Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/ER7t5SAa5kZWB7XmPC91UdOAI2Y.roa
File: ER7t5SAa5kZWB7XmPC91UdOAI2Y.roa (raw, json)
Hash identifier: jg2qcTnyXYThom2MwjiyRwlWxnxLrQ7ByHNogoskZeA=
Subject key identifier: 11:1E:ED:E5:20:1A:E6:46:56:07:B5:E6:3C:2F:75:51:D3:80:23:66
Certificate issuer: /CN=a38bb1292f74d990ad3594c285c4ef0811c9e38d
Certificate serial: 018387F90942DE33CF58C887ABA8B16FAEDD
Authority key identifier: A3:8B:B1:29:2F:74:D9:90:AD:35:94:C2:85:C4:EF:08:11:C9:E3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4uxKS902ZCtNZTChcTvCBHJ440.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/ER7t5SAa5kZWB7XmPC91UdOAI2Y.roa
Signing time: Thu 29 Sep 2022 06:39:48 +0000
ROA not before: Thu 29 Sep 2022 06:39:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8608
IP address blocks: 185.94.92.0/22 maxlen: 22
80.85.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:87:f9:09:42:de:33:cf:58:c8:87:ab:a8:b1:6f:ae:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38bb1292f74d990ad3594c285c4ef0811c9e38d
Validity
Not Before: Sep 29 06:39:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=111eede5201ae6465607b5e63c2f7551d3802366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:be:e5:a6:32:9e:e3:a5:d6:71:27:09:e2:
cc:c0:ad:73:11:bb:7b:69:5f:fb:52:e4:1c:11:a8:
b9:7b:80:93:fc:31:87:00:20:0b:f7:2a:9e:ee:1f:
85:32:28:86:23:15:79:a3:7a:fc:9d:f1:38:bd:db:
9e:5e:cf:e6:63:b4:77:c8:dd:00:67:1d:55:eb:0e:
e9:4d:4a:b0:54:b7:82:26:fd:83:e2:3c:e9:30:0f:
4f:7b:84:12:bc:fc:01:10:bd:85:ee:35:28:d3:c6:
56:83:2d:01:d0:ae:61:06:f6:6a:6e:09:27:87:29:
09:43:5a:46:a2:07:93:bb:a9:44:9a:e8:08:ed:95:
25:79:07:76:0e:52:45:ca:f6:ce:f9:dc:bf:11:8f:
3c:2f:e4:61:8d:87:cb:f9:64:4e:e5:f3:0e:35:37:
1f:1a:20:8e:dd:f3:ef:34:7d:9f:fc:f9:3e:64:b6:
91:8d:e4:cf:fb:0e:4a:be:b3:f3:78:6d:a0:5a:6d:
67:60:03:f4:8c:e2:c0:0b:8f:87:a4:60:e5:56:3f:
0e:d1:9c:0d:4c:23:25:48:84:a6:1f:d9:ee:9b:f2:
22:fa:5b:c9:cc:53:bc:66:e1:ca:29:a3:c3:a8:bc:
7f:16:50:02:6a:3c:ae:53:4d:fe:92:fb:d7:66:b7:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1E:ED:E5:20:1A:E6:46:56:07:B5:E6:3C:2F:75:51:D3:80:23:66
X509v3 Authority Key Identifier:
keyid:A3:8B:B1:29:2F:74:D9:90:AD:35:94:C2:85:C4:EF:08:11:C9:E3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4uxKS902ZCtNZTChcTvCBHJ440.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/ER7t5SAa5kZWB7XmPC91UdOAI2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/o4uxKS902ZCtNZTChcTvCBHJ440.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.32.0/20
185.94.92.0/22
Signature Algorithm: sha256WithRSAEncryption
43:fe:fa:c0:86:c3:ef:2d:f6:0d:0b:1f:88:69:29:2f:2f:cf:
52:48:7f:c5:c7:16:90:ac:5c:e9:b2:ec:93:d2:5b:98:1e:2f:
e6:18:dc:f4:87:7b:ab:fb:94:94:50:55:21:93:dc:40:f7:83:
6a:6b:a2:13:88:0f:f9:f6:48:07:d8:e1:5c:d0:c2:59:b9:52:
e5:c4:ba:37:d1:4d:ea:8a:41:d1:d9:f2:97:b6:2e:ea:53:dc:
f3:08:64:89:b2:61:12:57:45:60:9a:5c:24:c2:8f:05:02:c6:
8f:8f:8f:2c:6f:82:e4:ac:db:f3:95:75:88:84:f9:45:58:74:
9f:59:61:d2:8b:72:8e:e9:03:9f:2b:57:66:07:39:e5:bb:25:
40:b1:0b:9a:d8:3a:76:b8:bc:4f:9b:2a:59:eb:68:c7:25:2f:
cd:8d:d9:c8:ab:cc:8c:15:2f:3b:5e:8a:5b:6a:b4:7a:05:60:
01:d8:63:e1:7e:93:f5:58:f8:27:eb:fd:ca:58:8d:6f:20:05:
b6:43:32:e6:b4:21:96:c3:af:47:b7:22:f3:ba:62:f0:dc:23:
db:27:90:5c:25:ab:1b:3f:8a:04:2a:b9:64:84:cb:9a:d6:8d:
97:60:78:ae:ee:c8:12:89:71:ac:b0:d7:ba:bc:e9:ca:bc:9a:
88:cd:86:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:11 2025 by rpki-client