Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/E2pZ3zzfP24IfVh_nHMkfIUgFwc.roa
File: E2pZ3zzfP24IfVh_nHMkfIUgFwc.roa (raw, json)
Hash identifier: E4jy7Tt2d7ZqMcRAguSWTi9cXzzbcEqYefE8k92QMQg=
Subject key identifier: 13:6A:59:DF:3C:DF:3F:6E:08:7D:58:7F:9C:73:24:7C:85:20:17:07
Certificate issuer: /CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Certificate serial: 018CCA9910695B958DEE873CB44EE2E94A06
Authority key identifier: 38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/E2pZ3zzfP24IfVh_nHMkfIUgFwc.roa
Signing time: Tue 02 Jan 2024 14:34:38 +0000
ROA not before: Tue 02 Jan 2024 14:34:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 192.145.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:10:69:5b:95:8d:ee:87:3c:b4:4e:e2:e9:4a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38401e58890bf230dcae5d0305119ff2c2b8d433
Validity
Not Before: Jan 2 14:34:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=136a59df3cdf3f6e087d587f9c73247c85201707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:b3:b7:33:32:bd:30:a2:e5:13:66:cf:dc:
05:f7:5a:90:9e:dc:c9:01:75:64:23:fb:14:59:e8:
a1:92:f3:63:0c:fa:72:62:3d:b8:37:e5:ac:cf:11:
34:2e:6a:9b:39:8b:81:36:a4:47:63:c8:19:6c:eb:
21:6b:83:9f:7e:53:48:24:ee:9e:cf:a7:c0:3b:16:
14:a4:95:09:de:7f:b1:0c:e7:69:df:12:8e:6c:b9:
eb:2a:0d:42:f9:9a:d0:69:9d:a2:0f:b4:50:e2:a8:
03:5f:90:b1:f9:67:df:5f:ba:f4:de:c9:0b:70:25:
dc:40:10:ae:94:e3:61:b7:cd:0e:a9:15:8d:46:75:
ad:53:80:30:86:70:2a:cf:20:18:f9:80:d1:1e:a0:
87:f2:a0:6d:68:46:aa:15:88:53:4a:1b:a1:d1:bf:
a8:65:4f:88:1a:0c:59:07:00:4b:d5:3d:64:7e:b0:
41:a9:4f:05:86:5e:c2:2f:03:82:e4:e4:ae:e9:dc:
56:7f:66:d9:5e:cc:78:d0:84:f1:e4:8a:38:2a:84:
c1:08:5b:4e:68:a9:0f:15:06:73:be:1b:8a:3f:93:
2a:62:d4:e6:62:30:30:f7:fe:67:9c:08:fe:82:71:
60:56:ed:64:50:99:5f:e2:d6:4a:93:53:ca:c3:80:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6A:59:DF:3C:DF:3F:6E:08:7D:58:7F:9C:73:24:7C:85:20:17:07
X509v3 Authority Key Identifier:
keyid:38:40:1E:58:89:0B:F2:30:DC:AE:5D:03:05:11:9F:F2:C2:B8:D4:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEAeWIkL8jDcrl0DBRGf8sK41DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/E2pZ3zzfP24IfVh_nHMkfIUgFwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/67d3b8-c43d-44b7-afa6-8b9cddb73408/1/OEAeWIkL8jDcrl0DBRGf8sK41DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.97.0/24
Signature Algorithm: sha256WithRSAEncryption
55:57:98:03:e2:9d:7d:64:d4:6e:1f:74:c0:33:a8:b9:95:74:
0f:e7:02:6e:6b:17:22:98:04:0c:ec:f8:fb:16:b0:06:a8:35:
17:cd:82:c5:e4:3f:7f:7b:52:5c:b8:31:29:03:67:20:92:24:
bd:31:04:e6:8a:0f:f1:60:a8:4d:14:6c:1e:7c:8d:0c:59:65:
5d:63:ce:97:a4:b5:d1:ec:24:fa:94:bc:45:9e:58:9c:09:e2:
bb:59:53:9c:0f:09:b5:f1:36:af:42:d1:a7:6d:db:d9:a1:c4:
43:41:ee:ac:38:35:d1:4d:88:9d:bd:75:43:6c:13:44:02:c6:
1a:26:b6:20:b3:e6:c7:10:5f:52:f3:e9:2d:79:6a:01:74:ed:
31:5c:bc:70:e8:2c:0f:06:31:4e:81:29:d2:34:14:f7:f7:16:
88:0b:25:54:d8:66:37:42:71:09:d1:0f:32:97:cc:d7:e5:ab:
3f:2c:4f:f7:87:6d:47:f6:10:5d:50:19:16:a4:2c:04:70:36:
03:a1:c1:a3:f5:ac:08:44:b0:84:c5:cc:a3:4c:c3:2a:8d:b7:
f0:39:0e:43:b5:8e:4f:f2:5e:21:3c:64:6d:d7:df:c3:77:e5:
cb:fd:3f:d2:cc:ec:a5:28:52:32:c3:0b:84:e4:8e:b9:5e:0b:
ee:97:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:10:14 2025 by rpki-client