Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/epd_CtAjAxmKlLVWK4MejPCbrP0.roa
File: epd_CtAjAxmKlLVWK4MejPCbrP0.roa (raw, json)
Hash identifier: 0dnWsomha/W/8R8fWmsUALHgoYnSIbxm53cGbRAlrgI=
Subject key identifier: 7A:97:7F:0A:D0:23:03:19:8A:94:B5:56:2B:83:1E:8C:F0:9B:AC:FD
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B0CEEE431956D2066304EF9585D20
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/epd_CtAjAxmKlLVWK4MejPCbrP0.roa
Signing time: Sun 01 Jan 2023 13:35:07 +0000
ROA not before: Sun 01 Jan 2023 13:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60420
IP address blocks: 212.243.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:0c:ee:e4:31:95:6d:20:66:30:4e:f9:58:5d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a977f0ad02303198a94b5562b831e8cf09bacfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:df:2d:da:97:5d:f8:c4:2d:96:b3:9a:89:3f:
88:67:f8:5d:14:23:f9:20:ec:e7:42:be:f8:13:2f:
dd:b0:e3:5b:ec:f4:6a:6b:60:3e:5e:6e:be:ad:74:
57:8b:f3:61:ac:ea:55:eb:28:b5:c4:d7:51:d7:84:
98:37:6c:6e:d8:fc:89:19:9e:7a:81:2b:58:2b:a4:
ae:df:7e:48:c8:21:7e:be:4c:d4:e9:3f:62:13:c4:
2f:85:45:7f:ba:be:40:81:91:7d:83:c8:0f:ae:e6:
a4:a1:f6:c7:93:f6:c5:08:61:da:be:28:bd:bd:af:
dd:c7:85:ef:3f:c9:25:ec:83:bc:97:f5:f4:0d:71:
57:cd:0d:5c:f7:82:94:b9:e2:aa:07:03:bd:01:4b:
42:11:c1:e3:9f:01:63:a9:47:41:75:ac:34:dc:ed:
34:6e:6d:03:7b:7a:55:b9:e2:51:37:4c:c2:ee:00:
46:ae:cc:aa:be:bb:6a:90:28:c8:d2:33:15:61:79:
97:1f:32:e8:f4:c5:32:12:4c:54:35:d5:4f:7e:47:
97:b2:72:ee:4b:1d:a9:1b:52:a9:0b:3a:10:f3:0f:
47:50:c3:12:3a:5b:7a:fe:f2:e0:d3:ca:af:9a:78:
cc:f3:a5:8d:91:0e:dd:1f:e0:9c:36:7c:34:aa:92:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:97:7F:0A:D0:23:03:19:8A:94:B5:56:2B:83:1E:8C:F0:9B:AC:FD
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/epd_CtAjAxmKlLVWK4MejPCbrP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.127.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c3:94:37:f5:48:f8:03:09:ff:54:17:a0:9c:1d:38:0d:40:
1c:5e:a0:9c:8c:ed:25:12:9d:9f:88:ef:8b:53:13:34:9c:37:
a0:a9:67:31:c7:8c:52:63:79:72:a0:9d:8d:97:4d:05:8e:c9:
cf:11:a6:ac:f1:ba:0a:a8:31:30:ac:58:43:63:25:53:5f:de:
c9:e9:84:01:c2:1c:1f:34:c0:9c:10:7b:a1:54:77:bb:18:65:
a5:ab:27:f0:17:d6:f9:52:6c:80:b9:22:4b:2b:69:c9:2e:8f:
40:27:b6:ba:fc:27:4f:cf:73:70:87:88:a3:14:fb:6c:12:fc:
b7:b1:c2:8d:dd:cc:e4:cc:c4:2e:e6:a5:ac:fb:7e:e0:d7:25:
e8:e8:94:92:d7:97:5e:02:0e:56:2f:db:38:42:9f:64:c9:f0:
2c:c6:b9:89:03:cd:d9:13:7b:9e:89:f1:4e:78:8a:2b:c0:86:
e7:3b:f6:36:d4:4a:dc:c2:52:49:fa:8b:72:83:1e:cf:6c:e5:
aa:5f:89:90:8f:9d:da:ae:47:00:2d:f9:69:0a:32:0e:a9:f3:
9f:a4:9a:ae:38:00:78:95:f5:0c:7a:37:8d:ce:d3:99:7a:42:
58:2c:ea:6c:70:cd:26:35:41:12:37:3b:ef:6c:a3:3c:f8:a5:
49:21:fe:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:23:00 2025 by rpki-client