Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/_nUIOrCKlNBAYYXKVed7TUzQHkE.roa
File: _nUIOrCKlNBAYYXKVed7TUzQHkE.roa (raw, json)
Hash identifier: 6n38ea0qBf6UnBMfeiGV/FLFHzSSnY0puOXv+hCLpAE=
Subject key identifier: FE:75:08:3A:B0:8A:94:D0:40:61:85:CA:55:E7:7B:4D:4C:D0:1E:41
Certificate issuer: /CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Certificate serial: 01856E38A84D28D5FA777C25D2959BE61D17
Authority key identifier: 72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/_nUIOrCKlNBAYYXKVed7TUzQHkE.roa
Signing time: Sun 01 Jan 2023 16:44:44 +0000
ROA not before: Sun 01 Jan 2023 16:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35591
IP address blocks: 185.196.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:a8:4d:28:d5:fa:77:7c:25:d2:95:9b:e6:1d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Validity
Not Before: Jan 1 16:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe75083ab08a94d0406185ca55e77b4d4cd01e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:e9:9c:7d:a9:c8:c2:d9:ac:fa:c5:4e:29:
f6:6f:a7:00:6a:54:45:f2:a4:78:4a:32:35:28:99:
83:7d:57:fb:9a:ab:14:04:94:8d:24:0a:b0:e9:4a:
64:a5:d5:72:4e:ce:1d:d9:06:5a:e1:06:bd:cb:7c:
1c:e4:a8:a6:36:8b:76:61:9e:fa:e6:ed:0b:6a:85:
60:3e:4a:2c:a5:a6:1d:6e:1f:6b:8e:86:d1:13:70:
c5:91:8d:d9:d5:1d:82:9a:55:64:e5:0d:1d:61:b6:
b8:91:2d:c6:6c:ae:ee:b4:6c:96:af:88:2a:62:12:
56:06:be:e2:e2:d4:7e:4b:14:1c:b0:f5:fe:ed:95:
ca:c5:24:ca:00:51:57:dd:a1:6e:47:aa:b3:44:bb:
fe:40:09:9c:15:f2:63:e3:84:2e:97:e1:05:4a:c7:
0c:4e:12:fb:5b:ff:0d:64:42:1c:1a:44:4b:b4:68:
14:e0:b0:6e:5e:ca:23:5c:94:eb:0f:87:02:75:a5:
f8:77:78:95:dc:59:f5:b7:61:a1:92:47:ca:ac:8d:
ff:4c:76:e7:1e:0b:24:64:80:14:1c:27:4b:4b:a1:
fe:3f:a4:a4:5f:81:2b:f5:c0:c4:1d:a6:69:b7:50:
c5:b1:c3:a2:38:38:b7:50:c2:86:1f:07:3d:8c:4a:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:75:08:3A:B0:8A:94:D0:40:61:85:CA:55:E7:7B:4D:4C:D0:1E:41
X509v3 Authority Key Identifier:
keyid:72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/_nUIOrCKlNBAYYXKVed7TUzQHkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.118.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:8a:57:fa:79:2c:9e:d6:b2:0a:58:8a:29:ac:79:fa:90:a3:
28:95:b9:7c:c0:d6:95:21:77:2c:d5:e7:2e:b4:85:79:8a:09:
f7:1c:1a:7f:14:3c:2d:13:cb:24:6f:fe:67:ee:20:8e:e9:a9:
db:28:3f:5e:3b:dd:77:77:8a:91:fb:0b:d6:38:e6:a1:4a:b1:
8a:58:7c:84:52:a7:fa:e6:61:ae:ca:1b:c2:5b:8f:51:6c:fc:
73:b0:c7:dc:26:1e:d9:ef:0c:14:ff:37:8d:72:3c:d4:aa:47:
62:97:2b:00:82:d3:14:98:3f:07:ad:64:fc:c8:fb:17:bf:e8:
52:97:07:99:f2:cd:9a:f2:19:56:92:07:84:ea:66:3b:06:2a:
2a:d8:c8:4d:49:ac:dc:9a:49:d7:dc:57:5d:4c:91:63:9b:91:
81:24:c0:03:66:b6:28:a5:6d:9f:8d:d2:40:86:59:43:e1:f2:
6e:63:77:d7:bc:ce:ce:71:84:36:6a:a5:54:63:47:19:31:dc:
7a:79:d7:2c:39:d1:47:29:38:64:7e:69:68:a4:3e:64:48:2d:
b1:2f:06:c2:0b:36:e3:25:4c:f7:94:10:96:8d:8a:4d:11:c3:
32:98:be:d1:35:25:38:9e:68:9c:b9:3b:2c:48:e5:f2:d1:88:
b3:4b:cd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:17:48 2025 by rpki-client