Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/EV3RLPCtuI3lLeq6ottkvu3RCX0.roa
File: EV3RLPCtuI3lLeq6ottkvu3RCX0.roa (raw, json)
Hash identifier: j3FY48aHBuxh9abdvmrJO1cvpOYjsUrGf4ptwj/I2mQ=
Subject key identifier: 11:5D:D1:2C:F0:AD:B8:8D:E5:2D:EA:BA:A2:DB:64:BE:ED:D1:09:7D
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01941FFA377978E44105B1B1DED8D33B1333
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/EV3RLPCtuI3lLeq6ottkvu3RCX0.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210636
IP address blocks: 185.89.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:37:79:78:e4:41:05:b1:b1:de:d8:d3:3b:13:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=115dd12cf0adb88de52deabaa2db64beedd1097d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:d2:07:82:ca:08:3f:fd:de:70:97:8d:df:
f0:5e:03:40:c6:7e:50:9e:a1:0f:a8:ac:cf:f8:c7:
dd:b6:73:a2:df:0e:d2:be:bd:aa:14:26:15:61:14:
89:eb:fd:1c:87:cd:33:26:31:eb:ef:82:86:b6:03:
7d:9b:0b:23:57:7a:94:ea:34:b4:30:17:c0:b2:d5:
00:1f:05:27:bf:9a:2e:d8:7a:21:dc:e4:a4:fd:e3:
76:9e:1f:90:47:5b:c5:db:98:21:73:00:24:cc:10:
ad:53:e6:91:05:c6:2a:f5:92:33:ef:85:74:3d:79:
3a:cd:db:b5:a2:61:cc:71:67:01:22:2d:50:1a:8e:
61:c6:32:58:0d:34:4d:fe:b7:86:66:11:5b:37:1e:
24:f3:cb:58:fe:ab:1c:b7:1a:d3:12:44:10:20:d2:
37:ff:d4:37:ad:81:ee:ae:e9:cf:65:54:e7:ab:c6:
c0:0e:2b:bf:69:ce:6c:38:f8:3d:8c:a8:25:81:9d:
ca:9e:54:9a:4e:8c:6b:01:66:ec:38:b0:ee:89:0e:
a4:27:d1:cd:ed:48:42:38:26:11:7e:33:c7:1e:b7:
20:39:86:a9:6a:5a:e3:f7:9b:58:43:e9:13:0e:8f:
39:eb:40:29:bc:32:e8:9a:35:4f:4d:af:b2:33:06:
34:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5D:D1:2C:F0:AD:B8:8D:E5:2D:EA:BA:A2:DB:64:BE:ED:D1:09:7D
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/EV3RLPCtuI3lLeq6ottkvu3RCX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.249.0/24
Signature Algorithm: sha256WithRSAEncryption
54:91:c5:25:29:21:69:39:3c:e0:0a:f5:6f:53:a1:e9:b0:19:
63:15:62:c1:32:8c:65:42:2c:80:4c:2c:1e:2e:7e:cc:f8:81:
0f:3a:52:6e:2a:d0:04:fc:a8:96:f9:71:1c:58:52:b8:cc:63:
e0:d6:37:c0:14:4c:14:b5:a2:47:fc:11:c3:a7:c3:b0:3e:32:
b0:c6:9f:8d:13:2f:fe:4c:17:0f:d3:53:ce:f9:d2:dd:1d:a5:
14:58:e8:d4:f6:6b:51:5b:e3:c3:49:aa:30:f4:a2:4a:46:d8:
c0:35:5c:a5:80:c1:10:b0:e5:6a:c2:63:47:a1:2b:cf:55:7f:
c5:b0:28:f1:c9:65:26:12:23:53:c1:8e:6b:18:43:db:0a:da:
ab:e6:35:3e:7f:e0:16:f5:b1:02:c9:47:f4:ce:e2:c5:d3:7f:
8c:6f:8c:5e:84:90:1f:73:ad:ee:fa:13:1b:d0:f2:99:f3:53:
0a:78:e7:ea:3a:8e:30:9e:eb:28:ac:58:ce:c7:64:da:ad:4e:
c6:f8:99:ed:ff:71:77:71:3b:23:04:35:54:5c:19:82:b7:44:
34:1a:99:44:19:2d:cd:62:cb:42:57:dd:e8:a9:19:2e:6e:cb:
6d:14:2a:b2:44:99:60:fe:40:33:04:0f:5d:ea:05:40:60:b0:
16:15:8e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:53 2025 by rpki-client