Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/ETTowzMStcjPa9M2XDlcDnKNTmA.roa
File: ETTowzMStcjPa9M2XDlcDnKNTmA.roa (raw, json)
Hash identifier: fqZVx4YuDIbrkiU0sIk8Uv1O0WPd65XV5EGW96+J2BE=
Subject key identifier: 11:34:E8:C3:33:12:B5:C8:CF:6B:D3:36:5C:39:5C:0E:72:8D:4E:60
Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial: 0183D5FA55CC941826EF8CF33AEED942D46F
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/ETTowzMStcjPa9M2XDlcDnKNTmA.roa
Signing time: Fri 14 Oct 2022 10:11:36 +0000
ROA not before: Fri 14 Oct 2022 10:11:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202416
IP address blocks: 82.136.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d5:fa:55:cc:94:18:26:ef:8c:f3:3a:ee:d9:42:d4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
Validity
Not Before: Oct 14 10:11:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1134e8c33312b5c8cf6bd3365c395c0e728d4e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:66:7d:40:26:8c:d8:32:52:e4:e6:13:22:e0:
2c:db:aa:15:f5:f7:a8:21:74:c6:4d:a6:71:a6:40:
cc:95:e7:fe:84:53:9e:4b:5c:99:66:f1:03:95:2a:
18:c2:1c:0e:f7:f5:8e:8d:f5:91:ff:a1:13:84:93:
57:80:d0:ce:ba:ac:89:67:d3:9e:28:db:76:ff:a0:
37:8f:ca:5b:4a:61:d6:6c:d2:34:c1:c1:04:e9:93:
40:9d:75:a4:9b:cd:fe:62:71:fd:2a:ae:bd:f4:1f:
21:83:c2:eb:85:61:c4:94:26:98:99:9e:52:db:fd:
b9:1e:59:15:60:eb:75:b3:ce:4a:7d:da:39:27:a4:
c4:fd:89:d2:66:79:4e:c1:cd:8a:97:c2:4a:6c:7a:
21:5c:1d:15:07:94:0e:f6:d1:ce:4a:8c:e8:67:ff:
08:ca:ce:63:3a:30:28:7a:14:fb:79:e1:3c:cb:3a:
bd:7d:cc:b8:ed:56:ad:5f:f7:bf:38:fc:79:16:d7:
a6:bd:a9:84:88:34:92:a5:3e:25:8a:df:02:cf:c4:
06:a6:3b:33:ea:b7:d5:28:bb:2c:60:16:f7:66:40:
6b:cc:f2:f8:97:99:7f:ce:8b:b4:e9:1b:9d:5a:db:
ca:77:a7:d3:27:b9:3c:1e:12:9f:ab:4f:e3:2d:d1:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:34:E8:C3:33:12:B5:C8:CF:6B:D3:36:5C:39:5C:0E:72:8D:4E:60
X509v3 Authority Key Identifier:
keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/ETTowzMStcjPa9M2XDlcDnKNTmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.136.32.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d3:d1:18:90:62:b7:58:1e:8c:8e:b1:eb:dc:3e:54:a8:5c:
0a:63:0d:75:0c:90:23:6c:67:87:12:7b:36:7f:23:da:8c:04:
aa:ce:ad:c8:ea:fb:ac:a3:f6:29:9f:9d:64:ba:32:61:e4:d5:
d2:2e:55:ee:e2:2a:e1:8a:9f:64:2c:07:65:97:00:e4:4d:75:
bb:9e:0f:68:34:dc:27:db:53:2c:0e:35:66:ad:e1:39:5f:f9:
f1:88:e7:6b:d7:6d:65:d9:40:9c:b2:a6:29:67:64:97:cd:66:
70:9c:83:10:4c:e3:de:b3:b7:15:78:b6:1f:b5:29:82:a0:e0:
22:5e:6d:5f:41:e9:41:e8:fe:37:73:5c:10:6d:db:3f:a8:9a:
6f:8c:01:2c:ef:eb:c1:13:4e:f3:83:21:5e:45:d7:73:43:ab:
33:cf:8e:1f:68:41:27:be:05:17:5b:d0:f9:26:2f:02:bb:c8:
99:75:e5:a8:b2:a5:36:a0:74:74:b0:4f:1a:a9:45:64:05:a8:
44:64:14:c0:ff:b1:db:ad:30:df:6f:34:a6:4b:72:64:69:b7:
8a:9a:0b:d8:32:11:3c:42:eb:5b:5f:45:33:0a:d7:a0:17:75:
fa:5a:57:a5:e7:57:7f:8d:21:3d:29:a7:d9:68:e9:a0:d1:82:
4c:be:bd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:56 2025 by rpki-client