Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/EnWNHEKE4As2dY7z8H4f1zMv8PE.roa
File: EnWNHEKE4As2dY7z8H4f1zMv8PE.roa (raw, json)
Hash identifier: hirWkRxOPTdm/HJ/WnnegZ8yGMndTUx93DgHktqjC64=
Subject key identifier: 12:75:8D:1C:42:84:E0:0B:36:75:8E:F3:F0:7E:1F:D7:33:2F:F0:F1
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 0194266C3F557C63989803207652AE529E69
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/EnWNHEKE4As2dY7z8H4f1zMv8PE.roa
Signing time: Thu 02 Jan 2025 09:50:15 +0000
ROA not before: Thu 02 Jan 2025 09:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 85.153.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3f:55:7c:63:98:98:03:20:76:52:ae:52:9e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Jan 2 09:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12758d1c4284e00b36758ef3f07e1fd7332ff0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:00:eb:0d:a8:bf:5a:96:d6:8f:ce:a9:6d:
a1:de:c3:ec:00:5c:4a:dc:e8:18:c7:67:63:d3:ab:
80:b8:43:6a:ad:cd:1f:a2:66:01:c5:ec:6c:79:5e:
90:bd:63:c8:5c:5e:bc:3d:d5:07:d4:e3:db:a5:00:
f1:e5:a7:d5:e1:a3:f2:53:16:57:2b:a7:f4:16:2d:
a8:4f:e1:c3:7e:e6:4a:51:8d:07:e4:22:45:5b:33:
50:3c:ce:f4:7d:33:a0:35:81:47:3d:7b:6b:80:f6:
9a:61:b5:3d:e5:c6:72:35:8d:0b:91:e5:e6:ce:5a:
4b:7b:e9:64:7a:05:f3:09:2a:56:dc:d1:a8:ec:b4:
a3:39:53:1e:3f:7d:53:ea:f9:40:cc:1c:ef:ea:61:
8b:de:da:3b:f2:f0:35:b2:6b:93:d0:2f:48:42:7c:
56:b0:a9:01:77:01:94:c8:c1:6e:a8:c1:b1:ee:f4:
00:e7:e3:a0:78:3f:11:b6:66:ae:54:48:c7:45:28:
16:65:7c:38:c9:c7:48:e4:ee:b6:f0:99:6a:ec:d4:
68:ac:95:ea:11:dd:f2:08:8d:13:31:24:e2:6d:97:
05:92:0f:15:67:d3:70:b8:10:2c:27:e5:07:4d:69:
a6:08:ce:8b:41:6f:bd:ba:95:f6:f6:27:c7:6e:36:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:75:8D:1C:42:84:E0:0B:36:75:8E:F3:F0:7E:1F:D7:33:2F:F0:F1
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/EnWNHEKE4As2dY7z8H4f1zMv8PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.9.0/24
Signature Algorithm: sha256WithRSAEncryption
57:21:e6:65:a6:f1:43:a3:07:ae:45:03:b3:b1:e5:9b:5d:d8:
19:76:03:0a:29:ef:9f:b1:47:e8:ea:e5:05:3b:13:90:3b:d0:
9c:a2:6c:9f:dc:56:8a:80:29:6f:be:8f:6c:7d:2e:ac:69:8a:
ad:34:f0:85:bc:b9:74:57:bf:0b:74:f8:5b:14:16:ca:42:ad:
ab:49:a6:b1:90:85:6f:70:e9:23:2b:1e:43:3d:07:03:d2:7a:
b3:99:1e:f2:6a:ef:7f:06:bb:ff:35:25:87:3c:c8:18:09:28:
34:cb:eb:0b:9e:90:fd:63:b8:96:31:64:e4:80:b7:a8:79:33:
03:eb:0d:9b:3a:a9:b6:1e:fe:39:a7:cc:37:3e:73:96:6c:a0:
02:70:81:82:06:97:b4:f3:d4:29:af:26:13:c1:b0:c9:a0:b8:
2c:6f:1e:a1:68:01:b7:b9:5f:d5:bc:4a:a6:bb:7d:f8:dd:2a:
cf:49:e7:28:c9:d4:68:a4:8e:15:16:0a:4c:47:60:92:2b:17:
57:f3:b6:7b:38:81:97:e4:25:4b:5f:ea:be:1d:67:57:be:51:
ec:27:98:6f:ff:a3:7a:ff:d5:94:4c:a1:cc:e4:8e:a2:00:36:
b7:5f:e5:67:80:2e:72:d4:e5:43:b3:76:c6:9c:13:51:0b:fd:
75:4a:64:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:50 2025 by rpki-client