Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/EpmC3G1VIXauab4jMvtTd1agyGo.roa
File: EpmC3G1VIXauab4jMvtTd1agyGo.roa (raw, json)
Hash identifier: YG8Xyg5AxOK3qGg4f9ZG/c59vNSUoU41j+0gwUct3tA=
Subject key identifier: 12:99:82:DC:6D:55:21:76:AE:69:BE:23:32:FB:53:77:56:A0:C8:6A
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01856D785E8FC42EBC69EC51DB8B66B644E9
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/EpmC3G1VIXauab4jMvtTd1agyGo.roa
Signing time: Sun 01 Jan 2023 13:14:43 +0000
ROA not before: Sun 01 Jan 2023 13:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 5.181.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:5e:8f:c4:2e:bc:69:ec:51:db:8b:66:b6:44:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 1 13:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=129982dc6d552176ae69be2332fb537756a0c86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:21:ee:1b:ba:2e:d1:c1:4a:25:e1:cb:66:2e:
8d:b6:a8:5e:02:33:ba:7f:fc:5f:1e:83:f3:ae:32:
f7:b2:52:91:5a:45:2a:14:16:c2:ac:24:de:94:fa:
1d:0d:c6:20:ee:ec:cd:2b:f8:5e:30:e3:6f:91:be:
2d:df:b5:c3:17:de:4c:da:a2:45:a2:a2:d4:28:15:
6f:d4:ea:a3:9d:02:f1:b6:85:a5:c0:e2:cc:e3:55:
5e:e6:0c:c1:84:e7:77:2c:e3:e6:11:d7:28:b4:92:
4b:6e:49:b9:d0:e2:83:eb:d2:5e:87:87:1a:ca:77:
83:35:51:20:a9:4a:58:02:ca:52:a4:49:7c:4c:df:
8c:c6:5c:31:29:f5:3f:f8:48:2f:db:55:bd:83:a5:
16:a5:3c:62:13:a2:23:ab:f1:58:b6:99:f1:99:05:
15:0c:42:fa:6b:1a:19:d5:2d:ff:e5:e3:11:d2:79:
7f:db:81:04:f9:79:0a:2e:31:01:38:c2:2c:22:55:
f7:99:c4:36:12:02:ea:3f:0a:8a:31:f4:74:1d:a4:
14:20:5b:6c:c9:8d:c8:f5:ea:4f:aa:3b:20:c7:0d:
f5:09:49:fc:e4:7a:fc:40:b8:25:39:31:ed:09:42:
be:fa:fe:11:2e:49:1e:23:92:d0:56:b7:ee:3a:27:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:99:82:DC:6D:55:21:76:AE:69:BE:23:32:FB:53:77:56:A0:C8:6A
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/EpmC3G1VIXauab4jMvtTd1agyGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.185.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:15:0e:d7:71:c4:be:b6:ce:8d:d4:21:03:78:99:5c:50:5b:
d9:be:91:ff:67:99:89:d8:6a:5c:06:e2:ad:a5:7f:e0:3a:ad:
e7:32:22:9f:25:b6:67:c0:43:cb:94:25:f8:ac:9e:60:68:2d:
39:89:df:e0:fb:b9:0d:9b:02:09:08:3f:d9:07:08:f1:73:12:
b0:00:7d:98:de:7e:9c:82:dd:8a:60:0b:df:15:de:54:99:05:
b1:49:9b:eb:c2:36:c7:aa:dc:45:0d:98:4a:29:65:fa:8f:70:
7d:7c:9c:26:31:7c:8d:ce:f9:96:b0:34:71:50:0e:52:eb:e8:
a5:3d:88:6a:29:f0:d0:bd:a9:2c:8f:fe:df:40:98:75:9e:de:
62:41:54:e2:19:50:f2:07:38:16:bc:a9:2d:b7:eb:6a:74:b5:
f2:af:f3:4b:87:6a:87:5e:1b:11:60:ba:33:cd:f7:6f:8d:8c:
d3:b6:67:eb:6f:32:81:8e:1f:5b:ec:9c:2b:7e:2a:81:95:c1:
7b:6a:e9:9e:21:2c:6f:27:76:2f:98:87:15:26:7d:f5:93:55:
bc:69:2a:94:4a:80:74:c6:29:f6:0f:3c:04:a9:be:b7:8d:bd:
19:95:09:9d:31:d6:3c:e6:e2:28:8c:79:6d:87:b9:7e:cf:b5:
65:db:3c:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVteF6PxC68aexR24tmtkTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNDAzOTM5OTAxN2ZhMDkzZGM4ZDUwMzc5OWY2Y2E0MDNm
MGJkMDUwHhcNMjMwMTAxMTMxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjk5ODJkYzZkNTUyMTc2YWU2OWJlMjMzMmZiNTM3NzU2YTBjODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliHuG7ou0cFKJeHLZi6NtqheAjO6
f/xfHoPzrjL3slKRWkUqFBbCrCTelPodDcYg7uzNK/heMONvkb4t37XDF95M2qJF
oqLUKBVv1OqjnQLxtoWlwOLM41Ve5gzBhOd3LOPmEdcotJJLbkm50OKD69Jeh4ca
yneDNVEgqUpYAspSpEl8TN+MxlwxKfU/+Egv21W9g6UWpTxiE6Ijq/FYtpnxmQUV
DEL6axoZ1S3/5eMR0nl/24EE+XkKLjEBOMIsIlX3mcQ2EgLqPwqKMfR0HaQUIFts
yY3I9epPqjsgxw31CUn85Hr8QLglOTHtCUK++v4RLkkeI5LQVrfuOienywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBKZgtxtVSF2rmm+IzL7U3dWoMhqMB8GA1UdIwQY
MBaAFGJAOTmQF/oJPcjVA3mfbKQD8L0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtBNU9aQVgtZ2s5eU5VRGVaOXNwQVB3dlFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lYjIzOWEtMzNjOC00ZGJkLWJjOTYt
MzI1OTQ5NmU3YzVmLzEvRXBtQzNHMVZJWGF1YWI0ak12dFRkMWFneUdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lYjIzOWEtMzNjOC00ZGJkLWJjOTYtMzI1OTQ5NmU3YzVm
LzEvWWtBNU9aQVgtZ2s5eU5VRGVaOXNwQVB3dlFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbW5MA0G
CSqGSIb3DQEBCwUAA4IBAQBfFQ7XccS+ts6N1CEDeJlcUFvZvpH/Z5mJ2GpcBuKt
pX/gOq3nMiKfJbZnwEPLlCX4rJ5gaC05id/g+7kNmwIJCD/ZBwjxcxKwAH2Y3n6c
gt2KYAvfFd5UmQWxSZvrwjbHqtxFDZhKKWX6j3B9fJwmMXyNzvmWsDRxUA5S6+il
PYhqKfDQvaksj/7fQJh1nt5iQVTiGVDyBzgWvKktt+tqdLXyr/NLh2qHXhsRYLoz
zfdvjYzTtmfrbzKBjh9b7JwrfiqBlcF7aumeISxvJ3YvmIcVJn31k1W8aSqUSoB0
xin2DzwEqb63jb0ZlQmdMdY85uIojHlth7l+z7Vl2zxZ
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:28 2025 by rpki-client