Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/E1bqejAdTN3uYMBTKCwH33KmoEE.roa
File: E1bqejAdTN3uYMBTKCwH33KmoEE.roa (raw, json)
Hash identifier: /XRVb9kLwHV21UKOVZ0MM6evc9apWkwvTlQRZL1Tohg=
Subject key identifier: 13:56:EA:7A:30:1D:4C:DD:EE:60:C0:53:28:2C:07:DF:72:A6:A0:41
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 019421B2141E524A3749DD1DAB5B75BCC1B4
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/E1bqejAdTN3uYMBTKCwH33KmoEE.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20495
IP address blocks: 185.52.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:14:1e:52:4a:37:49:dd:1d:ab:5b:75:bc:c1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1356ea7a301d4cddee60c053282c07df72a6a041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:ec:7b:41:78:49:aa:17:4a:be:4a:ff:a8:
89:7d:50:4b:04:04:c9:d0:29:e2:ce:70:29:1f:9f:
b3:2c:76:f0:f3:8e:45:22:57:82:70:d4:89:3d:ad:
9f:9d:a2:a8:9a:c7:50:ba:c8:d1:9c:32:5e:7c:bb:
50:45:65:d5:4b:b2:4b:54:8a:5f:94:7b:2a:a9:fc:
03:63:00:c7:4a:38:45:91:b7:70:7c:47:f5:f7:e8:
04:bf:dd:b8:48:5c:95:d6:83:9f:05:88:2a:37:a1:
32:51:8f:c2:40:a7:5f:f6:8a:47:54:8e:dd:19:32:
96:8c:73:83:85:4a:8f:73:54:b4:27:91:83:98:07:
dc:68:49:b5:fc:e8:26:fa:cd:6b:d1:18:d1:2e:c9:
f1:0a:66:6b:b0:12:66:aa:ef:6f:6e:aa:71:93:b2:
35:98:2a:df:78:f3:1a:18:d1:b2:bc:4b:2a:04:c6:
8f:92:54:3f:45:92:82:39:70:f8:1a:34:84:6c:56:
0c:9a:3e:a4:e1:d5:c0:a7:15:62:dd:3b:f5:cf:e2:
0e:15:3b:70:b1:8f:1b:0b:88:43:4e:b6:ff:76:9c:
78:63:05:48:58:b3:ae:91:e5:89:23:0f:44:35:2e:
9e:e4:91:de:cd:88:b1:b9:c9:ba:bf:f3:d6:24:3a:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:56:EA:7A:30:1D:4C:DD:EE:60:C0:53:28:2C:07:DF:72:A6:A0:41
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/E1bqejAdTN3uYMBTKCwH33KmoEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.60.0/22
Signature Algorithm: sha256WithRSAEncryption
78:14:82:65:66:a7:00:a9:ac:35:c1:64:c9:22:ff:63:40:b3:
38:65:87:63:83:15:8a:d7:3b:0c:e1:00:10:fd:87:b6:f6:04:
9d:38:48:c3:d3:74:bc:eb:f8:54:6d:fd:61:b4:36:9d:21:e5:
d3:f6:2a:51:7f:2e:69:17:7e:dd:d8:8b:e9:ce:ad:f2:b6:d7:
b7:6e:5d:06:0e:93:9d:f6:63:70:5d:9f:79:e9:c7:26:e5:0e:
57:0a:3a:d5:e3:1a:e3:22:2b:22:f4:e3:f3:01:5b:66:70:20:
15:cc:c4:85:a9:1c:95:a6:0c:aa:83:5b:85:15:52:0c:9f:51:
67:32:0f:b9:19:d8:4b:5b:f4:22:24:38:ff:04:86:3a:79:46:
f1:7e:a1:b8:c6:66:00:e8:10:69:93:2f:92:52:15:a9:06:66:
4c:ff:d3:3a:c1:16:74:d3:4d:99:d8:92:38:66:28:21:a8:48:
81:08:2b:9e:32:da:d2:51:55:c7:49:c6:2d:ca:b8:5f:81:f1:
14:2e:93:ae:b3:50:3d:2a:2d:44:43:88:f1:db:8d:aa:af:a0:
dd:3b:88:c1:e2:78:b8:0a:86:e5:b3:65:85:8a:63:84:86:f4:
59:26:62:48:13:ff:d7:62:48:3a:40:1c:5a:e7:35:5d:34:9a:
79:72:a3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:48:05 2025 by rpki-client