Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/EFxSU25sGdE7ReGZ4hQCxcL1EQo.roa
File: EFxSU25sGdE7ReGZ4hQCxcL1EQo.roa (raw, json)
Hash identifier: uR14mG4VrYUKqqD3TGgmTlLEojfMxYMgFQs/N0rSPIw=
Subject key identifier: 10:5C:52:53:6E:6C:19:D1:3B:45:E1:99:E2:14:02:C5:C2:F5:11:0A
Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial: 01942444FABC1520674AFFBCC0B0DF79A482
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/EFxSU25sGdE7ReGZ4hQCxcL1EQo.roa
Signing time: Wed 01 Jan 2025 23:48:07 +0000
ROA not before: Wed 01 Jan 2025 23:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7754
IP address blocks: 185.212.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:fa:bc:15:20:67:4a:ff:bc:c0:b0:df:79:a4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Validity
Not Before: Jan 1 23:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=105c52536e6c19d13b45e199e21402c5c2f5110a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f9:2c:c8:a3:78:81:62:33:03:12:6c:4c:26:
95:d2:1d:ac:21:28:e8:68:3c:53:1c:e5:02:6b:e2:
73:0a:d7:f4:e4:35:1b:31:0b:ad:82:60:e5:c7:76:
0d:f5:af:44:23:8c:a7:a1:5e:1b:5f:e6:be:99:19:
72:b3:3c:7d:e3:71:20:71:5f:ef:b5:57:a9:8a:81:
fe:71:23:87:e6:e3:8d:9e:29:33:7a:09:5e:9e:48:
f6:5c:3a:99:2b:05:78:08:c9:0d:bb:2a:d6:05:e9:
59:6c:e0:cc:27:36:c0:b4:74:d1:eb:d2:2b:a8:22:
d3:52:34:65:41:7f:b1:04:71:b0:ee:5e:20:fd:05:
0e:40:26:d8:9f:b4:70:d2:a5:94:3d:4c:c7:61:e5:
e7:e4:e6:21:80:0c:64:01:82:f5:de:a6:d6:cb:dc:
40:2d:29:1e:70:ac:44:70:49:af:40:21:27:34:c7:
0a:b5:82:00:12:01:e6:89:69:f2:68:2f:9d:da:21:
5e:65:55:5e:7c:00:5b:72:07:e2:4a:e9:46:91:a6:
e3:6f:73:83:05:28:42:50:fb:66:97:1d:5a:a5:26:
11:18:a5:cf:dd:38:bf:a9:b1:c0:12:76:1f:4f:0c:
9d:11:fa:f1:b9:ae:93:0a:ac:c5:92:33:22:2e:16:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5C:52:53:6E:6C:19:D1:3B:45:E1:99:E2:14:02:C5:C2:F5:11:0A
X509v3 Authority Key Identifier:
keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/EFxSU25sGdE7ReGZ4hQCxcL1EQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.104.0/24
Signature Algorithm: sha256WithRSAEncryption
54:88:af:2b:8f:d1:8d:d5:a0:39:9e:22:d4:d7:a0:0c:78:45:
d5:0a:5a:ff:4f:9f:a3:43:4f:04:26:45:50:fc:0a:54:ae:8a:
27:07:05:02:9a:ee:95:34:a1:d7:23:a6:87:2a:39:95:0a:2b:
22:7d:6a:fd:b8:d1:c4:b4:00:1e:b1:83:9e:2a:ea:d3:3d:23:
18:88:51:8e:44:d3:23:b4:08:4f:4a:0b:4f:ec:4b:94:24:e1:
51:d9:78:a8:cb:6b:13:01:6c:5e:64:44:78:7f:ec:f8:74:6f:
f2:d1:59:12:b0:5d:8f:25:01:86:93:5a:be:52:ee:31:03:7f:
e2:4d:c2:74:7e:7a:64:46:18:26:c5:93:ea:97:03:ce:44:27:
eb:cb:17:e7:7c:7d:23:c3:d7:a4:11:e7:0e:f8:65:69:73:65:
31:39:3b:b1:54:3b:dc:0b:83:21:a9:cf:d1:de:b6:33:68:b7:
ca:bc:ed:ce:00:90:48:89:4e:22:48:bd:a9:15:a5:7a:62:1c:
f2:8c:7b:da:12:b2:a6:37:29:a5:aa:d6:bf:18:d8:d5:ed:06:
9a:23:ad:37:8d:73:96:52:57:27:63:bb:90:7e:96:1b:26:e2:
f9:a8:68:1f:5b:53:63:7c:87:ba:0a:4e:c0:1d:dd:f1:00:3f:
57:a7:b6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:18 2025 by rpki-client