Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/7EYd6lXppKtxMX0_PpUmVgI8V9Q.roa
File: 7EYd6lXppKtxMX0_PpUmVgI8V9Q.roa (raw, json)
Hash identifier: OoTm6XkXL/kkFD49lpD6sMTsDiNdGZqmGRAxoBK5vmM=
Subject key identifier: EC:46:1D:EA:55:E9:A4:AB:71:31:7D:3F:3E:95:26:56:02:3C:57:D4
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0184D54D5F6B9E26BD0A1F9FD86106812E34
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/7EYd6lXppKtxMX0_PpUmVgI8V9Q.roa
Signing time: Sat 03 Dec 2022 00:05:28 +0000
ROA not before: Sat 03 Dec 2022 00:05:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 5.181.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d5:4d:5f:6b:9e:26:bd:0a:1f:9f:d8:61:06:81:2e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Dec 3 00:05:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec461dea55e9a4ab71317d3f3e952656023c57d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:58:f0:d0:b7:81:77:74:a4:ce:c5:71:78:fa:
02:c0:8d:fe:27:7e:4a:3f:9e:94:fe:f3:34:59:96:
1c:17:2e:2f:94:97:76:8b:09:b4:64:d8:53:31:1e:
75:f0:71:ff:24:5d:4b:07:3c:5b:e3:2a:80:1b:dd:
64:86:c9:af:3b:16:c4:16:25:91:76:87:3d:54:30:
9f:6d:a7:c4:a2:a5:17:17:c1:b2:96:06:9d:51:ac:
55:b0:d9:a0:ee:89:70:29:68:e7:c6:b6:05:9a:75:
4b:8c:d7:ca:e5:55:0e:13:62:b2:b2:73:e1:10:8f:
12:d8:82:af:77:dd:95:2c:09:b6:42:00:90:13:58:
e0:4f:33:79:b5:6a:96:3b:b6:db:53:0d:e2:fe:91:
20:69:0e:87:51:36:1e:ba:f0:0f:08:5f:93:a3:45:
02:3c:22:c4:15:c9:32:ae:ea:7b:79:d6:0c:66:60:
86:b4:1f:c1:6c:bc:32:8e:db:b4:7d:f4:a1:c4:eb:
22:37:ed:5a:7e:74:3d:45:62:98:1a:50:12:a7:0a:
05:5d:7c:4a:4b:48:21:e2:d7:c6:cd:56:1d:4f:d8:
84:6e:b7:c0:d0:96:72:02:7e:9a:a4:c8:34:97:c9:
ec:01:c8:ee:51:c5:3d:10:5b:09:6e:35:ee:2f:89:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:46:1D:EA:55:E9:A4:AB:71:31:7D:3F:3E:95:26:56:02:3C:57:D4
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/7EYd6lXppKtxMX0_PpUmVgI8V9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.185.0/24
Signature Algorithm: sha256WithRSAEncryption
61:7c:e6:80:f8:e8:35:b4:d2:ee:92:db:11:c5:a5:00:ac:35:
64:4e:76:55:16:d1:32:a4:ee:38:13:02:ae:46:1f:42:8b:0b:
ec:86:6d:d2:39:58:f2:e3:46:f1:b0:af:7f:49:64:a4:eb:0e:
b9:bf:d4:07:6a:6a:fb:5a:1b:e2:17:3e:3f:b6:e0:1d:71:92:
57:a2:88:cb:28:8c:6c:42:b8:49:02:1b:45:e4:d7:4e:1c:a8:
fe:2f:f7:fa:1d:45:f3:34:01:0d:3f:92:49:74:4d:a9:80:f8:
96:89:28:0f:31:a4:37:95:14:12:a0:8e:58:4a:dc:fe:2f:cb:
ed:31:f0:ab:01:d1:51:b3:31:17:82:88:5c:9b:77:c1:2a:1f:
f7:ce:91:88:81:07:dc:1e:4f:2f:e2:fc:62:0a:cd:40:d0:9e:
50:64:bb:98:8c:a0:3a:9a:9f:c9:a0:68:c1:d5:d9:0d:39:40:
12:4d:86:fa:67:c6:dc:18:39:71:10:f1:a1:ef:96:b2:de:b1:
1e:d6:b6:2a:9e:f0:f7:72:b4:f2:09:eb:65:25:ed:2f:c5:a5:
2b:85:20:aa:6b:74:dd:40:b1:8c:ca:f5:2b:0d:c7:59:cf:ab:
37:1a:8a:c0:39:ce:a9:d5:9f:4e:49:d2:fe:b2:e2:bd:35:82:
cb:e6:10:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:35 2025 by rpki-client