Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/eChAGDbdQGMbx-CgEa8ktTddF6A.roa
File: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (raw, json)
Hash identifier: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=
Subject key identifier: 78:28:40:18:36:DD:40:63:1B:C7:E0:A0:11:AF:24:B5:37:5D:17:A0
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019422FC1632FA7B2D31244C577DA3BAF48F
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/eChAGDbdQGMbx-CgEa8ktTddF6A.roa
Signing time: Wed 01 Jan 2025 17:48:53 +0000
ROA not before: Wed 01 Jan 2025 17:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397630
IP address blocks: 81.22.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:16:32:fa:7b:2d:31:24:4c:57:7d:a3:ba:f4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 17:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7828401836dd40631bc7e0a011af24b5375d17a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:97:e8:d1:09:e8:4b:01:1f:4c:9d:98:8b:97:
63:45:62:cf:63:56:86:95:d2:06:fb:90:1a:2f:3a:
bd:8e:2b:7c:e9:de:07:ac:06:5e:33:29:51:c8:a1:
d5:f1:6d:97:72:57:52:3e:4a:38:e8:dd:6f:42:7b:
7a:eb:bb:38:27:0c:39:34:5d:f2:36:33:34:40:29:
52:ab:e8:e2:76:e8:33:58:fb:48:10:c8:09:f0:eb:
18:1d:56:ee:55:d9:34:c9:96:59:ad:c0:78:d3:36:
28:3b:84:26:a3:de:2d:40:44:ae:86:ea:d1:14:cd:
6a:69:20:d6:13:02:1d:66:96:4b:d1:c7:a7:d9:29:
60:70:d5:4c:80:88:8b:f6:39:12:fd:c3:97:c7:c4:
49:c8:a5:c6:0d:ae:3f:30:0e:e7:1d:0e:2a:5c:78:
96:be:f8:5f:72:79:56:46:fb:47:35:8b:6a:0a:b6:
3d:dc:24:b3:6e:db:fc:0a:b3:02:55:81:5e:a2:48:
d8:e6:1c:c6:cd:f7:31:96:dc:79:4a:76:dd:49:0b:
87:60:da:d3:e9:44:25:a1:c6:44:34:58:58:9d:9d:
44:65:c0:34:51:c1:c7:d2:98:72:cf:4e:ef:39:7b:
60:f9:ad:cb:69:5e:fc:fa:30:70:a1:55:10:0e:17:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:28:40:18:36:DD:40:63:1B:C7:E0:A0:11:AF:24:B5:37:5D:17:A0
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/eChAGDbdQGMbx-CgEa8ktTddF6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.140.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e8:75:13:1f:28:16:a1:c2:30:20:77:b8:4f:85:68:d6:db:
a5:4b:d5:d4:07:8b:bc:88:2b:83:fb:04:4a:0b:0b:48:cf:59:
9f:df:6c:f4:63:73:cf:77:e1:fb:c3:98:c0:cc:e8:c4:38:ff:
de:02:1b:c2:d4:5a:7f:a1:ff:88:84:94:b7:bb:1d:16:f5:34:
bb:e2:44:9d:27:83:7e:b3:31:d6:fd:b1:91:ec:31:37:31:e8:
b0:53:c1:be:31:34:14:92:6d:64:c8:49:a3:10:7c:dc:6e:bd:
77:be:5d:e3:29:40:81:0c:e4:16:13:ac:dd:c6:45:06:3f:86:
96:f7:9b:d7:5c:28:49:26:7c:88:cf:27:54:ae:60:5e:09:24:
8d:1a:a8:f2:ff:82:57:ae:52:fb:8b:5f:96:98:d3:e6:64:c3:
61:75:97:be:32:5f:5d:04:92:4e:f6:71:69:03:83:ff:8e:04:
3d:49:4d:bc:12:e7:5d:fe:fb:4b:19:52:7c:e3:04:6f:06:1a:
49:66:e8:27:45:6f:75:6e:76:f5:34:95:bd:76:cd:64:0f:eb:
bf:7c:90:b2:2d:b5:3b:06:8d:db:f8:66:10:66:95:f6:d8:22:
1a:26:de:94:d7:af:21:51:a9:c5:97:1a:99:91:63:94:24:b7:
0f:7c:da:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:43:24 2025 by rpki-client