Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/9EUnRRjK1DPEOpCFHKLbj6DnnwE.roa
File: 9EUnRRjK1DPEOpCFHKLbj6DnnwE.roa (raw, json)
Hash identifier: 5pOnqwDunio8ibNAPUzfXIZHCC6lmUXt91wi8md1CvM=
Subject key identifier: F4:45:27:45:18:CA:D4:33:C4:3A:90:85:1C:A2:DB:8F:A0:E7:9F:01
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 0194266C48B60A0094FCF94E31EBFCB847ED
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/9EUnRRjK1DPEOpCFHKLbj6DnnwE.roa
Signing time: Thu 02 Jan 2025 09:50:18 +0000
ROA not before: Thu 02 Jan 2025 09:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56466
IP address blocks: 185.162.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:48:b6:0a:00:94:fc:f9:4e:31:eb:fc:b8:47:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Jan 2 09:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f445274518cad433c43a90851ca2db8fa0e79f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:98:43:44:ee:d6:81:62:f2:f8:a2:71:b3:
38:5b:b1:24:ef:a7:9c:fa:1b:f0:3a:1e:2e:2b:20:
5e:6d:9d:d8:b8:bc:7f:8a:51:89:15:cd:43:f5:8b:
4c:b3:fc:c6:f7:7e:35:bf:64:28:4f:9c:5f:d5:38:
e1:60:8f:48:d5:cc:b9:5b:72:68:d8:1c:66:e2:8f:
57:ec:83:3d:8f:82:05:1b:48:3c:a8:ea:ef:55:c8:
30:38:a3:89:1c:ef:7d:97:39:bb:10:81:96:76:d7:
b7:9d:a7:44:4d:f0:f0:99:64:44:82:ce:97:c7:2e:
d5:47:71:05:68:19:19:99:20:ba:63:0a:28:c4:5d:
76:5d:c5:f8:1a:ca:39:76:8e:01:50:c6:e1:9d:44:
f6:ad:2f:97:48:11:70:64:6f:c4:5a:22:30:67:46:
1a:f3:74:ab:93:68:ed:7d:76:db:1d:20:d1:4d:74:
c2:6d:a5:cb:9b:4a:69:71:55:81:62:2f:1f:e2:d5:
4c:41:2c:0d:8e:20:e3:63:3f:d3:3d:88:95:ef:7a:
9a:3a:78:32:c9:fe:18:3f:7a:7b:af:9d:ad:3c:d7:
b7:fd:4f:2a:cf:86:17:07:b9:17:9f:15:fc:c8:06:
f0:f0:10:b2:e0:52:ff:84:18:e2:e6:b1:bd:58:49:
29:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:45:27:45:18:CA:D4:33:C4:3A:90:85:1C:A2:DB:8F:A0:E7:9F:01
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/9EUnRRjK1DPEOpCFHKLbj6DnnwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.216.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ef:8a:25:9e:f0:26:76:c0:89:02:ff:b8:71:2a:63:35:7f:
bc:13:8a:f6:87:87:07:a7:78:9c:b6:37:68:e5:ac:5e:99:59:
27:37:ae:50:4a:98:07:79:73:58:e0:2f:11:c6:7e:90:4c:82:
2b:39:2e:50:e2:4c:43:a6:91:40:c4:e3:1b:8a:0e:52:a4:e9:
c1:a3:d0:a7:0b:7c:9e:c7:21:bb:af:d2:a1:6f:bb:1c:f2:5a:
3b:3a:ea:c8:e7:b8:70:f1:46:07:fd:c4:f1:64:ef:00:7e:da:
64:8a:60:c7:eb:2f:73:32:bb:15:e5:9e:73:35:00:2b:20:b7:
71:cb:52:5f:1c:bf:76:60:4a:b3:ed:8b:d7:ff:68:bb:08:0d:
f2:69:72:9e:78:f7:72:f4:27:d0:b7:bd:0e:42:ef:1c:2f:c9:
b2:37:9c:55:6c:c6:72:4b:6c:ba:8a:69:8a:de:f9:1b:96:05:
79:84:d4:67:96:99:cd:e1:93:29:57:6b:e2:df:54:43:63:6e:
a8:aa:53:13:3f:6c:ed:ae:20:60:71:b1:e0:3e:9c:db:52:07:
d6:11:8d:4a:8f:1c:c0:6c:3f:ac:d7:e0:06:49:ed:45:3b:07:
cc:97:2c:3b:78:2b:9a:3e:c3:64:69:a2:6d:c1:9c:8e:a5:b7:
55:92:06:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:22:40 2025 by rpki-client