Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/eD-jgmLjU8l3pyRuumgK9QIMg5I.roa
File: eD-jgmLjU8l3pyRuumgK9QIMg5I.roa (raw, json)
Hash identifier: MI8CkhvzSAw59I9pdOh0qmm9At+Brpo0+Yc/fyYEwKI=
Subject key identifier: 78:3F:A3:82:62:E3:53:C9:77:A7:24:6E:BA:68:0A:F5:02:0C:83:92
Certificate issuer: /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial: 0194266B63790980FFF633665E0321D762B5
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/eD-jgmLjU8l3pyRuumgK9QIMg5I.roa
Signing time: Thu 02 Jan 2025 09:49:19 +0000
ROA not before: Thu 02 Jan 2025 09:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204463
IP address blocks: 185.113.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:63:79:09:80:ff:f6:33:66:5e:03:21:d7:62:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
Validity
Not Before: Jan 2 09:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=783fa38262e353c977a7246eba680af5020c8392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:a6:4f:fa:e9:2b:1f:07:64:8c:91:9a:b6:
b0:05:04:cc:1d:95:dd:35:5b:1c:ce:cb:00:5f:53:
08:f2:ae:c0:e7:2f:77:3c:56:7c:3d:02:b1:2b:77:
a7:7f:97:a1:22:5e:76:82:3c:41:2c:8f:a3:c2:f3:
67:42:b6:30:80:2a:5b:d4:ba:cb:69:be:04:f2:7e:
40:7d:ee:ed:1c:8d:5a:51:60:2d:5e:4a:94:3c:71:
d0:97:35:30:42:77:8b:14:37:32:fb:86:be:c0:09:
1d:0b:79:57:d8:ca:49:9a:77:24:1a:43:fb:fc:de:
e5:95:d4:4e:48:0a:6d:5e:27:35:57:2e:67:53:ef:
73:93:ef:0d:9d:3b:70:29:5c:ec:e2:68:6d:80:3e:
a9:32:0a:54:8e:4c:73:a2:d4:00:57:e3:33:bf:d1:
12:f8:18:ac:54:36:32:06:39:f4:39:07:b6:1f:99:
00:13:70:75:a5:5a:9d:a2:cb:8f:e6:4f:84:f9:1b:
16:02:2f:90:81:a3:f4:5d:66:b4:52:29:e9:24:57:
d6:05:8f:52:1d:53:ab:b6:ad:9a:97:52:c8:9d:61:
9d:ea:48:6b:a4:b7:bf:50:bf:59:72:f3:22:43:08:
e8:fe:9c:cb:fc:0a:78:cb:f1:e6:0b:2f:79:fd:d3:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3F:A3:82:62:E3:53:C9:77:A7:24:6E:BA:68:0A:F5:02:0C:83:92
X509v3 Authority Key Identifier:
keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/eD-jgmLjU8l3pyRuumgK9QIMg5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.239.0/24
Signature Algorithm: sha256WithRSAEncryption
68:27:f0:e6:a5:52:f8:51:67:d4:09:9f:36:f8:b9:d1:87:e5:
44:70:b4:4f:43:2e:55:cb:dc:f8:ea:e6:25:07:d4:f5:bb:b9:
15:9d:ca:4f:29:72:a7:98:b7:30:f7:c7:2b:0d:8c:ca:16:de:
2a:b4:31:68:c3:11:d2:1b:28:ff:fe:5c:60:0c:b5:1b:21:c9:
8d:e3:a2:2e:9c:25:ba:e3:a1:cc:50:db:44:0a:26:fe:45:19:
52:e6:d9:91:17:ed:2e:1a:13:05:10:64:b3:d9:ab:1d:b7:fd:
49:00:5a:5d:be:32:a6:6b:46:96:d7:bd:ea:62:1d:77:b6:a7:
f9:e4:2a:04:e0:1a:e9:6c:e2:64:ac:4f:8d:ba:d1:ef:0b:9f:
28:55:78:2f:82:2f:1d:ba:6d:ec:79:e1:d9:5d:d9:e4:b0:02:
d1:32:82:f5:cf:e6:56:c6:d5:2f:5d:e2:c9:d1:6a:46:6c:0b:
64:d7:20:c5:30:4d:d1:3d:eb:39:bf:4a:40:06:c4:98:f3:36:
1f:05:68:61:4d:b6:03:c4:ab:db:f6:ec:4e:c3:00:90:4f:d5:
36:4d:8a:0a:7f:92:ff:e9:1d:34:51:e8:1c:fc:87:5a:2c:4f:
db:d0:0c:2a:92:da:97:b1:25:c8:b5:95:20:a3:c5:5c:d2:a7:
be:d7:d1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:29 2025 by rpki-client