Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/L3EzGRS_cQiiqxRcr6-IVlPq90c.roa
File: L3EzGRS_cQiiqxRcr6-IVlPq90c.roa (raw, json)
Hash identifier: WyhkbKAlOi0tYeIJPyH0sVoGZlIljn2uVDmX+5Mz2XM=
Subject key identifier: 2F:71:33:19:14:BF:71:08:A2:AB:14:5C:AF:AF:88:56:53:EA:F7:47
Certificate issuer: /CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Certificate serial: 019425219720F5B35852D76863E10708CFC1
Authority key identifier: 7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/L3EzGRS_cQiiqxRcr6-IVlPq90c.roa
Signing time: Thu 02 Jan 2025 03:49:05 +0000
ROA not before: Thu 02 Jan 2025 03:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59883
IP address blocks: 185.67.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:97:20:f5:b3:58:52:d7:68:63:e1:07:08:cf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be0af45ab4e57456f5a0a40dfa84f8d80610664
Validity
Not Before: Jan 2 03:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f71331914bf7108a2ab145cafaf885653eaf747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:12:6b:9b:f3:b6:4d:92:aa:ce:53:7f:ac:4e:
d3:80:b0:47:ab:29:10:44:64:9d:00:4a:e7:57:5a:
82:ea:06:76:0a:10:10:24:4e:8e:b2:10:45:ea:09:
3d:b3:d3:e2:74:13:00:86:f4:1f:b0:98:9c:c6:97:
e8:8b:f6:50:33:81:a4:28:e5:43:a0:bf:f7:64:e3:
a4:16:2f:b6:35:a8:6a:98:50:46:f1:aa:5e:6a:11:
62:c4:f8:b4:1c:53:d7:d2:38:dd:50:1d:61:4b:f0:
16:e4:04:06:9a:73:82:b9:d5:e6:15:cd:02:4e:e8:
0b:3d:44:62:27:ad:bb:71:be:45:67:ed:04:d3:42:
b9:59:ac:48:19:76:7d:66:5f:74:7e:83:85:fe:a0:
ad:23:58:2c:08:be:36:ab:c4:a2:d1:d9:18:ef:c9:
e1:46:3e:5c:da:03:30:47:71:8f:53:66:8f:1c:ab:
0f:5c:e1:9f:14:00:d8:40:63:4a:a1:47:55:0a:d7:
7b:e4:15:f6:0a:49:3b:e4:81:5f:a5:6e:67:78:9c:
13:03:15:ce:f4:8a:e8:94:52:49:1a:2c:9b:fc:80:
1d:24:bc:5f:27:5a:95:cb:b4:2e:d2:db:00:cb:f0:
7e:50:36:eb:bb:cd:f5:df:85:cb:40:e6:88:24:f9:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:71:33:19:14:BF:71:08:A2:AB:14:5C:AF:AF:88:56:53:EA:F7:47
X509v3 Authority Key Identifier:
keyid:7B:E0:AF:45:AB:4E:57:45:6F:5A:0A:40:DF:A8:4F:8D:80:61:06:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-CvRatOV0VvWgpA36hPjYBhBmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/L3EzGRS_cQiiqxRcr6-IVlPq90c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ac1fa9-4ec8-4016-9add-4c3be9a28d93/1/e-CvRatOV0VvWgpA36hPjYBhBmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:e7:fb:5e:c3:ff:db:28:59:cd:5c:fe:63:95:57:f2:c8:62:
42:15:be:c3:a5:61:98:ca:22:57:ed:e2:40:fe:22:f0:5f:e9:
18:b5:1b:26:a2:21:47:9d:bc:48:34:d8:72:91:45:f5:51:d2:
23:c3:18:8d:28:ee:be:03:10:1e:11:53:df:ef:67:c4:b1:cb:
14:58:e8:45:49:ee:84:7f:c4:9f:cd:b2:3f:11:e3:cb:54:c1:
bb:0b:dd:fb:66:5d:d1:94:9a:42:e5:64:b7:3c:4f:89:11:79:
18:21:dd:83:11:b5:4d:2b:61:41:39:fe:b4:75:ae:65:99:28:
ac:1e:bb:6c:a4:a8:ce:ad:65:2b:17:28:6a:b9:6a:4a:b9:eb:
12:d2:20:3a:01:27:2f:f1:fc:cb:c6:9b:a3:13:58:9c:aa:e2:
66:63:87:11:3e:80:bd:3d:6e:0e:56:4b:74:a1:82:00:d6:a6:
8e:b3:95:22:4f:82:19:a3:7e:d0:c1:06:57:94:da:6f:ac:b0:
46:f5:c1:af:6c:d5:4c:a2:cb:3e:f9:e1:f5:c6:a2:10:b0:15:
6c:b9:10:78:16:e0:c9:0b:83:a6:13:35:1b:50:68:80:57:a9:
d5:59:04:13:e2:7b:ec:72:f9:41:23:39:c7:07:54:83:54:29:
4c:fb:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:54 2025 by rpki-client