Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/EH68L41xD3pAELgVd86O10m8MkI.roa
File: EH68L41xD3pAELgVd86O10m8MkI.roa (raw, json)
Hash identifier: kVF4w9/67ztXyrHF78GW0MvfXrSQ0p5+COw2F7wfCkg=
Subject key identifier: 10:7E:BC:2F:8D:71:0F:7A:40:10:B8:15:77:CE:8E:D7:49:BC:32:42
Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial: 019427486BFD1D29DFD2967C8714F6D45C66
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/EH68L41xD3pAELgVd86O10m8MkI.roa
Signing time: Thu 02 Jan 2025 13:50:45 +0000
ROA not before: Thu 02 Jan 2025 13:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3292
IP address blocks: 185.81.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6b:fd:1d:29:df:d2:96:7c:87:14:f6:d4:5c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Validity
Not Before: Jan 2 13:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=107ebc2f8d710f7a4010b81577ce8ed749bc3242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:61:bc:8d:f0:3e:ea:bd:3c:18:85:b8:77:1b:
58:3c:1d:15:4b:70:67:ec:92:fe:ed:76:5a:0b:e1:
f3:df:c6:7e:06:f0:04:cb:e3:c0:37:3d:0d:a2:9b:
2d:8e:b9:ba:93:6a:c4:ae:56:66:90:7c:a0:41:54:
1b:44:4d:41:35:3c:17:40:10:81:bf:f8:95:dc:df:
b1:ea:6f:fa:cd:f7:54:c4:d2:0a:84:fb:e2:e5:a2:
58:c3:d0:61:50:a5:e8:ae:b4:a1:42:76:5d:50:c2:
7a:71:61:0a:e8:a1:9a:18:aa:0c:d3:b6:a5:a9:ac:
f6:d0:1e:2c:eb:b1:4e:a7:7f:ef:a5:43:bf:12:96:
d2:c0:9b:32:bb:4f:61:d0:83:f9:ea:6d:d4:be:26:
f3:f9:4c:a6:ff:be:d9:fd:f7:c8:90:5c:be:ab:44:
f5:9d:41:87:6f:5e:0d:95:f7:81:66:d2:16:5f:35:
b4:b6:fa:90:a6:d4:41:e6:1f:71:93:db:6c:ac:52:
a9:cd:56:80:96:83:28:40:d3:7d:37:5e:a5:08:27:
2c:dd:b9:d1:c3:0d:9e:c7:e4:58:13:2f:c4:18:77:
68:bd:5a:e5:10:99:7e:be:0f:9e:15:3d:01:3a:ee:
c9:27:e0:23:b3:c3:33:56:14:ce:fd:d1:db:71:55:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7E:BC:2F:8D:71:0F:7A:40:10:B8:15:77:CE:8E:D7:49:BC:32:42
X509v3 Authority Key Identifier:
keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/EH68L41xD3pAELgVd86O10m8MkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.14.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:03:fd:86:ad:24:e0:ee:d7:06:46:fd:55:6a:8d:ce:9a:95:
53:62:0d:18:2c:49:de:9a:79:dc:82:6c:96:48:51:c9:2b:a1:
de:84:ce:ad:8b:6d:b7:0b:11:00:58:3e:b2:af:61:3b:31:ba:
f9:be:8e:61:9a:b8:3e:19:33:12:4e:d1:7c:cc:d1:d2:5e:cb:
da:5c:94:4a:87:69:06:9c:19:af:eb:27:10:47:cf:2c:34:cd:
4a:0d:a0:ee:c6:b5:8d:01:56:1c:2d:c3:91:e2:e3:1b:4b:85:
d1:a8:37:94:e0:f4:29:60:93:bd:d1:dc:da:be:12:ac:a7:b3:
80:b0:12:23:23:e8:69:d5:98:98:13:08:9c:f4:20:8d:71:9b:
c7:43:63:03:6b:20:58:b5:5b:10:4e:3b:df:f6:d4:27:a2:02:
4e:c9:7f:1e:77:1b:74:26:d6:9c:46:5c:23:a1:09:80:77:55:
bc:ec:d4:1c:09:18:32:f1:bf:8c:6a:4a:a8:2f:cc:ed:a3:d9:
ee:80:84:79:ca:ed:5c:a9:05:9d:7b:ad:7a:e2:bb:23:2f:b5:
57:e8:ee:7c:b7:dc:15:9f:59:7f:a6:da:f1:91:f4:42:bb:fb:
23:1b:d2:98:d2:00:1b:3d:25:a5:7d:70:a3:6a:25:a9:95:a7:
01:6e:32:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:55 2025 by rpki-client