Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/EUlbDJMpV7aONQ3sGXE2ow_fUxQ.roa
File: EUlbDJMpV7aONQ3sGXE2ow_fUxQ.roa (raw, json)
Hash identifier: NZQ8xidWLipha0Civ3r3Ms9yuTB7aTLxZ5E2oc2dUhU=
Subject key identifier: 11:49:5B:0C:93:29:57:B6:8E:35:0D:EC:19:71:36:A3:0F:DF:53:14
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 02A3FE41
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/EUlbDJMpV7aONQ3sGXE2ow_fUxQ.roa
Signing time: Sat 01 Jan 2022 02:53:18 +0000
ROA not before: Sat 01 Jan 2022 02:53:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210176
IP address blocks: 141.136.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44301889 (0x2a3fe41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 1 02:53:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11495b0c932957b68e350dec197136a30fdf5314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:13:1e:8e:3b:84:1e:58:9e:2f:87:bd:16:
41:ab:bd:4e:a0:22:67:90:2e:c6:7a:10:7e:5a:41:
68:70:41:70:39:79:88:43:15:0e:e3:7d:03:a9:10:
33:76:bc:2f:c4:9f:c8:a8:55:06:d6:61:f5:d4:73:
43:fd:67:d8:b6:f0:4c:79:08:eb:6c:35:66:9a:3b:
71:04:c9:2d:96:d5:af:2e:1f:92:3e:d1:22:fb:bb:
97:4c:c1:ef:d8:af:84:50:0d:7f:9f:1f:de:2f:26:
36:23:d0:d5:20:d1:bd:54:55:e3:2d:11:26:3c:2d:
1d:20:4a:3e:c5:5e:ad:61:9e:3e:c0:d4:77:3b:a8:
cf:0e:58:40:f9:1f:4e:53:ec:35:0a:d6:ef:95:cd:
bd:24:f5:aa:a8:0f:08:fe:4c:c0:b7:ea:80:1b:91:
bd:9c:f6:50:4e:a3:cc:52:37:8f:bc:dc:2d:41:95:
53:04:4f:b7:e1:c1:03:32:6c:14:66:79:86:1c:10:
5c:25:ae:11:e3:dc:c4:1c:b2:ba:84:39:5d:94:88:
cf:62:bf:fe:70:50:4a:c3:db:bd:89:f1:a8:11:e6:
11:32:72:1e:f0:63:f2:e8:19:59:5c:d8:76:a6:d8:
63:c6:28:96:08:79:b1:47:7d:c5:45:ed:7d:7f:ca:
8a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:49:5B:0C:93:29:57:B6:8E:35:0D:EC:19:71:36:A3:0F:DF:53:14
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/EUlbDJMpV7aONQ3sGXE2ow_fUxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.16.0/20
Signature Algorithm: sha256WithRSAEncryption
10:34:24:2e:a3:92:d2:24:d0:06:fc:b0:30:9a:b2:7b:f3:6f:
ef:2f:38:7f:34:d5:a4:3a:02:05:4b:c5:e6:aa:2e:36:41:c9:
4b:20:f1:ba:d2:0d:c4:e9:8b:7b:e1:41:9e:4e:fe:cb:57:31:
56:38:52:5f:0f:c4:17:89:fe:ee:92:f8:b3:e1:6f:14:0c:a3:
ef:fc:0c:33:ab:64:ac:cd:75:fb:e6:8a:67:98:1f:a6:f8:3e:
28:9e:19:04:f4:67:ef:22:ed:eb:b4:24:11:b3:46:31:67:40:
6b:63:cd:cd:4b:35:2b:ea:00:35:04:fa:3e:7b:ec:37:9b:49:
85:f8:df:38:30:91:10:6d:56:75:57:df:de:61:9d:d2:60:f7:
7e:75:fb:61:50:20:a5:90:55:76:5b:50:1f:8a:49:35:f5:28:
b1:5b:b5:db:b6:a2:a6:07:0d:9a:45:6a:c3:ae:6e:c7:f9:35:
3b:d9:2e:81:fb:64:c0:0a:40:60:90:4d:22:77:b9:c4:b0:f6:
da:a6:b4:50:dd:09:21:af:ce:5b:6f:61:cd:93:1c:99:c6:d2:
ec:db:b2:27:38:f2:81:b9:af:87:e4:58:be:a9:5c:30:89:83:
6b:31:a3:fa:03:0f:09:e4:4d:d1:eb:65:f8:d5:51:1d:13:65:
70:66:bd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:43:14 2025 by rpki-client