Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/ecaHIJxcx1Mgp1auyXMniU5m_AU.roa
File: ecaHIJxcx1Mgp1auyXMniU5m_AU.roa (raw, json)
Hash identifier: nk96xRsdyKFZrxulWblmb/pOYCvYpvcjJToJzvaxa8g=
Subject key identifier: 79:C6:87:20:9C:5C:C7:53:20:A7:56:AE:C9:73:27:89:4E:66:FC:05
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 019423D75BA1E1B5901A635D544227B68AC0
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/ecaHIJxcx1Mgp1auyXMniU5m_AU.roa
Signing time: Wed 01 Jan 2025 21:48:23 +0000
ROA not before: Wed 01 Jan 2025 21:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35398
IP address blocks: 185.211.28.0/24 maxlen: 24
185.211.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5b:a1:e1:b5:90:1a:63:5d:54:42:27:b6:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Jan 1 21:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79c687209c5cc75320a756aec97327894e66fc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9d:ca:07:54:94:51:3c:ef:2b:7b:db:29:96:
e0:c2:22:58:50:9f:4d:60:34:7b:90:f2:48:bc:b5:
b9:c6:20:13:39:5c:ab:95:46:a4:e4:b8:dd:30:b1:
43:d9:51:dd:39:11:1f:80:9d:81:63:86:e7:59:9f:
77:56:19:df:2a:c0:86:de:4c:ed:b7:9d:f1:55:58:
af:1f:bf:20:c0:56:a7:c6:c2:44:4b:ae:37:8e:8f:
6b:c2:37:b4:fc:32:f7:da:6a:de:b1:04:80:ee:f5:
d4:34:3c:b0:89:a1:e8:38:da:01:22:23:17:ba:47:
b6:60:c8:a8:21:89:40:2a:37:87:f1:3a:35:43:00:
7f:63:9f:da:80:e2:7c:5c:db:78:c5:e3:92:2b:97:
2c:54:7a:d3:6a:35:61:46:d4:79:0d:54:ab:2e:6a:
e4:82:6d:55:70:32:8d:86:dd:7a:d8:ba:ac:1d:c7:
54:32:c4:c0:76:fb:3b:3e:cc:c8:90:06:a7:87:0a:
63:fd:27:73:ae:a1:de:50:54:b2:95:b9:a5:8b:c6:
89:8c:93:a2:7a:17:84:d5:d2:3c:68:c5:77:57:6b:
5c:ef:c2:a4:0e:cb:94:73:27:02:6e:f8:e4:c4:1d:
6b:39:3a:a4:fa:98:fd:a8:d1:ac:0a:4f:21:bf:cb:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C6:87:20:9C:5C:C7:53:20:A7:56:AE:C9:73:27:89:4E:66:FC:05
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/ecaHIJxcx1Mgp1auyXMniU5m_AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.28.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:67:b5:3e:72:d3:c7:a8:26:3e:af:6d:42:34:09:de:d5:cd:
d4:28:33:ec:97:01:03:0b:0a:55:03:70:d2:f9:01:5d:d8:72:
b0:42:bf:43:0d:6c:d5:7f:1a:93:d4:68:d3:d3:ae:ec:fb:17:
89:7b:ce:40:1a:7d:7e:75:7b:05:d2:e0:a5:92:e5:ec:60:f1:
db:0f:af:6a:31:80:c2:86:48:e1:73:f9:05:ec:6c:fb:44:36:
8a:96:09:01:87:96:00:36:f8:bf:af:d3:0e:f4:b9:5e:87:ac:
c9:cc:c3:40:3d:0f:65:d8:37:93:64:3a:b5:1a:91:da:14:e9:
21:74:6d:39:76:87:f2:fa:7f:9d:3e:1a:33:68:d9:ab:a9:cd:
0d:f1:c2:da:fb:a7:42:ad:f9:52:52:2e:bf:60:ab:17:37:bb:
4c:56:14:f0:fc:a9:5f:0c:4f:2d:15:10:cf:2f:96:00:15:44:
37:8b:b0:fc:af:a6:f7:77:b4:04:15:40:13:e1:dd:14:e6:1f:
a8:b7:81:b2:73:ac:ea:c3:76:ee:b9:01:f1:7a:31:2b:9b:6d:
05:e5:ee:14:c0:72:93:2f:73:2a:c5:51:65:bc:0d:7a:64:05:
26:e1:5f:f5:76:fb:0d:6c:94:54:09:32:34:e5:e6:7a:66:56:
21:66:10:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:09:09 2025 by rpki-client