Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/eUqrqzCmiK0DGVwUNEWeS5cErco.roa
File: eUqrqzCmiK0DGVwUNEWeS5cErco.roa (raw, json)
Hash identifier: Ly7r9Ry3Fe7jl6mk5kl5ZlNMw2d2AUHswJbKDBKe7hk=
Subject key identifier: 79:4A:AB:AB:30:A6:88:AD:03:19:5C:14:34:45:9E:4B:97:04:AD:CA
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 018234398D94985ABDBCD097CE56F8D3231E
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/eUqrqzCmiK0DGVwUNEWeS5cErco.roa
Signing time: Mon 25 Jul 2022 07:19:23 +0000
ROA not before: Mon 25 Jul 2022 07:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 212.2.236.0/22 maxlen: 24
141.98.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:34:39:8d:94:98:5a:bd:bc:d0:97:ce:56:f8:d3:23:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jul 25 07:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=794aabab30a688ad03195c1434459e4b9704adca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a9:70:59:96:7e:b7:5c:ab:a6:5a:b0:99:8b:
b8:08:aa:68:bc:d8:29:44:1c:ac:b9:3a:30:b8:9e:
21:0e:8c:3f:53:92:1c:48:d3:9e:bb:6c:40:0c:ac:
0c:d1:34:e2:29:b3:44:3f:36:b3:0d:25:13:0e:4e:
e6:e1:8f:81:fc:a6:01:51:82:df:15:56:c3:68:5b:
1d:2d:65:af:ed:dc:1a:12:ca:00:03:54:0a:5f:10:
be:86:0b:4b:21:65:ef:82:58:ab:d7:7e:f1:17:00:
67:fd:32:ab:79:54:0f:f9:e5:0b:ea:b7:75:a5:ea:
cf:62:d2:83:dc:2d:5c:3f:6c:8a:ea:d8:6b:1c:c6:
65:1b:36:f6:44:f3:7a:dd:69:fc:1e:4e:47:6c:9e:
ce:1e:b9:8b:c6:dd:4b:3b:45:4a:27:fc:5a:57:4b:
48:a5:50:e5:ca:3c:0d:a8:dd:4b:2e:6f:36:d8:c2:
a3:90:3b:ec:45:c7:df:4c:7a:57:ef:bd:61:79:dc:
ac:68:3d:5f:1f:8d:37:5b:4a:a9:5b:ea:ca:1f:41:
21:93:cb:3d:3e:a9:67:4f:e6:31:3c:85:d9:2c:7b:
c0:7a:95:d5:6d:f1:6f:b7:65:52:dd:ec:c4:a5:1c:
8d:c3:2e:2f:cd:db:3f:1d:4a:ee:0e:a4:58:db:85:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4A:AB:AB:30:A6:88:AD:03:19:5C:14:34:45:9E:4B:97:04:AD:CA
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/eUqrqzCmiK0DGVwUNEWeS5cErco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.72.0/23
212.2.236.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:30:45:66:31:36:47:1b:67:21:79:03:00:f6:15:08:46:7f:
dc:6b:a1:bf:7d:a5:32:4b:6e:29:07:28:48:14:38:6e:7f:e1:
49:a0:de:e6:5f:fb:91:90:b1:c6:44:88:04:1c:99:fb:ab:bd:
79:69:20:8c:fb:53:5a:53:81:88:9d:05:c8:eb:3e:ca:b6:45:
34:ae:74:3a:90:26:51:bd:11:d5:8a:b8:50:20:f5:1b:47:39:
f1:66:a4:69:51:24:4d:e4:19:51:47:0f:25:02:8b:7d:86:a4:
51:62:aa:49:90:fe:b2:cc:2e:c3:da:13:de:40:d9:85:b3:e5:
3e:94:7b:ea:d6:a1:16:5d:9e:74:6f:1b:8b:52:f5:fe:0c:7f:
56:27:1f:26:cc:14:a7:1b:2c:e9:3b:b0:ce:5c:66:c2:56:5e:
2f:fa:64:38:fc:5a:55:82:4d:39:44:aa:d6:4f:4b:af:9f:b3:
31:ce:0d:97:64:42:65:38:12:83:d4:dc:a0:8f:96:0e:36:82:
88:c1:ff:39:4c:ed:79:ee:9b:e5:93:4d:b1:62:fa:a5:56:d1:
c6:2f:13:44:db:9b:d7:c7:9e:fe:bc:f6:3a:63:61:bd:b4:45:
14:02:6c:8f:2b:81:66:15:3d:10:be:63:a3:3c:8b:e3:4b:03:
68:08:1c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:10 2025 by rpki-client