Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ecatQ60PR4ZABtQadby43QvYgQE.roa
File: ecatQ60PR4ZABtQadby43QvYgQE.roa (raw, json)
Hash identifier: tfbvBzMCilzM1RJRKvm9qGo9TCrsGl/1WIt4SElLzag=
Subject key identifier: 79:C6:AD:43:AD:0F:47:86:40:06:D4:1A:75:BC:B8:DD:0B:D8:81:01
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CE9CB42DFC6D29BBA9770E051FDD6AD84
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ecatQ60PR4ZABtQadby43QvYgQE.roa
Signing time: Mon 08 Jan 2024 15:57:41 +0000
ROA not before: Mon 08 Jan 2024 15:57:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216051
IP address blocks: 87.229.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:cb:42:df:c6:d2:9b:ba:97:70:e0:51:fd:d6:ad:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 8 15:57:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79c6ad43ad0f47864006d41a75bcb8dd0bd88101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:9a:ac:2c:21:70:0e:24:62:a3:40:ed:e1:
90:33:bf:02:a8:ac:e2:51:5d:1a:62:95:97:0e:2e:
ef:b9:4c:c3:b1:bf:7f:53:b9:83:74:88:7a:0e:04:
c5:a5:46:de:40:aa:3f:0b:9f:6e:dd:73:89:5a:58:
94:59:d6:03:15:59:6c:9a:f3:18:7d:d2:46:31:82:
52:9e:87:d5:8b:97:32:aa:43:e3:aa:a1:bc:55:c9:
c6:52:de:3d:26:5e:90:e9:94:12:88:c9:e4:fd:fc:
7b:03:75:ad:82:fd:1e:b5:58:0d:ac:7a:e5:6a:a8:
9f:75:33:f3:62:e4:2c:27:09:d7:fd:2f:1f:28:fc:
a9:a2:e0:15:00:00:b0:09:97:76:dd:0c:20:4d:cb:
cf:b4:35:66:e8:50:2c:67:b3:b8:f5:a7:d8:2e:3d:
79:10:ee:ab:19:d9:79:fa:21:e0:75:38:f7:af:69:
ff:f1:34:4b:26:2d:d5:aa:24:04:71:8c:e3:21:9f:
10:8c:ae:2c:6d:9c:fb:5f:bf:66:d3:61:3d:5d:6d:
1e:2f:d3:fc:a9:25:b0:92:e3:ef:56:e2:8c:98:ea:
46:ee:f7:e9:b8:4c:02:1b:20:bd:70:f5:cd:9e:29:
1c:d1:6e:82:43:33:01:2c:51:aa:9b:82:da:81:97:
b7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C6:AD:43:AD:0F:47:86:40:06:D4:1A:75:BC:B8:DD:0B:D8:81:01
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ecatQ60PR4ZABtQadby43QvYgQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.0.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d5:13:cd:e9:a0:91:39:91:85:38:5e:18:dd:f6:02:ba:29:
ea:e9:ed:8a:b4:ba:5f:b7:73:68:6c:0d:4c:81:bf:4e:03:34:
9d:31:35:e0:99:40:08:20:ab:11:2b:f5:39:06:15:05:a5:43:
6f:90:36:30:88:1f:7c:d1:95:ef:e0:4e:6f:78:7b:fb:9f:9d:
7d:dd:6c:07:14:64:89:5b:63:a2:1c:b7:89:20:9a:11:98:0b:
05:a0:bd:0d:1b:31:33:7d:89:66:97:3c:6f:7c:8b:58:02:ce:
0e:36:73:93:ac:3b:3f:06:17:89:cc:84:0c:96:33:16:c0:64:
6e:13:c6:f2:44:33:1d:32:87:c5:ef:84:3f:3d:cf:94:c7:8f:
ff:a2:38:09:14:b7:61:99:0e:5e:1f:7b:06:99:c5:fa:c4:c6:
28:79:59:e8:30:ae:36:4a:6c:71:fe:3a:c4:28:60:73:f8:7d:
c3:39:60:83:c7:a9:94:26:ee:ee:2c:61:f7:c8:67:51:f9:92:
a3:b9:b1:22:54:5d:e2:6f:28:70:ce:10:37:00:03:67:58:f4:
30:19:0b:b4:e6:22:55:97:c5:b8:82:39:ce:03:89:1b:20:f0:
26:a1:98:c8:f5:31:ed:84:bd:3c:4d:d5:30:d5:cc:64:e2:3f:
67:50:22:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:51 2025 by rpki-client