Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/ER4ImcgGvLr6f81Eg8ksFIAXxxs.roa
File: ER4ImcgGvLr6f81Eg8ksFIAXxxs.roa (raw, json)
Hash identifier: 19hxWKwbDfQbmjKQ7htDfKTWr0+NCJ7nPluCqMMzzMQ=
Subject key identifier: 11:1E:08:99:C8:06:BC:BA:FA:7F:CD:44:83:C9:2C:14:80:17:C7:1B
Certificate issuer: /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial: 04F637E0
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/ER4ImcgGvLr6f81Eg8ksFIAXxxs.roa
Signing time: Tue 01 Feb 2022 23:14:31 +0000
ROA not before: Tue 01 Feb 2022 23:14:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212815
IP address blocks: 185.171.202.0/24 maxlen: 24
2a10:4640::/48 maxlen: 48
2a10:4640:1::/48 maxlen: 48
2a10:4640:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83245024 (0x4f637e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Validity
Not Before: Feb 1 23:14:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=111e0899c806bcbafa7fcd4483c92c148017c71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:a3:be:fb:00:17:3a:45:e8:00:48:45:d0:
4e:e1:54:ab:0c:1d:d5:b6:62:10:63:5c:1f:52:ac:
eb:ba:02:c8:70:9a:f8:91:70:06:ac:9b:c3:f2:2b:
bc:f8:82:c3:b3:2d:7c:4e:31:a6:aa:b6:88:30:48:
8e:1a:1d:34:7c:94:10:eb:4f:35:91:ee:fc:db:72:
fd:2a:1a:f0:23:47:75:73:e1:22:0c:7d:44:fb:66:
7b:9b:90:35:b5:b8:05:ba:c5:2a:12:a5:f1:fb:ea:
ba:db:1a:84:ca:36:72:fd:4f:61:e2:05:51:2d:ce:
29:37:b8:37:ee:ab:ea:9f:c2:b6:13:8a:67:b1:85:
6a:a9:63:c5:02:85:9e:ef:bc:ae:6b:f7:59:fc:bf:
7d:da:37:8b:71:1e:c7:cb:b2:b6:80:d5:11:c3:e4:
d4:5f:d5:d9:70:c9:d6:ea:05:b4:9d:b9:f0:7f:1c:
9c:e2:94:4a:1b:6e:70:ab:3a:20:79:6f:04:00:de:
88:83:c2:6b:4e:91:ce:bc:de:6d:0f:0b:a4:09:42:
96:7b:c5:e4:49:1d:8d:19:43:c4:d4:e7:b6:40:32:
ec:82:ed:ff:4a:88:48:ce:4c:c9:14:72:15:90:ff:
b0:78:9c:88:44:71:d0:5f:65:29:a1:ff:ce:d7:ef:
18:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1E:08:99:C8:06:BC:BA:FA:7F:CD:44:83:C9:2C:14:80:17:C7:1B
X509v3 Authority Key Identifier:
keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/ER4ImcgGvLr6f81Eg8ksFIAXxxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.202.0/24
IPv6:
2a10:4640::/47
2a10:4640:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
24:93:84:19:c0:55:2a:b9:38:53:14:2d:d6:b1:c9:9a:c1:c6:
9d:e1:4e:0f:80:5f:dd:7a:e6:59:ba:2c:e5:1a:2e:41:3d:63:
bc:31:19:92:4d:f7:8e:a5:65:53:16:8f:79:03:94:6f:c1:4e:
32:b4:84:15:48:cf:ef:be:eb:78:10:f2:7b:ed:ca:35:e7:1e:
81:20:b8:2a:4b:2b:bb:82:b5:34:1e:ea:71:e2:23:62:6d:53:
97:9f:a8:8c:9e:3d:84:76:29:3a:3f:75:fe:53:3f:44:d7:b3:
af:b1:28:85:2b:9c:0d:57:b2:6e:b2:e3:22:33:8b:de:6e:70:
ca:1c:d0:c2:1c:a4:c3:f0:63:18:e7:2b:d6:be:5f:97:21:50:
a6:ad:b0:e2:67:b2:fa:55:55:45:8f:24:7b:49:47:bb:1f:32:
1d:80:1b:0a:e4:d8:c8:1b:65:48:20:4a:31:0f:e2:b0:83:f6:
2e:76:da:11:9b:d0:ba:de:ab:8c:4b:e3:4e:93:55:42:a3:24:
90:84:f0:8a:f9:c7:3e:9f:4c:25:ac:dd:4a:26:8d:ae:8b:23:
c4:b6:6b:d6:bd:64:ff:72:be:9c:99:d4:27:33:90:7f:94:e3:
ac:68:d4:03:55:d4:80:b7:ec:91:c6:94:41:54:77:b9:1c:b1:
0a:e5:3e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:20 2025 by rpki-client