Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9d77c6-e210-4ed3-8bfc-effc7c2aeda1/1/EyCNiRQ2wmR7jj5yoBE0141Oz9Q.roa
File: EyCNiRQ2wmR7jj5yoBE0141Oz9Q.roa (raw, json)
Hash identifier: lnyQwoTkBnztFkmE5qT9NAQImiF15s4zzDbni3JBX6c=
Subject key identifier: 13:20:8D:89:14:36:C2:64:7B:8E:3E:72:A0:11:34:D7:8D:4E:CF:D4
Certificate issuer: /CN=1f1eac26efd7a7370d482344e3b2f346f6a865c9
Certificate serial: 0186FBC6129211E5C2C4B5019703195EE759
Authority key identifier: 1F:1E:AC:26:EF:D7:A7:37:0D:48:23:44:E3:B2:F3:46:F6:A8:65:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx6sJu_XpzcNSCNE47LzRvaoZck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9d77c6-e210-4ed3-8bfc-effc7c2aeda1/1/EyCNiRQ2wmR7jj5yoBE0141Oz9Q.roa
Signing time: Sun 19 Mar 2023 21:28:27 +0000
ROA not before: Sun 19 Mar 2023 21:28:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 192.188.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fb:c6:12:92:11:e5:c2:c4:b5:01:97:03:19:5e:e7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1eac26efd7a7370d482344e3b2f346f6a865c9
Validity
Not Before: Mar 19 21:28:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13208d891436c2647b8e3e72a01134d78d4ecfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8d:3f:65:60:30:2a:b3:ab:b6:b5:00:c8:be:
2b:81:a2:9b:11:be:53:ba:5b:f4:a8:50:ba:1b:b9:
60:38:f5:4d:81:c3:50:95:9c:b7:d9:f5:87:73:2d:
14:c3:ab:3c:30:15:a3:f2:a1:5e:04:05:4e:98:a9:
4a:68:bc:42:fc:9d:6d:cd:5a:57:5d:2d:82:c8:35:
6c:a3:f5:e5:d3:8c:9a:13:03:22:0a:f4:40:69:58:
0a:66:dc:e1:16:4e:3a:12:9c:73:9c:36:42:97:8d:
6f:6b:85:16:2e:0a:21:5c:10:c8:3f:fa:5d:c8:59:
46:ab:ab:43:3d:ef:06:c5:29:43:11:a2:fd:0b:b4:
c0:04:70:f3:6f:48:d4:12:90:18:6b:4f:45:bc:1a:
70:47:a5:63:89:71:4c:37:e9:57:7d:e5:00:1a:d4:
2f:83:2c:67:dc:4d:21:f8:8f:db:26:69:70:ad:aa:
5e:81:ea:f3:de:0c:71:b1:29:2f:3e:6d:08:eb:d2:
e2:c9:90:f7:f0:bf:ba:bf:10:33:b7:4c:18:26:b2:
80:ae:95:4e:4f:fc:d6:c5:53:ee:20:9d:0d:c0:72:
82:15:af:6e:64:43:1d:c6:62:e6:23:d0:be:13:69:
e3:8e:66:29:c1:79:55:34:c2:90:8c:87:80:ab:ac:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:20:8D:89:14:36:C2:64:7B:8E:3E:72:A0:11:34:D7:8D:4E:CF:D4
X509v3 Authority Key Identifier:
keyid:1F:1E:AC:26:EF:D7:A7:37:0D:48:23:44:E3:B2:F3:46:F6:A8:65:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx6sJu_XpzcNSCNE47LzRvaoZck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9d77c6-e210-4ed3-8bfc-effc7c2aeda1/1/EyCNiRQ2wmR7jj5yoBE0141Oz9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9d77c6-e210-4ed3-8bfc-effc7c2aeda1/1/Hx6sJu_XpzcNSCNE47LzRvaoZck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.10.0/24
Signature Algorithm: sha256WithRSAEncryption
17:60:25:02:73:8e:1b:f7:ef:d0:92:c6:0b:37:55:f9:c2:66:
52:f6:4e:93:24:ee:3e:11:0d:35:0e:97:5d:2c:84:18:3b:f5:
7e:e4:75:61:39:08:6a:90:53:f2:35:b6:84:e3:03:2b:56:f7:
32:12:e1:1c:80:c1:91:a4:a3:aa:bc:f4:e1:7d:1b:dd:6e:ff:
4a:5b:fe:59:5b:7c:e5:f0:8e:e5:f1:de:9b:cd:12:52:83:a3:
54:f5:b2:ad:1b:f6:63:6d:cf:f1:5f:79:c4:80:b8:64:47:17:
f7:cf:60:69:02:27:00:4f:d4:a5:cd:36:67:c5:f3:17:bc:f2:
bc:09:06:b0:ae:47:a4:44:1c:8d:d0:e9:a3:29:5d:7e:52:c2:
6e:80:e8:88:bc:2a:ee:4c:97:a0:e8:4e:b2:aa:ee:0f:b2:5a:
57:23:92:1c:c5:3a:7a:04:b2:c3:a9:21:3f:9c:4b:80:4a:ab:
6f:b4:44:fc:4f:cd:fa:2f:3e:8c:4d:e7:08:6b:31:29:53:c5:
17:e1:af:08:9a:86:32:45:4c:14:64:36:c4:d4:a7:d4:46:1e:
bc:dc:77:dd:f0:97:15:26:49:c7:e2:fa:9f:3f:21:dc:a1:9b:
2e:98:1a:f5:a8:21:b1:47:ba:45:72:93:03:7b:e8:e4:5c:11:
a0:05:3a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:56 2025 by rpki-client