Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/eWIsK00nv-TBVtwDZCA3scOHg9s.roa
File: eWIsK00nv-TBVtwDZCA3scOHg9s.roa (raw, json)
Hash identifier: y147gGaB8bkjz0BvOSbEDQ7Eu45dIgspzGe/6ZKyCR0=
Subject key identifier: 79:62:2C:2B:4D:27:BF:E4:C1:56:DC:03:64:20:37:B1:C3:87:83:DB
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 0194258E70E6FF8A8F06346F3DBEE1DC7AB9
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/eWIsK00nv-TBVtwDZCA3scOHg9s.roa
Signing time: Thu 02 Jan 2025 05:47:59 +0000
ROA not before: Thu 02 Jan 2025 05:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201584
IP address blocks: 185.210.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:70:e6:ff:8a:8f:06:34:6f:3d:be:e1:dc:7a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Jan 2 05:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79622c2b4d27bfe4c156dc03642037b1c38783db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:28:6c:7b:51:d1:4f:d2:d4:93:18:ca:e5:83:
1d:ef:dc:18:e3:16:07:48:1a:48:b8:58:02:b9:4e:
ea:a7:be:6e:b7:f8:c4:4c:7e:9c:d5:59:17:43:2a:
44:f9:44:c4:03:fc:6b:46:51:a5:7f:91:74:3c:30:
36:0a:0f:8c:69:51:1d:ae:e1:70:71:a6:6f:a1:e7:
b3:fc:20:6f:3c:9a:08:9e:c6:de:cc:c8:cc:16:51:
a6:6d:d6:3c:5b:fe:32:f6:ae:27:a5:d7:fc:89:26:
19:d4:df:78:60:74:6e:1c:a4:3c:ff:7c:45:83:34:
ab:a3:e2:e8:dd:59:9b:3b:c1:12:a0:a5:4d:34:1c:
2a:fb:fb:63:09:bc:21:00:43:f0:44:bc:49:ac:ea:
6d:28:71:07:b0:d8:7a:e9:76:29:c9:36:b6:7d:04:
f1:39:a6:ba:ac:e7:d1:4d:6c:f8:60:55:64:4b:12:
0a:2f:51:19:24:a4:5c:82:51:ce:9e:e8:00:b0:a0:
95:65:23:06:19:d6:20:83:b0:3f:ed:61:b1:8a:1a:
09:e5:c1:52:7f:37:b4:26:c2:18:d2:f8:68:65:a7:
a0:18:3b:e3:b8:0f:1d:c1:7f:bc:d3:46:b4:e3:d2:
e9:8c:b2:f1:96:c8:de:73:ed:42:8d:b2:13:86:c4:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:62:2C:2B:4D:27:BF:E4:C1:56:DC:03:64:20:37:B1:C3:87:83:DB
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/eWIsK00nv-TBVtwDZCA3scOHg9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.202.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:24:f7:9e:68:37:ea:db:5d:e3:2f:72:3e:e4:ab:b1:41:c2:
0a:45:da:5c:bf:96:db:6c:d7:96:15:5a:1b:f6:29:91:c9:f1:
e8:cf:1b:3f:64:12:9a:9c:f0:53:8d:7a:2c:2d:8c:b0:bd:da:
d9:40:41:20:aa:ce:7d:87:d7:7a:0c:4b:0d:db:35:d5:f2:e3:
0a:52:b4:51:0a:19:56:c7:ea:8b:ec:a5:22:fb:b9:c7:da:c8:
4f:e4:ba:9a:6c:df:2d:3e:cf:58:a0:a0:54:af:3e:5f:43:58:
df:38:b1:45:2d:16:f8:ef:c6:3f:1c:9c:a9:e0:5a:df:96:b9:
13:82:25:fc:30:e1:8f:e6:0c:60:80:18:1e:22:38:3a:c9:f6:
e4:18:9b:8d:aa:ee:e9:9e:1e:50:95:fb:be:b4:11:27:39:e8:
37:5f:cf:fe:0b:6d:52:51:88:57:74:3c:ba:9d:6a:32:60:c4:
3a:ba:32:17:c8:31:90:bc:29:ef:fd:8f:92:6e:fa:36:bb:2d:
db:29:93:2e:08:03:43:a3:f2:90:34:19:0e:5e:9d:10:09:0a:
3b:b3:ae:93:1d:a7:dc:98:e6:ed:28:40:6d:db:c6:3e:2c:d4:
00:bc:0d:6d:02:72:84:ef:fd:6d:d0:b5:70:5d:75:cc:38:75:
9f:3d:57:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:13 2025 by rpki-client