Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/eNatCM_ng_ZzT0XjnAhnE8JwsaM.roa
File: eNatCM_ng_ZzT0XjnAhnE8JwsaM.roa (raw, json)
Hash identifier: NiVcVjOLTxJgHF9YkgZvM/M3+zTG2kPIupDct4SjNb8=
Subject key identifier: 78:D6:AD:08:CF:E7:83:F6:73:4F:45:E3:9C:08:67:13:C2:70:B1:A3
Certificate issuer: /CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Certificate serial: 0194228D619FA491B0A69DE5EA0AA7504F16
Authority key identifier: D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/eNatCM_ng_ZzT0XjnAhnE8JwsaM.roa
Signing time: Wed 01 Jan 2025 15:47:58 +0000
ROA not before: Wed 01 Jan 2025 15:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50418
IP address blocks: 185.84.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:61:9f:a4:91:b0:a6:9d:e5:ea:0a:a7:50:4f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87663c5e14f13746c80f60ba363493d9a4934cc
Validity
Not Before: Jan 1 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d6ad08cfe783f6734f45e39c086713c270b1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:5e:ac:79:53:1f:cb:bb:38:a2:9f:01:66:
d7:8f:2a:99:ce:28:e7:61:4d:2a:79:72:f7:42:cf:
a4:40:65:e8:c6:4e:76:8a:f9:52:cf:57:99:7b:0e:
cc:1f:6d:a2:2c:88:06:c0:8b:32:1c:6e:2e:ed:5e:
9c:ce:f9:29:06:09:9a:c1:d8:35:da:53:f7:8c:62:
92:e9:71:b4:55:ef:ed:07:02:e4:a2:0f:98:ab:19:
6c:fc:6c:28:9b:9d:91:8d:2e:60:ac:f0:f7:61:ab:
2a:ee:95:ab:d0:37:a5:a3:47:66:a5:da:0f:db:ec:
e2:a1:60:4a:1e:6d:ca:37:34:a9:07:18:f6:05:41:
40:99:27:3a:c6:cb:e2:11:fb:74:c6:30:28:1e:6c:
c3:b2:f7:69:8b:8a:a7:f0:2b:fa:54:4f:9a:52:b8:
6f:5e:38:7c:e8:96:87:1e:3e:d1:e9:a2:29:f7:d5:
42:d9:b1:1e:d4:0b:fb:10:d5:6d:ef:40:e7:0e:52:
f5:44:74:46:6d:2d:cb:98:cc:df:0e:05:27:b5:ea:
c1:62:98:96:25:23:31:4c:61:9f:a1:d9:f9:cb:41:
4f:20:7b:95:b9:fb:43:c7:6c:3c:d3:32:63:16:40:
af:06:8f:1b:55:6c:cb:2c:e8:84:80:d5:a9:7b:18:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D6:AD:08:CF:E7:83:F6:73:4F:45:E3:9C:08:67:13:C2:70:B1:A3
X509v3 Authority Key Identifier:
keyid:D8:76:63:C5:E1:4F:13:74:6C:80:F6:0B:A3:63:49:3D:9A:49:34:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HZjxeFPE3RsgPYLo2NJPZpJNMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/eNatCM_ng_ZzT0XjnAhnE8JwsaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/10ef17-e107-49da-8190-d99da970ffa2/1/2HZjxeFPE3RsgPYLo2NJPZpJNMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.32.0/22
Signature Algorithm: sha256WithRSAEncryption
18:19:e6:4f:97:4c:bd:28:8b:25:f1:63:58:c4:99:dc:a9:c8:
cd:c4:a4:8e:0c:ce:4c:56:ae:ee:c4:96:8e:4e:1c:dd:a7:98:
16:fd:aa:38:0b:8b:d0:55:0d:42:82:49:f3:c4:c8:f7:58:27:
df:06:74:07:c7:35:a0:b2:22:b5:8c:bd:fb:c1:33:16:ef:90:
22:80:41:fc:e8:7e:0d:60:01:0a:63:48:99:16:18:44:a9:05:
a1:54:7e:15:33:32:ee:5b:0b:27:59:97:7d:a1:2b:d3:8f:34:
6c:33:52:ef:70:7d:bf:f2:2b:0c:44:00:dd:f1:52:97:c2:98:
00:19:ab:b2:64:7e:82:63:d0:76:79:5a:b9:ca:47:80:72:78:
20:5f:db:90:5a:6c:ac:57:55:c7:0b:0b:83:81:62:e7:37:92:
39:f9:9b:4d:f1:7f:30:d8:d2:9c:48:73:41:94:25:e4:08:7c:
c7:b8:4f:57:a5:cc:81:4e:df:04:a8:47:da:c1:b7:e2:21:9f:
b5:22:7d:5a:f9:87:c1:c9:98:fc:48:6c:d9:ea:d9:40:c2:c8:
dc:92:27:19:cd:56:95:0d:f4:b5:58:3e:51:8b:2d:3d:96:7a:
1e:25:56:d2:d0:82:c4:48:5e:cd:cf:19:f0:af:2e:cf:ac:45:
d2:9a:ec:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:40:05 2025 by rpki-client