Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/E7He_auz_OwW9cMRlHWztZpOFkM.roa
File: E7He_auz_OwW9cMRlHWztZpOFkM.roa (raw, json)
Hash identifier: YndW7vifdss6iyHFXtCeGuBzSn3EKvbp10ZlduxVmbE=
Subject key identifier: 13:B1:DE:FD:AB:B3:FC:EC:16:F5:C3:11:94:75:B3:B5:9A:4E:16:43
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 0194221F9767700E1AFBCDF47F38BE443352
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/E7He_auz_OwW9cMRlHWztZpOFkM.roa
Signing time: Wed 01 Jan 2025 13:48:03 +0000
ROA not before: Wed 01 Jan 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 185.39.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:97:67:70:0e:1a:fb:cd:f4:7f:38:be:44:33:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13b1defdabb3fcec16f5c3119475b3b59a4e1643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:96:60:67:37:bb:9f:89:94:2e:10:0b:2b:
1a:64:ac:0e:56:87:d4:3f:75:ee:3d:f6:2d:57:3c:
58:ab:ab:a4:9d:ac:63:00:8c:ca:d1:98:3b:b5:e0:
f0:7a:bb:8f:c6:4a:f2:95:2d:91:c0:5b:f9:7c:0b:
30:13:56:15:71:12:ef:4c:c6:d0:20:d1:cd:c5:ae:
33:2c:83:61:9c:1e:82:c1:0b:ca:a6:29:2b:22:20:
3f:24:c1:f7:23:de:f0:46:67:1f:cd:90:1e:ee:48:
5a:b3:5d:c0:80:d9:ed:c5:06:52:05:6b:d5:6f:cd:
ef:28:9e:47:21:1a:3b:51:fd:71:d7:5f:f6:48:d5:
27:1e:4b:1d:26:0a:44:11:32:b4:c4:e6:67:19:d3:
71:4b:0e:23:73:6d:8a:a2:e2:51:53:b2:c6:b7:2b:
a5:30:e2:c8:03:f7:e7:12:4b:ae:ce:2a:ba:18:ea:
ba:0b:c4:50:9e:4e:53:73:20:11:17:8a:f4:9d:69:
44:94:85:e8:7b:17:0d:6b:12:f9:e1:85:98:e6:ed:
91:04:d8:bd:23:53:01:ac:39:10:37:6a:82:ea:11:
37:06:83:fc:25:0c:44:e1:48:20:b3:d8:3c:1b:ca:
d0:e3:29:0b:6c:a2:38:2c:38:cd:7e:f7:b4:f7:ca:
c4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B1:DE:FD:AB:B3:FC:EC:16:F5:C3:11:94:75:B3:B5:9A:4E:16:43
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/E7He_auz_OwW9cMRlHWztZpOFkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.31.0/24
Signature Algorithm: sha256WithRSAEncryption
00:72:bd:65:52:31:84:c4:39:93:fb:0d:b7:b5:ac:6c:84:fe:
39:72:d3:d6:63:e3:41:80:32:13:ca:01:d6:41:fe:c2:d3:16:
3b:e1:06:8a:62:a8:d2:7d:e1:68:0c:a3:1c:7d:a7:35:03:cd:
85:12:58:cf:d7:1b:99:37:a0:8a:86:37:4d:14:71:b5:19:9e:
bd:c8:3f:08:29:4a:2c:65:4e:c1:8b:ca:72:ee:18:85:b3:5f:
9e:92:d4:8e:3b:6f:73:a9:85:43:68:ef:d5:a1:40:af:39:45:
74:e3:c0:44:83:5b:0f:48:f8:a1:6d:25:20:3b:1f:ee:2c:d0:
c7:d2:bd:8a:dc:d1:1c:3e:66:81:7a:e9:96:f2:33:cb:53:8d:
d8:7e:ea:71:47:43:dd:9f:4d:70:9c:79:4f:2e:dd:65:fc:ea:
2e:21:b6:77:a4:67:6d:58:9f:54:10:e2:53:00:51:31:ef:37:
bd:a9:62:de:dc:ea:5f:cd:8d:68:b7:49:26:d3:87:e0:41:9c:
d4:0a:c0:be:8d:a7:c7:61:98:2a:a3:87:17:48:c6:1d:a8:39:
38:19:a7:a7:c7:bb:b9:41:05:61:9c:e2:6b:0b:0c:70:63:3d:
0c:1c:9b:e3:fb:6b:e8:71:6c:dd:93:6c:08:c6:87:5b:84:ce:
40:ff:4a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:44 2025 by rpki-client