Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/fGMhxat_aWV3hx3-ZEsjMXX_eos.roa
File: fGMhxat_aWV3hx3-ZEsjMXX_eos.roa (raw, json)
Hash identifier: okji5lN0mnnP4DUHwDGGfA4mpjSl7H2/JOP5GvkdRJs=
Subject key identifier: 7C:63:21:C5:AB:7F:69:65:77:87:1D:FE:64:4B:23:31:75:FF:7A:8B
Certificate issuer: /CN=5281b841f12769489d5fd343b72ba44f90c96f32
Certificate serial: 019422FB5205B093499A1AE3799EF7962821
Authority key identifier: 52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/fGMhxat_aWV3hx3-ZEsjMXX_eos.roa
Signing time: Wed 01 Jan 2025 17:48:03 +0000
ROA not before: Wed 01 Jan 2025 17:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205541
IP address blocks: 185.13.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:52:05:b0:93:49:9a:1a:e3:79:9e:f7:96:28:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5281b841f12769489d5fd343b72ba44f90c96f32
Validity
Not Before: Jan 1 17:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c6321c5ab7f696577871dfe644b233175ff7a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:9d:ba:05:0e:57:4c:35:bd:a0:49:3a:51:
41:22:2f:e4:be:83:50:15:d0:2c:96:4b:ec:fa:31:
65:f7:74:45:c6:65:9e:69:1e:66:e0:20:21:34:5b:
bf:7c:65:4b:1a:ad:ae:76:d3:dc:62:df:90:80:3b:
b1:1f:75:8d:01:04:6c:b9:ba:fd:5e:79:39:c2:7a:
2c:a5:f1:fe:b7:0d:38:e6:0b:b0:04:ce:85:c6:e0:
8c:71:3f:25:46:04:83:cc:c6:c5:a0:89:45:2c:29:
e0:25:d4:eb:b7:76:73:59:22:83:e7:5f:40:20:85:
c6:32:46:24:74:89:bd:0b:61:19:a9:b6:68:b4:4d:
06:83:a6:eb:02:e9:dd:dd:da:21:5c:e1:a3:02:59:
78:1a:91:e3:12:4e:c3:cc:3d:18:87:b7:4d:e9:ab:
99:bd:e9:40:18:0d:b8:aa:30:77:6e:b8:f1:50:98:
7d:84:d8:46:73:76:fb:29:73:4a:3e:dd:ed:9f:21:
c1:b2:d0:fa:bb:d1:29:96:9f:7c:e4:97:87:c3:e0:
8f:16:8f:5d:fb:06:87:f6:8e:14:f5:ec:f0:2f:e4:
e7:4d:94:d2:4d:2e:5e:9b:c5:b2:be:56:98:b0:fe:
c9:36:b9:a5:86:29:e7:a0:95:e8:2c:df:89:eb:1a:
5f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:63:21:C5:AB:7F:69:65:77:87:1D:FE:64:4B:23:31:75:FF:7A:8B
X509v3 Authority Key Identifier:
keyid:52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/fGMhxat_aWV3hx3-ZEsjMXX_eos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.66.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:13:bc:ec:26:ea:29:a8:dd:af:8a:fc:28:08:82:58:91:62:
e1:c1:cf:8b:95:31:1f:89:0a:02:9b:3d:b5:e2:c1:cf:13:20:
e1:68:e4:24:c5:9d:0b:02:b7:48:27:cb:ad:f5:a1:23:e9:77:
aa:4f:c5:d7:71:ec:1e:9d:19:57:6e:55:de:7e:3c:cf:e7:67:
29:35:23:7b:36:2c:0f:a8:79:12:34:33:ec:20:d2:4c:60:7d:
7f:f9:b0:d9:ad:62:a9:eb:c3:31:fa:b7:d8:91:96:88:e1:35:
d1:97:b1:f2:67:53:04:62:52:c8:40:cd:cb:68:49:cc:6a:01:
44:e1:16:7f:fa:4e:9c:9c:b9:e1:70:32:a2:5c:9e:ae:54:06:
3b:ea:7c:de:d3:8c:b6:a4:5c:a1:6d:68:17:10:05:a4:a5:0f:
28:08:8e:bc:7c:79:d4:8f:75:bb:f5:c9:33:e2:ed:35:b2:8e:
85:2f:ee:95:d5:b6:44:b9:81:b3:66:33:29:bb:ff:15:ba:72:
9a:0e:66:08:0a:d2:dd:cd:56:16:9e:74:47:18:0b:ed:da:36:
5f:98:34:c7:33:cd:ab:5a:7f:97:c5:f8:a2:3c:4f:d2:8f:b1:
46:d0:83:89:69:b0:be:74:7c:ac:6a:9e:2b:5a:f5:54:61:fe:
9f:f3:95:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:24 2025 by rpki-client