Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/ErYXL0tPveelIbYByTXYN6rtU04.roa
File: ErYXL0tPveelIbYByTXYN6rtU04.roa (raw, json)
Hash identifier: CZPXfUmKwFdyX98/EkrVFRucoU/wQuReYYJzISDaWpQ=
Subject key identifier: 12:B6:17:2F:4B:4F:BD:E7:A5:21:B6:01:C9:35:D8:37:AA:ED:53:4E
Certificate issuer: /CN=921c2eb0164c18390030c5e705c4a3479150df9e
Certificate serial: 0188AEC6EC2511573FB790444A0F32C62DFB
Authority key identifier: 92:1C:2E:B0:16:4C:18:39:00:30:C5:E7:05:C4:A3:47:91:50:DF:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khwusBZMGDkAMMXnBcSjR5FQ354.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/ErYXL0tPveelIbYByTXYN6rtU04.roa
Signing time: Mon 12 Jun 2023 08:44:12 +0000
ROA not before: Mon 12 Jun 2023 08:44:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213098
IP address blocks: 195.62.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ae:c6:ec:25:11:57:3f:b7:90:44:4a:0f:32:c6:2d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921c2eb0164c18390030c5e705c4a3479150df9e
Validity
Not Before: Jun 12 08:44:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12b6172f4b4fbde7a521b601c935d837aaed534e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b3:7b:86:5f:87:55:fa:10:85:ef:ca:c0:0e:
bd:88:2b:e3:6b:4a:41:04:3f:4a:81:e9:10:46:61:
6a:4c:ee:c5:75:49:15:8c:4c:62:6a:ae:19:87:15:
f4:a3:49:a8:13:ef:f9:41:e5:e5:f4:6a:2a:e4:4f:
5d:1e:df:c8:44:77:19:cc:72:9a:5e:34:92:e2:2a:
1c:00:44:ef:9e:47:3c:93:78:46:0c:b9:15:65:db:
75:32:31:d7:96:b7:e7:90:e0:7c:9e:13:fe:47:eb:
10:df:97:1e:c7:eb:f3:8b:c9:88:d3:7d:c9:22:95:
b9:12:f9:04:8f:c5:d4:a6:d0:e2:26:3f:04:4f:35:
38:d4:93:6f:01:e0:09:d4:5c:dc:8a:9d:5e:3f:8a:
fe:ac:49:ed:5e:9b:7e:b5:42:91:8f:21:37:cb:58:
94:98:bd:d1:2c:e6:ea:da:f9:51:cf:2f:9a:5d:b3:
de:40:f8:ff:76:44:cb:5f:8e:1a:4c:72:0d:bb:ff:
e3:ae:7e:8a:06:a3:d5:1b:ef:ce:da:d8:a1:dd:e0:
e2:71:a7:9e:93:98:a2:11:23:04:3b:34:4a:7a:c2:
db:10:50:92:be:cf:fa:6a:59:7b:00:64:19:ab:4f:
32:8d:f3:b4:16:b9:72:f0:88:7d:89:93:46:42:1f:
f5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B6:17:2F:4B:4F:BD:E7:A5:21:B6:01:C9:35:D8:37:AA:ED:53:4E
X509v3 Authority Key Identifier:
keyid:92:1C:2E:B0:16:4C:18:39:00:30:C5:E7:05:C4:A3:47:91:50:DF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khwusBZMGDkAMMXnBcSjR5FQ354.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/ErYXL0tPveelIbYByTXYN6rtU04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/khwusBZMGDkAMMXnBcSjR5FQ354.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.88.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:2a:34:0e:b0:df:6e:0e:75:2c:a2:2a:fb:3e:3e:e1:95:18:
2d:21:b1:fb:53:31:30:11:64:1b:5c:05:ec:ca:53:27:5a:3c:
df:bb:7c:1d:44:09:35:df:20:d3:00:4c:a3:4a:f8:25:e7:85:
b0:8b:4e:92:bb:40:67:c6:48:be:a6:4b:7c:6c:10:95:68:b2:
4b:3b:3d:e4:3c:79:fd:28:25:94:46:f3:77:a1:ce:51:0c:7f:
fe:9e:f4:7b:a5:36:01:06:56:af:26:ad:52:af:6e:cb:27:83:
9b:31:4a:02:7d:2a:c1:02:e6:31:8b:d8:6c:03:f0:81:57:c3:
e3:18:72:ea:21:8a:27:7b:c3:10:f5:ee:e8:07:83:38:77:12:
24:7c:37:cc:84:0c:52:ff:d8:ad:17:4c:f1:e4:40:88:9c:2c:
e6:e0:0c:d4:79:c7:f2:12:1e:8e:f9:90:75:cc:b4:1a:d3:ab:
5d:79:d5:e5:4e:f0:35:03:43:7d:9f:34:d8:9d:c1:27:2c:1c:
15:de:ce:d8:e9:8e:c6:c6:5e:4d:17:f6:9b:80:ad:6a:4a:18:
87:d1:9f:0f:eb:99:cd:a2:ae:8c:de:79:4f:69:39:44:99:93:
b7:4c:16:43:9d:cb:db:e8:e5:ab:2d:19:29:44:f0:37:4c:35:
60:79:3b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:02:55 2025 by rpki-client