Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/enym-QVvSigss7bPZ_3KykZLjjY.roa
File: enym-QVvSigss7bPZ_3KykZLjjY.roa (raw, json)
Hash identifier: mGYbtQrz72vmZ9tDyqxEGrwZzwIr6imKxwjdpRhDhdY=
Subject key identifier: 7A:7C:A6:F9:05:6F:4A:28:2C:B3:B6:CF:67:FD:CA:CA:46:4B:8E:36
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942144055C4269C3EC468238BDEE327C70
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/enym-QVvSigss7bPZ_3KykZLjjY.roa
Signing time: Wed 01 Jan 2025 09:48:13 +0000
ROA not before: Wed 01 Jan 2025 09:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50969
IP address blocks: 195.211.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:05:5c:42:69:c3:ec:46:82:38:bd:ee:32:7c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a7ca6f9056f4a282cb3b6cf67fdcaca464b8e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:67:04:c3:f8:cd:42:b2:7a:23:1d:c2:0b:8d:
a7:9a:14:11:34:f1:33:71:44:16:dd:7d:75:bc:16:
37:f8:67:37:53:36:4b:90:93:08:63:c8:db:3c:80:
7c:fc:54:4f:da:be:38:6f:2c:79:9a:bb:89:d2:99:
83:75:7a:6e:ee:51:f5:8c:5f:e3:a1:a8:6c:d4:1e:
33:bc:91:e1:92:2e:4f:9a:22:46:10:a9:74:3d:09:
be:5a:eb:3e:81:1c:bc:03:5f:39:85:39:30:92:80:
21:7e:06:1f:9b:e3:55:17:56:11:9a:d2:21:7d:dc:
83:e6:8e:ac:a5:70:ea:ad:4a:98:b2:7a:80:ba:68:
7d:70:ae:e2:e1:59:0d:5f:91:0e:a9:fe:86:12:f2:
49:e0:db:86:8d:b0:38:f4:6b:5c:09:74:c6:b8:1f:
9f:61:86:c1:23:1e:26:ac:2f:7f:7d:46:59:ee:0e:
28:a3:b8:0b:42:9e:80:6c:88:a9:0a:b7:dd:9c:d3:
f2:92:32:42:1c:33:ac:1d:a5:60:f3:8c:b1:90:45:
ad:53:28:16:f8:07:86:41:69:82:8e:72:cd:3f:c6:
03:f5:b9:51:94:45:31:30:72:3b:2e:9f:1b:73:0e:
be:7d:8b:2c:04:06:db:7d:ee:a4:06:86:1b:36:57:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7C:A6:F9:05:6F:4A:28:2C:B3:B6:CF:67:FD:CA:CA:46:4B:8E:36
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/enym-QVvSigss7bPZ_3KykZLjjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.166.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:70:ca:20:b0:cb:7f:ec:87:60:9c:12:24:f2:ba:ef:3d:96:
70:d7:77:2c:88:78:df:dc:f7:8a:19:bf:29:a5:dc:27:bc:0c:
1b:fd:94:9d:43:e6:02:b4:07:8a:1f:05:8c:23:cd:c8:46:3e:
4b:e6:f8:9b:38:a0:69:e0:3f:51:25:b4:73:11:35:2b:e5:f0:
06:fa:5d:75:a2:9b:c7:f5:61:5e:16:d4:3e:2d:a0:89:23:47:
69:5c:13:2f:0f:da:f9:98:08:2f:22:b6:c9:71:56:fd:95:90:
3e:e3:57:da:e3:6c:70:3f:4a:17:d0:41:29:53:98:0f:6f:ac:
10:63:66:9a:4f:aa:d7:e5:90:44:51:d1:16:e9:39:8e:13:72:
d3:5f:3b:d5:f7:79:27:10:b5:06:33:5b:99:b9:ba:63:06:23:
47:3d:79:07:b9:56:15:a2:8e:34:52:68:09:d0:fa:07:3d:48:
a3:31:2b:c2:69:f8:74:a3:4a:0c:70:23:94:63:6d:21:90:2a:
33:f6:39:e6:04:b4:27:23:8b:e5:0b:df:f2:30:2f:a1:5c:b3:
10:f5:61:28:12:98:4e:93:8b:cb:65:28:dc:9b:74:65:8e:01:
c4:92:7a:d4:b5:88:97:8e:17:f8:0c:17:14:91:85:76:57:ba:
e1:d9:b4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:21:54 2025 by rpki-client