Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EvUwB6ZCx4IU6_ZoW6bYlSDCFqk.roa
File: EvUwB6ZCx4IU6_ZoW6bYlSDCFqk.roa (raw, json)
Hash identifier: gmkGHYqKxDCqtYbJRJf1ZjpQV4FPkXqmKecKGoXCqA4=
Subject key identifier: 12:F5:30:07:A6:42:C7:82:14:EB:F6:68:5B:A6:D8:95:20:C2:16:A9
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01941FFA68E5A1726A7C5F87750EB11E1E8E
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EvUwB6ZCx4IU6_ZoW6bYlSDCFqk.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58030
IP address blocks: 185.243.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:68:e5:a1:72:6a:7c:5f:87:75:0e:b1:1e:1e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12f53007a642c78214ebf6685ba6d89520c216a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a0:b0:76:4f:27:10:f2:a9:70:ff:88:f7:9a:
fc:d9:21:fd:b5:58:ef:6b:df:d8:dc:2a:41:d2:8b:
10:8f:60:aa:ac:b7:0d:2e:84:77:a0:02:21:4b:6f:
61:b2:c1:c6:27:6d:8a:30:70:50:6c:59:6f:77:42:
c7:c9:1e:dc:8e:40:a2:63:b4:e6:df:58:59:52:06:
8b:56:95:76:bf:9d:7a:ce:ef:d5:0b:18:91:9e:45:
1c:1f:be:d3:e9:fa:e5:99:d5:1f:cd:48:8a:e1:14:
a0:e9:a5:ae:44:46:b6:60:b2:a1:49:f1:42:a2:4c:
51:48:8a:72:8a:ae:5d:72:05:36:93:e8:c8:ca:f3:
f2:3e:ea:2d:1a:af:2a:9b:25:07:1a:ce:97:81:b0:
f9:09:12:45:42:7d:24:fe:8a:8c:96:c4:bc:d7:ac:
0a:1a:06:e5:ec:d6:d3:8b:a7:ea:ee:40:ec:dc:1e:
6a:81:9e:56:4f:c6:c5:8f:4c:95:53:c0:4f:a5:eb:
09:3d:40:37:eb:b3:7d:aa:82:f2:5e:e6:9e:4d:94:
98:51:37:40:57:de:aa:21:85:0d:e9:ea:1d:e6:35:
3b:f7:1f:02:90:d7:7b:5a:16:41:54:f9:a7:dc:5f:
e7:2b:28:64:4b:8f:d1:9e:77:6c:18:3a:f3:96:53:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F5:30:07:A6:42:C7:82:14:EB:F6:68:5B:A6:D8:95:20:C2:16:A9
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EvUwB6ZCx4IU6_ZoW6bYlSDCFqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.50.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e7:aa:e6:71:d0:f0:cc:95:97:8e:3a:7f:c6:7b:0c:32:17:
88:30:98:b7:21:80:25:54:a2:1e:f9:2e:6e:6d:48:bb:46:4d:
ef:c1:21:a7:91:c9:5d:3e:14:d6:33:b3:7d:6c:e8:b3:3f:57:
ea:d0:cc:a2:26:f3:d3:28:89:ad:61:1c:80:8b:4d:b2:70:e8:
ec:3e:c2:de:54:c5:2b:a8:cc:ce:3c:6b:de:a7:63:de:48:a7:
78:0b:65:21:44:3e:31:7e:01:19:44:53:5c:56:05:c0:40:6f:
0c:d5:fa:bc:b7:d8:35:be:16:1e:e8:ee:2a:92:32:29:83:24:
2b:cf:36:7c:69:ab:96:42:1c:a0:65:86:e6:92:86:1c:b3:a1:
ee:bf:52:e8:89:a5:e9:c5:e6:0a:e3:0f:70:76:5b:34:15:be:
e7:a7:35:47:4f:21:8d:b8:0e:73:ba:4c:45:51:1e:ed:72:38:
bc:8f:53:dd:fc:94:cd:20:03:64:88:79:b4:3e:45:20:7c:26:
2d:58:ce:92:1a:c9:3c:e2:d9:c9:60:1a:d8:d8:5d:8c:95:17:
39:8d:db:86:60:d4:2f:bd:50:0a:7f:4c:4b:dc:2b:3d:59:c7:
c0:82:44:bb:2d:99:d9:ed:eb:00:f7:e5:b8:3a:b8:47:00:8d:
7e:69:96:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:54:21 2025 by rpki-client