Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/2e432b-ba9c-40e0-ba91-15de12543bb4/1/epzU4GX6QE3DLAdgyWMAQ836-0E.roa
File: epzU4GX6QE3DLAdgyWMAQ836-0E.roa (raw, json)
Hash identifier: l/2ikTVk8NvifNnO1Mowda0VoLl4scaKYyx/vVdPs84=
Subject key identifier: 7A:9C:D4:E0:65:FA:40:4D:C3:2C:07:60:C9:63:00:43:CD:FA:FB:41
Certificate issuer: /CN=e783c010ee0b0739fbf91ac8d31c0dd30c4a1ea0
Certificate serial: 01830E7A3A6D5AD2CFDB499E4EE1587B2A13
Authority key identifier: E7:83:C0:10:EE:0B:07:39:FB:F9:1A:C8:D3:1C:0D:D3:0C:4A:1E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54PAEO4LBzn7-RrI0xwN0wxKHqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/2e432b-ba9c-40e0-ba91-15de12543bb4/1/epzU4GX6QE3DLAdgyWMAQ836-0E.roa
Signing time: Mon 05 Sep 2022 16:27:14 +0000
ROA not before: Mon 05 Sep 2022 16:27:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 81.16.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0e:7a:3a:6d:5a:d2:cf:db:49:9e:4e:e1:58:7b:2a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e783c010ee0b0739fbf91ac8d31c0dd30c4a1ea0
Validity
Not Before: Sep 5 16:27:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a9cd4e065fa404dc32c0760c9630043cdfafb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:09:78:f8:4e:8e:5a:35:c7:8c:55:d4:a0:
02:c1:ec:e4:df:66:16:ef:89:91:48:69:ea:2b:04:
e4:3c:3f:34:d1:6c:2e:de:37:de:5f:a3:5c:27:c1:
23:ef:8d:21:38:3c:f2:21:62:1e:da:36:eb:6c:dc:
fb:57:76:07:2f:44:10:dc:6f:75:82:cd:18:6e:1f:
87:03:79:80:1f:ac:9d:98:aa:a1:6c:d5:80:4a:e6:
56:38:59:fc:ce:c7:5f:b1:3b:68:d6:1d:96:e2:5f:
ff:c5:8b:2b:fc:d3:42:0f:68:bb:c6:e3:fc:26:05:
98:b9:e3:d0:1f:92:43:75:b5:88:76:31:81:c3:fc:
6a:54:32:1b:83:dc:ff:fa:3e:c6:fe:35:ea:00:a8:
97:e1:77:72:0f:eb:92:b2:fe:ec:ff:3a:90:9b:65:
e2:55:70:b1:37:96:c5:c0:eb:e7:a7:49:fc:ab:e3:
81:f1:b1:e1:cf:bf:27:74:3c:bb:b6:c0:12:3e:23:
24:ea:a0:04:39:c0:23:d7:af:ec:55:ce:92:6e:3b:
c5:c1:c8:4e:90:f2:ca:00:fd:6e:31:43:78:d5:17:
6b:d9:c1:26:56:8a:aa:7f:d0:af:38:8b:42:14:05:
aa:a1:a2:47:9a:f3:f7:b4:80:47:9e:85:9c:0d:d8:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9C:D4:E0:65:FA:40:4D:C3:2C:07:60:C9:63:00:43:CD:FA:FB:41
X509v3 Authority Key Identifier:
keyid:E7:83:C0:10:EE:0B:07:39:FB:F9:1A:C8:D3:1C:0D:D3:0C:4A:1E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54PAEO4LBzn7-RrI0xwN0wxKHqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/2e432b-ba9c-40e0-ba91-15de12543bb4/1/epzU4GX6QE3DLAdgyWMAQ836-0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/2e432b-ba9c-40e0-ba91-15de12543bb4/1/54PAEO4LBzn7-RrI0xwN0wxKHqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.16.24.0/22
Signature Algorithm: sha256WithRSAEncryption
05:30:95:c8:7c:d6:a1:86:5a:32:a0:b6:3b:54:42:a3:31:74:
5a:fe:49:d6:3e:57:e7:85:44:fa:8d:8d:89:66:b5:8e:19:04:
a5:21:42:d1:71:af:ad:be:d7:d2:8c:de:c7:90:04:52:07:90:
73:98:44:bf:1c:fa:74:5e:0f:c8:b3:62:1a:cc:84:40:ed:e9:
25:97:17:9c:fb:b7:b5:a1:00:69:3e:bb:e9:51:05:af:08:c6:
03:54:36:94:de:cd:33:a5:c4:a4:ef:6d:19:14:0c:77:31:a0:
58:d9:a1:56:27:4d:dc:f5:f7:55:7d:ab:07:4c:7f:bc:37:db:
af:d2:8b:3b:7b:00:44:0e:28:1d:99:d0:8e:aa:3a:53:63:af:
f7:ab:b9:00:7e:bd:21:d2:e5:31:22:40:93:3c:4f:e1:fb:7f:
1d:b5:4a:eb:4d:62:00:e3:2c:f9:83:7c:e9:2e:6b:b1:a6:fd:
64:d2:5c:7b:d9:b8:c5:6a:31:de:78:3e:c4:7d:d2:f7:27:02:
de:c8:fc:66:57:82:7d:6c:68:d7:ad:80:fc:4d:ce:7a:48:9b:
4f:0a:ed:0a:b5:79:22:d4:cc:2f:83:2d:11:83:94:c9:52:93:
8c:52:0b:f4:75:b4:e1:bc:90:71:41:0f:f1:8c:31:e2:de:c5:
bf:90:df:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:15 2025 by rpki-client