Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/0EBJnCKOJOeRx6GJbxWTcRasXDQ.roa
File: 0EBJnCKOJOeRx6GJbxWTcRasXDQ.roa (raw, json)
Hash identifier: c+7KF9cClxiMxts50givjKrUTfVtkv3/Banv5EM/Tts=
Subject key identifier: D0:40:49:9C:22:8E:24:E7:91:C7:A1:89:6F:15:93:71:16:AC:5C:34
Certificate issuer: /CN=9eeff08b5c06c65127c43dca4e4b5ba7a55e176a
Certificate serial: 0C4D39C4
Authority key identifier: 9E:EF:F0:8B:5C:06:C6:51:27:C4:3D:CA:4E:4B:5B:A7:A5:5E:17:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu_wi1wGxlEnxD3KTktbp6VeF2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/0EBJnCKOJOeRx6GJbxWTcRasXDQ.roa
Signing time: Sat 01 Jan 2022 15:56:34 +0000
ROA not before: Sat 01 Jan 2022 15:56:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39886
IP address blocks: 109.94.32.0/19 maxlen: 19
213.111.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206387652 (0xc4d39c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eeff08b5c06c65127c43dca4e4b5ba7a55e176a
Validity
Not Before: Jan 1 15:56:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d040499c228e24e791c7a1896f15937116ac5c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:26:78:6c:c9:92:9b:03:2c:c0:7a:07:60:
0a:c8:bb:81:ed:d2:b3:75:d3:12:9d:f1:7f:63:72:
3d:04:dd:f4:20:35:3e:43:8f:78:f8:c6:f3:75:bd:
7f:d7:b2:a0:81:78:d2:51:95:6c:42:bf:bb:c1:ad:
f2:cd:22:5a:58:ad:ff:a6:af:19:81:9b:e1:aa:79:
91:7c:ab:88:f6:17:6e:9d:ea:40:16:14:43:27:5a:
2d:97:04:ff:fb:9b:df:e6:37:c5:21:49:9f:e2:1c:
ec:45:83:8b:45:49:17:75:ea:4d:25:57:8c:96:02:
55:04:c5:2b:28:ea:89:b8:80:d1:87:bd:5e:46:c7:
7e:25:30:53:1f:3a:91:12:59:b6:23:dd:d2:34:0c:
f6:42:25:1a:6c:9d:1c:e4:d9:50:38:9e:c5:eb:27:
03:88:dc:bd:e3:88:e8:cd:46:8b:0a:18:6d:b9:8d:
07:0d:cb:11:2a:fd:3a:3e:bc:d0:ea:2b:64:a7:15:
27:4e:4e:e2:b6:91:3a:43:52:ed:83:d5:db:92:eb:
3c:eb:20:da:b2:17:f7:90:e8:e7:0c:e5:f8:4f:e7:
41:59:d9:92:7a:28:b2:5c:8d:b3:59:03:ba:74:b6:
e1:b4:0c:b8:19:30:fb:4a:ac:9e:e9:1b:7b:6f:f3:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:40:49:9C:22:8E:24:E7:91:C7:A1:89:6F:15:93:71:16:AC:5C:34
X509v3 Authority Key Identifier:
keyid:9E:EF:F0:8B:5C:06:C6:51:27:C4:3D:CA:4E:4B:5B:A7:A5:5E:17:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu_wi1wGxlEnxD3KTktbp6VeF2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/0EBJnCKOJOeRx6GJbxWTcRasXDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/442955-c57d-4118-a49a-77c632a0b87c/1/nu_wi1wGxlEnxD3KTktbp6VeF2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.32.0/19
213.111.0.0/18
Signature Algorithm: sha256WithRSAEncryption
7a:7b:b0:21:b1:7f:ec:92:d0:39:80:11:8d:c3:9e:b0:11:bb:
32:99:c8:1b:08:0e:0a:cf:f8:44:cb:5d:bb:16:0f:5e:63:0a:
01:f7:c4:bf:f2:91:32:71:d1:2c:de:af:e4:6a:a7:58:8e:9d:
e3:a7:45:e6:e5:80:7c:62:10:b9:bf:cb:14:06:f4:87:65:b7:
b3:62:b9:dc:78:ef:9a:f3:1d:e9:00:65:26:c8:6b:ba:c1:f6:
21:be:65:cd:2a:a1:db:bf:e3:0c:da:d4:c9:f4:a1:1b:ea:a2:
52:10:85:f0:d7:28:68:59:27:ed:6f:30:7b:6f:f4:aa:e1:cc:
c8:ff:9d:83:11:24:4f:d0:97:9b:21:ac:27:3d:73:68:a6:cf:
88:f8:33:e4:9d:40:47:a7:ac:0a:4f:08:b8:59:f3:9e:09:c7:
a1:33:39:71:f2:c1:f1:49:62:c0:7a:84:c8:2e:89:e4:96:4b:
cd:1f:6d:3b:47:a5:d8:e4:af:20:8c:f0:03:25:b7:ac:60:e3:
73:2e:2c:18:b6:08:fb:d0:2c:f1:a7:57:f9:8a:db:7a:4b:9f:
ce:5b:6f:80:fc:3a:a7:97:1d:f2:e1:5c:0d:19:ba:31:8c:08:
26:2a:92:f1:64:5c:cf:cd:24:85:05:ad:4f:cd:ef:80:f1:84:
ab:02:16:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:00:57 2025 by rpki-client