Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/E7pOFVTH8vD5FpCiYaR8AAvSF9c.roa
File: E7pOFVTH8vD5FpCiYaR8AAvSF9c.roa (raw, json)
Hash identifier: QknCCRzW2QumFMETOVNE4NTQsXWLabVtKWWfI6cIov4=
Subject key identifier: 13:BA:4E:15:54:C7:F2:F0:F9:16:90:A2:61:A4:7C:00:0B:D2:17:D7
Certificate issuer: /CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Certificate serial: 0194274777587FD7A392D1895DC736AD1685
Authority key identifier: 29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/E7pOFVTH8vD5FpCiYaR8AAvSF9c.roa
Signing time: Thu 02 Jan 2025 13:49:42 +0000
ROA not before: Thu 02 Jan 2025 13:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58261
IP address blocks: 185.218.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:77:58:7f:d7:a3:92:d1:89:5d:c7:36:ad:16:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Validity
Not Before: Jan 2 13:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13ba4e1554c7f2f0f91690a261a47c000bd217d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3d:1a:d7:e8:13:a9:70:ce:a6:2e:e8:7d:87:
81:72:d2:b4:fa:e7:ec:ec:3d:64:be:5e:29:8d:72:
14:bc:81:4b:f3:5b:33:4b:de:77:36:c4:8f:1a:d3:
8e:5f:d9:05:b3:01:35:46:ab:e7:1c:26:2a:69:8c:
f6:fd:80:e5:e6:37:44:3b:3a:31:62:0f:8a:6c:f1:
13:5e:c4:34:b2:42:54:06:b0:b7:39:d5:e6:37:3a:
59:40:e1:d0:bb:d5:2d:1e:c7:34:34:ca:8a:66:11:
ad:72:4c:94:71:bb:65:2a:a1:3c:86:1d:c0:e4:ec:
37:4d:51:69:bc:74:c3:33:d1:2d:cd:12:42:a9:4f:
1a:de:4b:a2:c6:5d:07:6c:e0:3d:8f:7a:77:2c:32:
fa:76:9a:5d:f6:3c:54:42:f4:f5:03:0f:c0:03:2c:
fc:19:20:62:55:7f:20:99:aa:57:a6:a6:73:6f:d4:
55:41:42:d4:44:bb:a3:d4:0f:ea:dd:d8:4d:34:3d:
fe:26:ab:f7:21:d8:78:24:75:d9:7c:4b:cd:f5:5d:
d5:5d:70:bf:94:48:49:ef:fc:a0:4c:f0:04:86:50:
e2:66:04:7a:4b:f8:58:29:45:e8:d6:2c:d2:61:25:
e5:f9:29:16:20:e6:1f:bd:3a:32:5b:10:7e:c2:39:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BA:4E:15:54:C7:F2:F0:F9:16:90:A2:61:A4:7C:00:0B:D2:17:D7
X509v3 Authority Key Identifier:
keyid:29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/E7pOFVTH8vD5FpCiYaR8AAvSF9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.141.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d0:8b:79:1a:ff:aa:97:a2:eb:a4:48:d6:23:d7:35:4e:2f:
c3:00:bf:56:6d:b3:67:9c:65:22:51:0e:54:36:c1:0b:f9:16:
0d:7a:d0:da:86:fe:8e:16:71:f9:52:d1:70:0c:d8:f2:d4:f5:
b3:7f:24:4b:6b:14:55:f5:58:21:a1:2a:b8:b6:15:3d:a2:51:
6b:8e:94:ee:ef:6f:20:6b:5c:af:93:d9:be:c1:91:2d:7a:80:
cf:c4:a2:19:09:34:fb:09:8f:30:26:cc:e8:78:fd:e3:09:1a:
16:5d:85:12:54:9a:6c:66:5e:84:ec:71:cc:ad:a4:22:5a:25:
1d:50:cb:0c:70:9e:d0:4e:de:cd:cb:8a:d1:c5:25:b9:62:9e:
c9:a6:39:13:4a:49:c9:cb:bb:e6:b9:41:49:8e:17:96:83:6a:
79:57:02:6b:af:d3:4a:ab:38:1a:66:e5:b1:ff:cb:39:2e:7d:
66:06:c9:fc:4b:0e:57:29:1e:1d:4f:0c:e0:86:3e:e7:62:02:
45:9c:04:45:d3:09:28:1c:e7:2c:cc:48:d2:f4:9a:3e:af:1d:
4c:12:08:12:31:16:0b:49:08:9a:15:04:07:d4:7a:2f:2b:25:
35:9e:ca:58:b1:23:82:19:7c:79:3a:79:e9:3a:52:0d:48:f5:
4b:e1:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:40:55 2025 by rpki-client