Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ecb99b-9ee1-4ffa-b08b-08713290667c/1/ECgBUtYffjgbxXu7w58Fg5Grx-k.roa
File: ECgBUtYffjgbxXu7w58Fg5Grx-k.roa (raw, json)
Hash identifier: GjDuRyKzp85uhj+uh4nJhFIBAZsl/zYfdbGp+pMgpOo=
Subject key identifier: 10:28:01:52:D6:1F:7E:38:1B:C5:7B:BB:C3:9F:05:83:91:AB:C7:E9
Certificate issuer: /CN=83900d6fb55a544ae2b12d363dacfe2b3c749a87
Certificate serial: 6026A9
Authority key identifier: 83:90:0D:6F:B5:5A:54:4A:E2:B1:2D:36:3D:AC:FE:2B:3C:74:9A:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ANb7VaVErisS02Paz-Kzx0moc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ecb99b-9ee1-4ffa-b08b-08713290667c/1/ECgBUtYffjgbxXu7w58Fg5Grx-k.roa
Signing time: Sat 01 Jan 2022 00:51:34 +0000
ROA not before: Sat 01 Jan 2022 00:51:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 193.163.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6301353 (0x6026a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83900d6fb55a544ae2b12d363dacfe2b3c749a87
Validity
Not Before: Jan 1 00:51:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10280152d61f7e381bc57bbbc39f058391abc7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:61:55:aa:f4:db:01:1e:eb:bf:7b:a7:47:
c0:1d:f9:e7:50:e8:57:a9:50:ba:22:a8:bb:bf:ef:
37:4e:93:cd:26:23:e6:6c:af:f5:ff:5c:55:20:39:
9d:bd:bd:91:1c:12:f3:62:ab:23:7e:8d:5a:54:2d:
38:f8:12:a7:f1:fd:b7:0c:3e:87:41:86:d6:91:7e:
74:c8:be:e0:85:80:b7:13:c8:59:0d:14:52:7f:90:
66:7a:e8:07:86:21:b8:6b:e9:d9:d5:7f:41:b0:45:
f9:8b:cd:9e:7c:b3:2b:5c:91:fa:21:7e:dc:d1:a4:
bd:ab:9c:24:2b:9f:ea:25:9c:33:b2:49:32:ee:e1:
cf:f7:ab:48:c0:42:82:a9:00:bb:94:01:5c:1d:5a:
5c:5c:42:32:dd:24:df:d5:89:ef:0e:4f:e8:63:16:
97:97:ed:05:a4:ce:81:b1:9c:c5:e2:a3:b6:5b:c2:
85:6d:6f:59:13:9d:a7:b6:76:7f:0a:0a:4a:60:7a:
8a:40:d1:07:80:a5:e2:a8:e3:9b:88:bd:bb:65:f1:
8e:5a:ef:8a:d6:04:26:30:50:5b:11:43:b4:37:70:
6e:5f:2e:36:bf:5d:ae:ae:35:89:6f:f7:7a:90:5d:
49:93:56:36:77:91:26:20:4f:bc:9c:f2:fd:0b:c7:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:28:01:52:D6:1F:7E:38:1B:C5:7B:BB:C3:9F:05:83:91:AB:C7:E9
X509v3 Authority Key Identifier:
keyid:83:90:0D:6F:B5:5A:54:4A:E2:B1:2D:36:3D:AC:FE:2B:3C:74:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ANb7VaVErisS02Paz-Kzx0moc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ecb99b-9ee1-4ffa-b08b-08713290667c/1/ECgBUtYffjgbxXu7w58Fg5Grx-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ecb99b-9ee1-4ffa-b08b-08713290667c/1/g5ANb7VaVErisS02Paz-Kzx0moc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.17.0/24
Signature Algorithm: sha256WithRSAEncryption
16:88:ed:10:d5:46:8f:da:2e:8d:16:8b:e3:96:1c:08:43:98:
10:b7:c0:ae:ac:b0:c0:26:4d:f8:fd:a1:b0:5e:40:45:30:aa:
a2:bb:49:fc:2d:56:5c:34:bb:3a:9c:49:0d:07:0f:cf:c7:93:
fa:2f:60:09:9c:00:40:98:63:eb:ea:4d:ef:30:67:ea:8c:d4:
e0:56:d4:5f:c8:3f:f9:98:2f:70:19:06:fe:57:c3:e9:73:3f:
d3:d2:04:0c:4d:8a:83:ef:23:a7:17:ad:4b:49:a1:34:8b:ea:
1e:27:e1:4b:92:e5:45:cb:93:3d:2f:e1:b4:e3:fc:08:f2:0c:
16:47:0c:65:36:67:cc:3c:1b:2d:f6:8b:42:1c:03:f8:16:1d:
ac:03:cc:69:fa:cf:a4:30:e8:00:29:41:25:db:b4:15:41:22:
79:89:24:2f:b2:65:a4:a8:0e:c5:a5:82:9f:0d:d5:76:73:23:
7d:73:48:5b:f0:bc:93:cb:99:e3:a1:f5:79:29:a8:0b:49:9d:
83:5e:5b:3c:47:3b:9f:19:98:9e:eb:30:d3:86:d9:04:b1:da:
bf:55:2e:f6:e2:ff:26:a0:0b:27:82:bd:c9:98:19:e1:4d:95:
df:f5:f3:6c:fa:d5:5a:fd:42:47:3a:a1:14:66:f7:fe:b2:63:
09:6e:f3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:22 2025 by rpki-client