Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/EJd7RB6104rigfxYA6H2NEGhVfI.roa
File: EJd7RB6104rigfxYA6H2NEGhVfI.roa (raw, json)
Hash identifier: S5RitAO3lMzWYOTR+Xp2ZZTi8664WSNZAx/7lRok7gc=
Subject key identifier: 10:97:7B:44:1E:B5:D3:8A:E2:81:FC:58:03:A1:F6:34:41:A1:55:F2
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 03C3F9CC
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/EJd7RB6104rigfxYA6H2NEGhVfI.roa
Signing time: Fri 04 Mar 2022 06:47:24 +0000
ROA not before: Fri 04 Mar 2022 06:47:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.130.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63175116 (0x3c3f9cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Mar 4 06:47:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10977b441eb5d38ae281fc5803a1f63441a155f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:d2:8c:75:5c:fe:a2:29:29:f2:f9:0d:2a:
24:cd:f0:f2:3d:68:30:1b:ee:26:b1:e0:49:0b:d6:
b8:e1:e1:de:39:a8:e9:ff:e1:04:07:02:34:82:81:
05:69:24:c2:ce:b7:f3:01:98:19:ff:ea:23:c4:57:
8e:d4:d3:0c:f4:2d:66:57:e6:4e:28:35:d2:fe:89:
bd:7e:0b:5c:6a:72:bf:38:9c:2a:2e:e9:8d:d2:9d:
22:ed:64:60:a2:79:fc:fd:55:a4:8a:db:12:ea:3c:
54:04:b2:ca:8a:c9:4e:29:0f:fe:36:48:fa:7b:ac:
ea:a3:cb:e8:0c:c2:67:dc:ae:f8:57:b5:60:a5:3a:
9b:f4:a3:de:d1:a7:2c:5e:d7:e0:72:89:ba:83:7f:
e9:68:8f:4e:26:52:aa:78:5a:f8:c5:fc:4a:b7:c9:
ea:13:17:0a:24:36:85:76:77:cf:60:41:eb:07:31:
a8:a3:f1:bc:3a:33:d2:99:c2:ca:e3:34:70:ca:e6:
a7:15:9a:bc:ed:2f:9d:95:14:f8:3f:e0:d6:1b:50:
74:b0:d8:10:cd:d8:9e:70:d8:ed:3e:34:56:f2:af:
9c:a1:45:bc:2c:bd:cb:11:e2:c1:8d:cf:ca:d5:0d:
a2:9b:e2:26:b0:49:d1:51:96:bc:f9:11:7d:f1:f6:
68:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:97:7B:44:1E:B5:D3:8A:E2:81:FC:58:03:A1:F6:34:41:A1:55:F2
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/EJd7RB6104rigfxYA6H2NEGhVfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.60.0/22
Signature Algorithm: sha256WithRSAEncryption
60:3d:0e:9e:cc:a6:0c:6e:7f:d4:cf:4e:77:16:c3:51:6c:d2:
b3:8e:34:fc:ee:4c:36:7b:97:79:a7:82:fb:c8:89:48:11:6b:
c5:03:5e:a8:67:20:2a:e4:89:87:6e:b9:bf:1c:e6:f3:e2:77:
c9:82:c3:e5:e6:38:ad:aa:4b:31:a6:db:9b:d6:b8:83:23:6b:
c4:40:a2:c3:23:60:52:c6:2e:4e:e9:26:d0:f8:97:0f:31:b9:
74:96:52:b4:2a:1c:73:d0:7b:c9:c2:6a:5f:e1:5c:dc:d6:5b:
80:e4:a0:f2:3d:a0:71:29:28:bb:c4:35:19:ca:06:eb:14:9a:
fb:94:ae:84:8a:cc:e6:86:e6:a9:8a:26:93:0b:84:0d:90:ae:
27:82:aa:a0:ed:95:d0:dd:01:a2:34:73:f4:0a:79:50:ad:4c:
46:37:ba:b0:e4:51:32:54:99:6b:45:bc:94:9a:10:7d:ae:dc:
54:13:57:d9:49:e3:67:d1:a4:0b:1b:80:31:e3:3f:cf:71:ca:
0c:3f:77:db:1b:ce:b1:c5:bc:41:e0:8d:3c:fc:c1:c4:9b:34:
44:ea:42:6d:52:d1:39:0f:01:74:59:58:d6:e1:90:09:1f:31:
86:cd:a2:33:d4:44:ad:49:36:c6:14:bb:8e:15:33:3e:4f:45:
ab:6c:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:52:24 2025 by rpki-client