8x2mJvFx-EnGCDAB1c.roa
File: eB73hmkPs8x2mJvFx-EnGCDAB1c.roa (raw, json)
Hash identifier: fUQoDuG3Lbg4IqtZYf1x8HKBk4TlFjvseHKyEw3NN/A=
Subject key identifier: 78:1E:F7:86:69:0F:B3:CC:76:98:9B:C5:C7:E1:27:18:20:C0:07:57
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 1A2AC6F2
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/eB73hmkPs8x2mJvFx-EnGCDAB1c.roa
Signing time: Sat 01 Jan 2022 12:55:15 +0000
ROA not before: Sat 01 Jan 2022 12:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22333
IP address blocks: 185.162.73.0/24 maxlen: 24
185.162.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439011058 (0x1a2ac6f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jan 1 12:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=781ef786690fb3cc76989bc5c7e1271820c00757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:34:e2:63:5f:f9:27:4f:e3:94:2f:af:c3:
9e:e9:32:ca:1c:d1:42:5b:fd:ea:c1:ea:4e:2a:5b:
f6:a8:42:28:48:ea:5d:91:cf:41:c2:b7:2d:e0:51:
b5:27:99:13:63:2b:2d:75:85:4f:72:57:94:54:63:
df:58:45:7d:64:29:aa:43:56:3b:5d:7b:20:8b:9b:
1d:78:ef:2d:e6:71:a0:18:30:f2:65:48:73:9b:da:
34:e3:50:ab:d2:58:10:45:e2:04:35:68:09:31:ae:
41:db:4b:72:3f:9e:71:ab:5e:62:6f:f8:c8:59:58:
ed:d1:c8:a4:9e:c0:97:1e:86:40:e0:de:70:f1:20:
fc:73:6b:58:64:b4:8a:98:0e:de:49:ee:48:41:28:
98:13:bf:10:20:78:a7:d2:86:49:ba:56:06:15:4d:
b1:a4:b4:cb:b6:2d:34:4b:9d:ab:62:21:bd:e5:8f:
1d:26:4a:d6:ed:ad:4f:bd:be:06:ab:2e:69:9a:96:
36:95:28:d1:ca:ff:8d:94:a8:d4:2f:8f:b2:0a:85:
d5:23:26:0d:7b:4a:ff:eb:16:ba:54:ce:d8:f3:ed:
12:3d:28:6e:4e:d5:38:a4:18:3d:ea:b0:b5:28:14:
bb:6c:6d:94:f9:aa:d6:61:ad:22:a9:e2:c9:f2:68:
89:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1E:F7:86:69:0F:B3:CC:76:98:9B:C5:C7:E1:27:18:20:C0:07:57
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/eB73hmkPs8x2mJvFx-EnGCDAB1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.72.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:cc:32:33:26:71:56:27:7e:5f:b5:ec:61:a7:c7:65:93:ca:
81:98:c7:4c:cc:26:48:fb:0d:a1:2b:56:86:b7:b1:92:ce:a3:
41:14:23:f2:04:6f:db:f4:2e:10:e1:53:c2:98:60:f8:4a:2c:
e3:2d:37:0d:5a:38:28:23:f2:be:b2:1f:2e:2b:d3:d7:e2:92:
03:df:8d:ba:03:76:c3:cd:c1:cf:6a:af:fb:05:61:ee:8b:24:
f0:b5:cf:a0:df:8e:9e:0d:7e:32:99:c9:31:4e:92:6d:bb:00:
38:31:52:82:9c:95:8f:1e:cd:dc:0b:3a:6f:74:c2:1f:fe:b6:
36:f1:82:6a:37:de:60:32:70:8e:ca:9a:d8:c4:a2:31:80:d6:
8e:ba:a4:40:09:e7:0e:a5:67:e2:1c:86:92:ce:bc:fa:e5:e3:
4c:42:7c:4f:12:61:25:51:4e:28:c3:c5:c5:70:af:97:53:39:
c9:2d:2b:e0:e8:2c:66:f1:3a:3b:45:41:c6:74:51:16:d6:6b:
7f:e3:a0:95:7c:6e:57:e1:3c:92:8d:ca:09:09:3d:5e:97:d7:
fb:bb:ea:51:44:ea:b5:24:d6:30:e0:a3:f9:2e:6e:a7:e8:4d:
d0:76:1b:52:d5:58:ab:d2:3c:b8:ee:1c:d1:0d:70:20:5d:e4:
e1:50:ce:0d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGirG8jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MzI0ZGVmYmFhZGU5M2U5OThlMTNhOTQyMDI5ZGQ1OTNiOGIyZWEzMB4XDTIyMDEw
MTEyNTUxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzgxZWY3ODY2OTBm
YjNjYzc2OTg5YmM1YzdlMTI3MTgyMGMwMDc1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFkNOJjX/knT+OUL6/DnukyyhzRQlv96sHqTipb9qhCKEjq
XZHPQcK3LeBRtSeZE2MrLXWFT3JXlFRj31hFfWQpqkNWO117IIubHXjvLeZxoBgw
8mVIc5vaNONQq9JYEEXiBDVoCTGuQdtLcj+ecateYm/4yFlY7dHIpJ7Alx6GQODe
cPEg/HNrWGS0ipgO3knuSEEomBO/ECB4p9KGSbpWBhVNsaS0y7YtNEudq2IhveWP
HSZK1u2tT72+BqsuaZqWNpUo0cr/jZSo1C+PsgqF1SMmDXtK/+sWulTO2PPtEj0o
bk7VOKQYPeqwtSgUu2xtlPmq1mGtIqniyfJoiRECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR4HveGaQ+zzHaYm8XH4ScYIMAHVzAfBgNVHSMEGDAWgBRTJN77qt6T6Zjh
OpQgKd1ZO4suozAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1V5VGUtNnJlay1tWTRUcVVJQ25kV1R1TExxTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGEvMjk0ZTg0LWNmYzUtNDVhNC1hNWNkLTMzYjc0NTk5NzVlMC8x
L2VCNzNobWtQczh4Mm1KdkZ4LUVuR0NEQUIxYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEv
Mjk0ZTg0LWNmYzUtNDVhNC1hNWNkLTMzYjc0NTk5NzVlMC8xL1V5VGUtNnJlay1t
WTRUcVVJQ25kV1R1TExxTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbmiSDANBgkqhkiG9w0BAQsFAAOC
AQEAfcwyMyZxVid+X7XsYafHZZPKgZjHTMwmSPsNoStWhrexks6jQRQj8gRv2/Qu
EOFTwphg+Eos4y03DVo4KCPyvrIfLivT1+KSA9+NugN2w83Bz2qv+wVh7osk8LXP
oN+Ong1+MpnJMU6SbbsAODFSgpyVjx7N3As6b3TCH/62NvGCajfeYDJwjsqa2MSi
MYDWjrqkQAnnDqVn4hyGks68+uXjTEJ8TxJhJVFOKMPFxXCvl1M5yS0r4OgsZvE6
O0VBxnRRFtZrf+OglXxuV+E8ko3KCQk9XpfX+7vqUUTqtSTWMOCj+S5up+hN0HYb
UtVYq9I8uO4c0Q1wIF3k4VDODQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:27 2025 by rpki-client