Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/EcXVeLZGF2isDVGR_npcyvVHtis.roa
File: EcXVeLZGF2isDVGR_npcyvVHtis.roa (raw, json)
Hash identifier: 74ii2z9H6EyEbd8UKPQgliXQbUTkT7bMVv5HyoTjEoI=
Subject key identifier: 11:C5:D5:78:B6:46:17:68:AC:0D:51:91:FE:7A:5C:CA:F5:47:B6:2B
Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial: 0194282597AFA8EFEBD2BCC41AE025413985
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/EcXVeLZGF2isDVGR_npcyvVHtis.roa
Signing time: Thu 02 Jan 2025 17:52:19 +0000
ROA not before: Thu 02 Jan 2025 17:52:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 132.74.0.0/16 maxlen: 16
132.75.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:97:af:a8:ef:eb:d2:bc:c4:1a:e0:25:41:39:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Validity
Not Before: Jan 2 17:52:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11c5d578b6461768ac0d5191fe7a5ccaf547b62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:97:54:fc:d9:23:1a:b0:90:ab:d3:ab:a2:
1d:a2:1b:0d:98:ca:bb:13:6e:81:28:ce:18:08:64:
a3:28:c2:de:53:17:e9:0e:36:ac:96:d3:d4:fe:88:
ba:4c:f7:af:fe:3c:51:3a:d0:b5:da:63:35:66:04:
02:29:81:ef:21:fc:c5:68:98:94:3d:46:db:b1:c8:
a8:9f:28:20:59:c1:27:ee:c3:ea:85:28:d9:08:29:
4a:08:bc:93:e9:06:61:51:0d:35:6e:c4:28:b0:bc:
1e:3a:d3:18:df:cc:17:00:70:b5:45:a2:b8:ad:30:
1e:fc:3f:1c:3f:8e:a1:4a:4d:e8:c1:be:38:46:31:
85:97:fd:a0:cf:98:f4:42:a4:29:68:cd:3e:8e:b5:
03:67:5e:bc:ac:a8:ab:3a:2d:b7:a1:33:fe:1a:8c:
73:a7:0e:2f:7f:24:d5:c3:35:06:7c:58:06:20:88:
3d:e8:d4:72:9b:87:e3:e8:e9:8c:f0:6e:03:af:a0:
b4:da:09:02:09:b9:8d:34:ec:75:eb:0f:b8:1b:b7:
cd:ea:26:1e:e1:e6:29:3e:13:ee:e3:1c:62:7a:09:
7c:35:64:20:78:ea:cb:45:09:b5:a3:1a:c7:22:ab:
a6:2d:87:49:d8:05:c2:ba:c4:b2:79:00:a3:48:8a:
c6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C5:D5:78:B6:46:17:68:AC:0D:51:91:FE:7A:5C:CA:F5:47:B6:2B
X509v3 Authority Key Identifier:
keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/EcXVeLZGF2isDVGR_npcyvVHtis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.74.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0a:8d:32:4e:c4:9c:43:9a:3c:39:df:f1:f3:0b:35:ba:0c:bf:
a9:02:6b:05:de:8e:6b:08:57:84:9a:5f:82:13:ca:30:2f:1c:
63:81:12:ae:1d:5c:ba:ef:a3:69:d7:2b:60:57:c9:33:fb:e7:
1e:3b:f2:de:72:bf:3b:da:1c:57:fa:fc:25:e1:32:ff:21:9f:
cb:55:09:8a:76:5a:1b:99:27:56:57:99:54:1b:97:10:78:87:
19:01:a5:30:28:ff:3a:96:0c:f5:72:09:46:5a:a9:f1:41:a7:
08:1c:cc:9c:11:1e:04:22:63:74:7d:c0:a8:bb:9f:6a:b8:67:
74:79:55:7a:61:5a:b6:97:cd:ce:92:97:d0:9a:bf:2e:ea:99:
42:75:67:78:91:2e:35:9e:17:58:67:ef:fb:3d:1c:cd:bd:0b:
31:7e:b4:36:b2:9b:ae:f9:1c:ed:31:cf:77:4c:4a:a4:70:16:
34:67:a3:e9:6b:0b:73:82:31:48:8b:81:43:e5:1c:86:2e:8b:
10:d1:fd:12:56:4f:e1:7d:16:51:2b:42:3d:51:4d:b3:8c:ce:
52:35:02:5a:ab:b7:5d:9a:ca:4b:13:6c:3a:21:c9:30:85:3c:
73:e1:af:cc:50:bc:45:0b:c0:82:29:97:f0:59:4b:e7:71:e4:
d4:e0:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:31 2025 by rpki-client