Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/g4jxNzERwhz2euztXC81W8LDqfo.roa
File: g4jxNzERwhz2euztXC81W8LDqfo.roa (raw, json)
Hash identifier: LyKyIzm5y0wrCSm2/oGHQkQf0ILOhbKcY8i/juC584A=
Subject key identifier: 83:88:F1:37:31:11:C2:1C:F6:7A:EC:ED:5C:2F:35:5B:C2:C3:A9:FA
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 01942747FD029C11E0C8FC65C01761DAA06B
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/g4jxNzERwhz2euztXC81W8LDqfo.roa
Signing time: Thu 02 Jan 2025 13:50:16 +0000
ROA not before: Thu 02 Jan 2025 13:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 185.209.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fd:02:9c:11:e0:c8:fc:65:c0:17:61:da:a0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8388f1373111c21cf67aeced5c2f355bc2c3a9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:7f:49:63:45:11:ac:bc:4c:ba:38:d6:f6:
44:7e:51:90:63:37:a9:18:95:57:55:00:9b:36:f8:
be:12:0b:67:0a:c7:f9:73:44:96:9f:9c:6d:8c:9b:
3d:16:89:b4:6f:8b:fc:b7:c1:b6:a5:41:03:21:5f:
a4:b6:ad:10:f0:a4:59:46:f2:40:88:c4:30:ff:6f:
2a:b7:91:64:b1:0c:ce:33:19:55:43:d1:8b:08:2a:
b4:82:31:fc:ff:7d:b5:a3:85:74:e5:5d:62:7e:aa:
60:3f:44:35:d4:1e:10:3c:91:81:38:39:c8:70:e8:
70:18:c6:05:0f:95:b4:91:0c:ba:84:b5:8f:84:47:
6c:91:c2:5a:31:5f:81:27:6a:be:23:ad:a0:a0:70:
e0:ac:74:16:fc:57:cd:f7:08:03:77:bf:4f:54:b0:
4d:a5:c5:39:43:72:94:33:8d:ce:64:71:61:25:34:
8a:4d:3e:46:b2:4e:06:2a:fd:0c:3d:1f:05:9a:a2:
63:6b:50:0b:69:8a:b5:75:99:cf:42:25:23:7d:57:
cd:d5:d6:f3:b9:db:04:03:c3:64:f0:0c:6d:5f:13:
dd:b3:07:05:00:e7:b9:84:dd:e1:8b:a6:9b:ba:d0:
50:2a:08:8a:2c:df:8d:f2:6a:96:33:6f:0c:4b:0f:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:88:F1:37:31:11:C2:1C:F6:7A:EC:ED:5C:2F:35:5B:C2:C3:A9:FA
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/g4jxNzERwhz2euztXC81W8LDqfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.80.0/24
Signature Algorithm: sha256WithRSAEncryption
63:33:a3:3f:6e:40:3d:b9:5e:81:30:58:63:a5:8e:ca:90:f4:
ba:e5:42:e3:d4:ad:52:66:e3:8d:09:62:26:85:e7:e5:e7:bc:
d9:51:2a:88:db:b9:6a:23:f2:d7:80:6d:61:eb:74:f5:81:ef:
e5:5d:0e:72:4f:b0:27:3c:b7:f1:9f:75:88:f6:e3:2c:c6:f8:
23:37:3c:98:b7:3c:4a:73:6f:e4:35:b4:45:4f:57:96:b7:f0:
be:d8:d4:0c:cd:c7:88:d6:10:18:20:01:db:e5:32:6f:30:cc:
5e:5b:df:3d:06:fd:64:3d:39:d2:81:dd:81:55:c4:d0:3a:ee:
fe:36:c2:14:22:9e:14:e7:60:36:8d:8f:f2:b3:aa:86:29:bd:
d6:02:40:e5:ea:6a:6c:4e:e6:9d:75:d2:c9:85:2b:a7:ba:27:
0e:f3:da:fd:9c:a8:ce:97:53:96:47:57:ea:56:a1:a6:a5:17:
d5:35:07:69:61:d0:20:79:11:e5:02:71:cd:8c:d6:9c:13:2a:
6a:78:0d:47:b2:5a:99:79:a3:c9:35:c9:71:11:01:00:b0:ae:
a4:2d:50:00:fc:81:f2:5a:d0:78:b8:89:ca:1c:d8:0e:e9:85:
fe:9b:a5:07:b8:47:ae:5c:1e:6a:63:ff:47:5b:f7:70:16:db:
26:91:5f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:33:36 2025 by rpki-client