Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/641aec-da38-4df3-8e71-f7fe3e473b12/1/EeOW3jI7n8xadVkeH70RY7nCHBc.roa
File: EeOW3jI7n8xadVkeH70RY7nCHBc.roa (raw, json)
Hash identifier: qbDA6KqgiZ6boNytllNYLylruseDrSvbrYqyaHcOwFI=
Subject key identifier: 11:E3:96:DE:32:3B:9F:CC:5A:75:59:1E:1F:BD:11:63:B9:C2:1C:17
Certificate issuer: /CN=cda81fe95261904e941237ea4c7cec8f768b046d
Certificate serial: 01856CE6282C0CC0EC6D9E5D1886F1FB3A0B
Authority key identifier: CD:A8:1F:E9:52:61:90:4E:94:12:37:EA:4C:7C:EC:8F:76:8B:04:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zagf6VJhkE6UEjfqTHzsj3aLBG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/641aec-da38-4df3-8e71-f7fe3e473b12/1/EeOW3jI7n8xadVkeH70RY7nCHBc.roa
Signing time: Sun 01 Jan 2023 10:35:00 +0000
ROA not before: Sun 01 Jan 2023 10:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398464
IP address blocks: 193.111.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:28:2c:0c:c0:ec:6d:9e:5d:18:86:f1:fb:3a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda81fe95261904e941237ea4c7cec8f768b046d
Validity
Not Before: Jan 1 10:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11e396de323b9fcc5a75591e1fbd1163b9c21c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:b1:e7:34:ef:da:38:88:98:5d:f7:13:21:
cf:90:9e:78:e1:d4:e6:70:1f:a2:29:c4:e1:8f:18:
74:d5:17:9e:4f:57:e9:67:f3:f9:ec:35:e0:3c:99:
1d:71:e5:22:f4:22:61:fd:e9:52:3a:44:56:b6:20:
05:99:c3:2e:2f:2c:95:0f:d1:69:4a:7a:b3:fe:44:
a5:ea:db:3c:16:d5:5c:c1:ca:29:38:70:ed:bb:73:
63:d2:1b:f4:34:42:8d:7c:93:f5:64:b3:5a:6a:02:
de:e3:09:81:c4:f5:f2:e0:3d:76:c2:3d:9e:02:f3:
fd:5a:d6:fc:6f:c5:f6:81:e0:11:d1:c5:00:83:cb:
8d:6a:88:10:7a:90:8a:6c:93:5e:7f:b2:85:2a:93:
34:f7:f7:5a:fc:a9:38:27:8e:8f:55:fe:ae:3f:b8:
0f:fa:f5:17:92:20:86:2b:46:3e:d7:ae:5a:5a:ca:
3d:c4:e1:38:e1:07:a9:c4:ab:23:35:e5:48:48:66:
82:cc:15:a1:34:a3:83:ab:d7:bf:f5:33:53:3c:da:
73:08:b0:90:11:20:73:ae:f5:13:c5:82:52:5f:69:
14:12:dd:6e:c7:d0:c1:3c:58:7f:74:5d:67:cc:6e:
35:da:7c:42:9a:20:b5:05:0f:5f:c5:99:2c:7b:50:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:96:DE:32:3B:9F:CC:5A:75:59:1E:1F:BD:11:63:B9:C2:1C:17
X509v3 Authority Key Identifier:
keyid:CD:A8:1F:E9:52:61:90:4E:94:12:37:EA:4C:7C:EC:8F:76:8B:04:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zagf6VJhkE6UEjfqTHzsj3aLBG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/641aec-da38-4df3-8e71-f7fe3e473b12/1/EeOW3jI7n8xadVkeH70RY7nCHBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/641aec-da38-4df3-8e71-f7fe3e473b12/1/zagf6VJhkE6UEjfqTHzsj3aLBG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.40.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:02:8b:d2:15:19:f7:9c:8b:4e:cf:cc:a4:04:4a:ce:d4:85:
2b:18:87:be:12:07:94:06:12:39:28:30:9e:b4:85:43:6e:31:
06:35:c0:2b:e2:51:9f:ee:17:94:33:5a:06:23:e7:a3:97:36:
3c:8b:69:26:16:fa:e1:b0:8c:2a:c6:a6:ff:2c:eb:fa:57:6e:
13:ea:97:99:cd:4f:d5:fe:cf:8e:76:d0:3c:77:68:5e:64:19:
ab:44:04:3d:6e:bf:a8:84:6a:d9:c7:aa:d7:d1:75:7a:11:d5:
78:a7:fc:e0:a5:53:10:3b:dc:98:1d:b8:ba:12:eb:55:10:a3:
2b:c1:8b:19:5e:eb:03:03:31:b5:ec:de:65:6b:a3:94:de:1d:
6d:5d:79:47:14:68:82:30:a8:42:e7:be:48:8e:f5:6a:c2:72:
d4:ff:88:57:ed:e4:35:dd:1c:6f:f2:32:bb:c6:69:8b:c6:d6:
9e:02:ac:0b:21:c1:1f:50:40:c2:aa:95:6d:c1:35:75:c8:f6:
e3:6b:f7:e5:e9:1f:46:ae:58:44:b8:1c:61:85:5f:f0:12:10:
b9:5c:ee:8c:b0:c7:fb:87:9b:cd:1c:d4:18:09:52:f1:c1:bf:
4b:05:dc:dc:ee:45:4e:ca:f8:f9:71:d1:11:36:fd:22:11:a3:
86:7a:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:03 2025 by rpki-client