Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa
File: nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa (raw, json)
Hash identifier: GMRhVws0KpXuhusMgH6+dybXDc5BG6EQU71bIEXKHws=
Subject key identifier: 9C:45:44:D0:10:D4:AA:9E:4C:D4:28:3A:FC:97:AC:CB:FD:35:66:9A
Certificate issuer: /CN=a2e4556a9579e202f54c159345458bc9245f90e4
Certificate serial: 019422FB997B386144900188C7032E519D6F
Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa
Signing time: Wed 01 Jan 2025 17:48:21 +0000
ROA not before: Wed 01 Jan 2025 17:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211007
IP address blocks: 185.249.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:99:7b:38:61:44:90:01:88:c7:03:2e:51:9d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4
Validity
Not Before: Jan 1 17:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c4544d010d4aa9e4cd4283afc97accbfd35669a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:65:0c:cc:b1:b2:09:a3:bf:1f:f0:84:51:
5c:43:c2:f5:2c:fb:a0:6b:96:1d:29:22:a1:5d:b1:
5c:4a:81:d6:cc:59:c5:1d:8a:1c:9e:c0:44:34:b0:
1c:73:20:a2:4c:b1:65:85:6f:4c:0c:cf:22:b3:06:
fa:71:33:3e:48:94:0c:5d:51:85:7c:a5:fa:d6:3f:
82:2f:ab:b9:b8:9a:02:9c:4e:ad:fb:7d:2d:ad:34:
28:a3:73:84:d7:ae:e1:ac:b8:0e:f8:e7:4f:d3:1b:
5f:a3:6c:2b:93:5b:09:69:95:54:74:fc:16:5f:07:
db:39:bc:17:9d:a2:e4:97:36:20:b6:40:87:38:be:
6f:5e:e5:92:fe:b3:94:dc:b3:ec:8b:16:41:f3:ee:
8c:6a:a9:25:da:e3:b4:3b:ae:8b:aa:6d:1b:f2:f3:
de:d8:31:c7:1f:86:f8:93:c1:0e:4e:15:f3:89:36:
15:a5:c1:ae:a7:d8:d9:dd:fa:56:e0:5d:d9:73:22:
11:92:d6:59:90:01:82:9d:1a:96:03:38:e8:1f:11:
77:e7:20:93:ac:d6:1e:64:a8:30:03:24:4f:40:e9:
aa:74:3a:f4:d2:a6:70:ce:3c:68:9c:d6:72:1e:91:
a8:2a:18:94:b5:ea:c5:ab:e2:44:d2:cd:e9:9a:37:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:45:44:D0:10:D4:AA:9E:4C:D4:28:3A:FC:97:AC:CB:FD:35:66:9A
X509v3 Authority Key Identifier:
keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.156.0/24
Signature Algorithm: sha256WithRSAEncryption
48:85:8d:c9:88:2d:ec:1c:37:09:c0:fe:62:1d:bb:4c:54:62:
45:aa:17:c6:3a:52:7e:71:9e:3c:f7:85:25:70:c6:2a:1f:fb:
3e:5b:db:98:1d:1a:9c:30:da:f1:52:de:5b:3d:19:1e:9d:94:
5d:71:55:9d:89:70:94:cb:13:27:bd:69:cd:29:1f:db:24:19:
0f:64:07:0a:b4:e7:dc:76:1e:7b:0c:b7:11:39:49:b6:08:68:
b9:cf:73:6f:4a:27:d6:cb:a2:b6:54:87:f5:d0:09:c6:45:00:
57:2b:7c:26:f8:ec:ea:4d:a2:7b:64:6d:81:b3:0a:37:8d:39:
fe:0d:84:45:f9:62:fd:b8:49:c9:1b:93:57:bf:5a:d7:a4:b9:
75:65:63:dc:ea:6a:f3:c6:dc:4e:b9:0f:df:b4:c1:30:fc:65:
3c:5c:7f:d9:e3:cb:87:45:e8:af:c4:a1:d7:42:92:0a:57:66:
73:01:32:bf:0b:c9:9e:5a:98:73:aa:10:df:06:5a:ce:49:28:
64:53:73:9a:6b:bc:e6:cb:1b:29:02:d7:b3:45:a8:f4:21:ca:
6e:5b:b0:3c:ce:03:d4:25:4f:4e:c1:ef:55:18:27:8b:fa:d7:
3e:9e:75:7e:34:6c:e8:20:7a:6c:24:6f:ee:b1:48:1c:eb:a5:
e4:50:48:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:46:31 2025 by rpki-client