Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/db02f4-3908-4674-a0c4-0364cbe9bab8/1/EuqsCMwr-DnpVB4ozo1gIPZtG-U.roa
File: EuqsCMwr-DnpVB4ozo1gIPZtG-U.roa (raw, json)
Hash identifier: ZQlI2eASmVFgdSGVUAmWnv//BKEGp9bUYYr7QCjZj0M=
Subject key identifier: 12:EA:AC:08:CC:2B:F8:39:E9:54:1E:28:CE:8D:60:20:F6:6D:1B:E5
Certificate issuer: /CN=43e6eca34dc70c1f1bf1c4dd1b0a82093b354b72
Certificate serial: 018326EC4F6CD19152420AA52415F4265D78
Authority key identifier: 43:E6:EC:A3:4D:C7:0C:1F:1B:F1:C4:DD:1B:0A:82:09:3B:35:4B:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-bso03HDB8b8cTdGwqCCTs1S3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/db02f4-3908-4674-a0c4-0364cbe9bab8/1/EuqsCMwr-DnpVB4ozo1gIPZtG-U.roa
Signing time: Sat 10 Sep 2022 10:22:44 +0000
ROA not before: Sat 10 Sep 2022 10:22:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 45.132.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:ec:4f:6c:d1:91:52:42:0a:a5:24:15:f4:26:5d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e6eca34dc70c1f1bf1c4dd1b0a82093b354b72
Validity
Not Before: Sep 10 10:22:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12eaac08cc2bf839e9541e28ce8d6020f66d1be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:3d:3e:37:1a:93:28:7f:76:9c:3e:2d:4a:
97:91:a5:3d:b7:f6:44:8a:42:65:88:50:50:dd:60:
fc:c8:33:67:fa:d5:b8:70:57:61:1a:c6:e6:11:ba:
67:d4:eb:83:23:37:39:fa:06:91:6b:fa:e5:56:c9:
f8:f7:07:08:79:9e:03:e8:e6:e9:0c:51:ac:54:bd:
f4:c5:ad:90:7f:a6:89:3f:8c:48:24:e0:81:09:7f:
8d:40:e9:f0:92:79:22:b4:5f:8f:bc:42:0b:5d:8d:
2b:fa:74:25:25:12:dc:2a:4a:a5:09:c8:fe:41:0f:
b5:f2:91:4f:ae:7e:6c:2a:7e:d1:1b:66:cf:13:b1:
37:0b:a2:f0:06:b5:5f:97:02:b4:f4:3e:93:cb:47:
75:bf:00:60:af:a4:50:23:ba:a9:1c:ad:8a:ae:97:
d8:af:f6:ee:0e:1d:94:83:22:40:38:5c:40:4f:95:
c0:87:2c:b1:79:c6:40:36:2b:d9:5c:20:99:8d:83:
62:53:ed:79:19:a2:d5:f0:75:f7:6d:d8:6d:15:33:
96:c0:71:59:91:f3:63:0b:09:d5:bc:28:eb:93:98:
fc:05:a4:25:b3:fd:57:c7:0f:56:28:92:c4:0e:37:
a8:23:55:6c:e1:3d:37:3e:ee:f4:9f:16:e0:49:c1:
1a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EA:AC:08:CC:2B:F8:39:E9:54:1E:28:CE:8D:60:20:F6:6D:1B:E5
X509v3 Authority Key Identifier:
keyid:43:E6:EC:A3:4D:C7:0C:1F:1B:F1:C4:DD:1B:0A:82:09:3B:35:4B:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-bso03HDB8b8cTdGwqCCTs1S3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/db02f4-3908-4674-a0c4-0364cbe9bab8/1/EuqsCMwr-DnpVB4ozo1gIPZtG-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/db02f4-3908-4674-a0c4-0364cbe9bab8/1/Q-bso03HDB8b8cTdGwqCCTs1S3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.3.0/24
Signature Algorithm: sha256WithRSAEncryption
19:86:d0:e1:a4:f4:58:a4:02:fc:72:cc:15:32:4b:a7:05:29:
40:cb:03:97:ce:70:f7:88:8b:52:89:0b:61:a1:f4:45:e4:eb:
50:7a:d7:c2:cb:4a:26:05:52:65:f4:3d:6d:6c:a2:b0:ab:06:
5e:df:d2:be:83:3d:57:6e:7d:b0:13:26:a7:12:03:b5:3f:36:
7e:e5:e7:63:c4:6d:c6:90:05:43:88:06:ea:2e:b7:df:d7:7a:
d0:98:92:11:13:1b:a0:76:50:29:b3:80:36:f2:48:5b:38:fe:
fb:a5:7f:7e:34:bc:79:52:fb:79:66:f9:d4:74:0c:5a:ac:c5:
57:18:a3:f2:65:1e:14:98:6b:fa:18:7a:78:8c:df:ed:82:06:
fe:54:3e:96:d6:3a:b2:b1:5a:80:56:72:c7:9a:06:95:5f:f5:
d1:a2:fe:a5:5a:ce:53:f9:0c:f2:4f:4c:68:37:4d:b2:8e:f1:
81:75:a9:f8:b1:46:8b:54:eb:58:9a:38:2c:45:b0:3a:a0:f6:
0d:71:7a:4d:f4:69:a7:0d:de:ae:bd:f6:8a:90:0b:0f:85:ad:
de:bc:78:06:b8:eb:30:b0:8d:46:f1:c2:13:77:60:f1:45:0a:
f6:94:02:c4:99:44:c8:25:bf:e3:88:fd:83:b1:e9:ad:75:b2:
56:09:10:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:37:52 2025 by rpki-client