Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/0EbACDVL2fDivnf5KUiVukCW6AM.roa
File: 0EbACDVL2fDivnf5KUiVukCW6AM.roa (raw, json)
Hash identifier: 2EVhZ0rS+lj6U3ajXAU+8FEPpDbqGDvioQB8YdIkUmc=
Subject key identifier: D0:46:C0:08:35:4B:D9:F0:E2:BE:77:F9:29:48:95:BA:40:96:E8:03
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 019427485F05BC9DAB21D0EFCE4E39A78DBD
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/0EbACDVL2fDivnf5KUiVukCW6AM.roa
Signing time: Thu 02 Jan 2025 13:50:41 +0000
ROA not before: Thu 02 Jan 2025 13:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35625
IP address blocks: 185.118.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5f:05:bc:9d:ab:21:d0:ef:ce:4e:39:a7:8d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Jan 2 13:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d046c008354bd9f0e2be77f9294895ba4096e803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:5c:44:8d:36:ab:19:fa:ce:36:c6:f2:d6:
2b:4a:56:fb:7d:0f:ec:c4:d7:33:85:d4:ef:b0:3c:
f6:bc:01:48:74:90:55:99:2a:85:5d:f0:a3:48:1e:
a9:97:1d:59:a2:40:2f:0e:69:02:99:97:8d:2c:78:
9b:a3:ef:4a:c6:0f:7b:58:e1:05:67:40:94:3d:08:
91:06:ce:f1:2a:92:d7:b6:fa:64:29:35:4f:f9:f3:
c2:63:fa:06:a0:ee:8e:91:34:2d:01:60:e0:1c:be:
24:df:26:c4:96:54:34:3f:8a:51:50:2e:3e:a8:2a:
39:6b:a2:b5:52:0e:43:3c:1f:80:60:67:96:99:3b:
f5:18:be:54:29:6a:73:7e:4f:75:2b:51:00:38:4b:
77:eb:f3:ce:8c:07:50:7b:a8:0c:e2:b8:57:9f:46:
f6:2b:16:04:73:70:b0:c7:ca:36:01:1b:5e:a2:b3:
f6:06:60:b9:72:d8:fa:72:59:f7:32:2a:7f:ae:31:
23:cb:ee:45:be:24:4e:57:ee:44:99:1a:cf:5d:ba:
b6:f7:75:7e:45:8c:44:c6:16:f0:8f:4d:ce:90:aa:
94:8a:9d:4c:ad:a5:a0:62:6f:48:0f:ce:44:7c:f1:
b0:3c:2f:d0:0e:55:02:07:c4:50:fe:22:da:0c:76:
3b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:46:C0:08:35:4B:D9:F0:E2:BE:77:F9:29:48:95:BA:40:96:E8:03
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/0EbACDVL2fDivnf5KUiVukCW6AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.119.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:0a:75:6a:ab:47:fe:66:e7:26:77:60:ef:58:e8:a8:3e:98:
ac:d4:13:8a:2c:35:e7:ce:c5:44:b6:54:56:42:63:f2:5b:08:
59:2f:f1:67:e2:6c:a2:66:42:0e:a8:24:cc:3f:95:5a:d3:05:
66:f9:04:67:18:9e:17:a7:bd:09:df:b4:29:e2:af:80:05:c1:
7c:06:ca:5e:14:0d:a0:aa:2d:31:b1:d9:6d:7d:c6:ae:f6:22:
1c:ce:b7:49:59:c4:56:20:e3:1c:eb:a5:21:65:c7:f3:18:7a:
0a:8a:8f:17:f5:11:ad:a2:67:dd:c8:16:4b:15:b9:fc:62:d8:
fd:a0:63:d6:5a:84:5c:e5:13:a2:bf:65:16:9d:40:41:d9:5e:
e9:5a:8f:37:35:53:41:74:94:66:7b:c6:7a:6f:76:70:d6:a6:
09:d6:46:01:14:5c:ab:9f:d2:58:66:ec:cb:28:2a:fc:95:c0:
15:fa:e3:4c:1b:46:b6:cc:fd:dd:1c:bf:88:a7:07:70:41:7c:
a3:8b:89:aa:81:dd:0f:d1:d9:db:6b:60:41:a6:ac:96:05:3d:
89:b1:e2:96:38:8c:62:da:a1:24:36:38:46:f3:9d:62:8c:27:
42:79:c2:04:64:e0:79:f2:2e:4f:b1:7d:af:30:9a:82:5e:cb:
af:a1:b4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:05:31 2025 by rpki-client