Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Eb4uZNoTbis1micT3DbIc1dFyVM.roa
File: Eb4uZNoTbis1micT3DbIc1dFyVM.roa (raw, json)
Hash identifier: X06D1xSu11QrvyPBrnBSLd/VAdyx1W8OhbHMY9Tus+g=
Subject key identifier: 11:BE:2E:64:DA:13:6E:2B:35:9A:27:13:DC:36:C8:73:57:45:C9:53
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019422FB98E311C268D4874DAE7D0E6BF49C
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Eb4uZNoTbis1micT3DbIc1dFyVM.roa
Signing time: Wed 01 Jan 2025 17:48:21 +0000
ROA not before: Wed 01 Jan 2025 17:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57747
IP address blocks: 5.180.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:98:e3:11:c2:68:d4:87:4d:ae:7d:0e:6b:f4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 17:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11be2e64da136e2b359a2713dc36c8735745c953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:76:0c:e9:41:a8:24:31:72:1f:78:d0:c7:42:
83:29:54:8c:75:c9:56:9e:b5:2a:8d:c2:b5:b7:c3:
26:b8:6c:85:86:b7:c7:a3:b5:a0:ec:a6:70:5b:a6:
c8:9f:4b:27:a4:3d:73:79:9c:0d:c7:c3:f0:24:5c:
cf:e1:82:0b:d0:6f:c7:9e:1e:24:6c:92:68:56:d4:
1e:d7:bf:32:68:bf:0d:4d:e2:e8:b7:a1:09:79:be:
d2:e3:60:66:54:f4:d3:0f:9e:e5:06:4e:73:43:fb:
65:bb:2d:30:87:59:db:51:00:5f:5d:c2:40:0c:df:
af:00:90:33:e0:4a:19:c3:54:76:50:0e:40:71:ee:
93:52:a6:55:ad:bf:75:2f:4d:f8:55:bd:c4:39:f6:
71:ba:cd:f3:e9:43:7f:8e:ef:c8:5a:09:80:37:a5:
3c:a7:dc:85:a6:5b:da:e7:fd:51:d4:d2:e4:70:8d:
ae:85:23:7a:71:86:64:5e:5b:34:34:fb:9d:a2:4f:
f6:a8:85:64:e6:0d:a6:38:2a:fb:cd:30:f9:5a:f7:
90:86:28:67:df:3b:16:38:db:b4:f9:09:9e:3e:5d:
be:b6:7d:7b:d2:81:9d:63:94:95:d9:2d:18:bf:14:
23:3e:60:42:a2:bd:82:8a:76:0d:54:4d:bb:64:46:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BE:2E:64:DA:13:6E:2B:35:9A:27:13:DC:36:C8:73:57:45:C9:53
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Eb4uZNoTbis1micT3DbIc1dFyVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.120.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:04:ed:3a:3a:a2:16:07:aa:ec:7a:8d:d5:5c:83:5a:f5:32:
5d:95:b2:e2:cb:7f:56:32:a0:7a:84:18:49:b2:7e:ba:aa:b8:
b3:45:f5:db:e9:b1:9b:f5:9a:92:ef:20:de:92:46:7d:b4:27:
2e:7c:d1:34:2b:de:4b:b1:3e:3c:6c:a1:5d:4b:b2:c4:ea:da:
44:aa:51:8c:2a:78:48:38:f0:a0:3c:0a:15:8a:73:4b:38:3b:
4d:f8:f6:b3:05:be:4e:ad:1c:22:76:1e:c0:cc:69:e4:a6:d0:
f7:0f:dd:da:f0:51:c7:eb:b7:02:4f:19:3f:1d:55:ac:89:b6:
b3:51:e5:90:0c:e3:f7:c3:c5:6d:eb:31:80:98:22:8f:e0:70:
0a:b8:93:5a:f5:e6:42:fd:11:c6:12:18:95:d4:87:4c:30:6d:
b8:3d:e6:6c:74:e0:01:51:1f:da:37:6b:94:3e:5c:f7:40:af:
6b:c4:bc:ef:2f:bd:88:53:82:ec:10:70:8b:94:22:50:85:40:
6a:fe:7f:8b:15:61:29:c9:05:48:7f:0e:a6:99:1a:42:36:58:
23:9f:c3:e2:27:52:ce:0f:7f:af:75:cb:ec:88:b4:27:c6:79:
83:05:76:3b:50:11:40:bb:cb:18:c5:02:fa:a2:34:08:cd:51:
f2:1e:0f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:59 2025 by rpki-client