Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/EHS9YBLn0wZci7aU46-w5GV2tSs.roa
File: EHS9YBLn0wZci7aU46-w5GV2tSs.roa (raw, json)
Hash identifier: s9I7Yll3+hGNHs/n7FFO3vhOBaiadb1OarxE64X3a14=
Subject key identifier: 10:74:BD:60:12:E7:D3:06:5C:8B:B6:94:E3:AF:B0:E4:65:76:B5:2B
Certificate issuer: /CN=8c89553041b0d35bf82ffb4a7ba7dea486193e4e
Certificate serial: 01856FC2564FD5F0F98D950DB7EB6494A95C
Authority key identifier: 8C:89:55:30:41:B0:D3:5B:F8:2F:FB:4A:7B:A7:DE:A4:86:19:3E:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIlVMEGw01v4L_tKe6fepIYZPk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/EHS9YBLn0wZci7aU46-w5GV2tSs.roa
Signing time: Sun 01 Jan 2023 23:54:45 +0000
ROA not before: Sun 01 Jan 2023 23:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43915
IP address blocks: 5.181.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:56:4f:d5:f0:f9:8d:95:0d:b7:eb:64:94:a9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c89553041b0d35bf82ffb4a7ba7dea486193e4e
Validity
Not Before: Jan 1 23:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1074bd6012e7d3065c8bb694e3afb0e46576b52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1b:ab:0b:bc:a8:99:f0:d7:d8:22:e6:22:2d:
f6:df:6c:7d:b1:0a:5f:79:3a:cb:25:6b:9a:12:ab:
79:97:e0:77:37:90:75:eb:c3:2a:14:46:e6:12:e4:
77:a0:07:fc:3f:08:33:df:ab:42:1d:25:f4:0c:8a:
b7:d5:19:dc:4a:0b:a0:f6:3e:1a:5a:72:01:3a:f3:
8f:d4:c7:3b:fa:b2:62:3e:79:4f:ac:5a:71:5a:62:
82:7c:6b:61:85:f2:e8:9b:26:72:84:d9:87:4f:5e:
e8:32:1b:28:3d:02:40:b1:a5:dd:22:87:84:d2:f5:
ff:3d:a1:af:ac:3c:fa:ac:aa:3f:f5:a2:cb:ff:9e:
4d:3a:be:91:d1:0e:88:ee:06:cd:42:98:d7:67:f7:
3f:77:d6:2f:b3:2e:b6:8f:78:9a:4d:d8:7f:ee:5b:
ae:25:d1:ad:cb:33:c0:be:47:f2:bc:49:29:66:f5:
3f:7d:8b:eb:bb:1a:dc:9c:e5:64:d2:c5:82:a1:b6:
2e:87:c3:56:b2:9f:80:7d:29:8d:29:7e:52:cd:aa:
b5:31:a7:6c:68:fb:9e:b3:06:d6:9f:f8:84:f5:0b:
b0:b3:84:11:61:e1:c5:bf:a9:67:9f:91:bf:a8:4c:
ec:c7:cc:3f:79:79:01:5f:f1:8e:06:99:9f:5e:94:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:74:BD:60:12:E7:D3:06:5C:8B:B6:94:E3:AF:B0:E4:65:76:B5:2B
X509v3 Authority Key Identifier:
keyid:8C:89:55:30:41:B0:D3:5B:F8:2F:FB:4A:7B:A7:DE:A4:86:19:3E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIlVMEGw01v4L_tKe6fepIYZPk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/EHS9YBLn0wZci7aU46-w5GV2tSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/4e95d7-7f76-454d-aa47-8389f43ed6f6/1/jIlVMEGw01v4L_tKe6fepIYZPk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.104.0/22
Signature Algorithm: sha256WithRSAEncryption
83:9d:ab:81:78:8c:f0:9d:68:32:0e:6f:1d:3b:01:67:cb:fe:
d2:ee:bc:25:0a:e2:1b:3c:d2:bd:9b:b0:09:4f:ab:0f:d5:a4:
d3:01:69:ee:99:6f:15:0a:43:9d:d0:7a:bb:7b:61:da:9d:45:
16:da:3d:f3:1e:f1:ad:5b:82:01:c3:1d:48:f8:51:d1:cb:6d:
94:98:96:93:ce:48:59:40:c9:df:75:33:b8:ff:8c:9b:c0:6e:
36:ec:15:1c:69:ea:b4:bb:98:9b:93:2a:3e:46:d2:92:8f:9b:
11:0b:c2:bc:8b:e5:e4:2e:37:3e:d5:3a:13:be:e7:df:5d:85:
ca:e0:cf:f5:a1:4c:05:fe:bf:71:30:46:b0:19:0e:ba:2b:b4:
b8:6b:31:8b:5a:80:e3:59:d9:a6:cc:31:2c:b4:19:e6:0e:20:
42:e9:88:bd:3c:7d:62:ba:61:22:a7:71:a0:6a:48:76:8f:96:
12:28:fc:d0:08:d7:f3:39:38:1c:53:80:b2:80:fa:bc:db:7e:
71:2a:5e:bf:a3:a4:5b:40:e6:b9:bd:d1:fd:cb:a1:64:76:12:
4b:e8:f3:86:61:59:6e:59:b2:ae:13:a8:91:50:f3:9e:22:ae:
27:db:0d:6b:31:b7:c5:82:95:4c:8b:fd:f1:ac:93:bd:6e:ce:
40:32:74:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:29 2025 by rpki-client