Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_ECmEGBjaRJUmF-3J9vPM9l2_0s.roa
File: _ECmEGBjaRJUmF-3J9vPM9l2_0s.roa (raw, json)
Hash identifier: 59oYKnngK1IaWiagxflwn2xt3qBJGgBYDN4XBOrM0+Y=
Subject key identifier: FC:40:A6:10:60:63:69:12:54:98:5F:B7:27:DB:CF:33:D9:76:FF:4B
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C255E70D05E931EF5905B142F1BBA
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_ECmEGBjaRJUmF-3J9vPM9l2_0s.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44148
IP address blocks: 85.121.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:25:5e:70:d0:5e:93:1e:f5:90:5b:14:2f:1b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc40a6106063691254985fb727dbcf33d976ff4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:c8:b5:cb:c5:87:45:b6:89:99:0b:7f:28:
aa:b6:6b:54:a2:6b:0d:86:ad:87:d9:b1:28:6a:25:
80:f9:6d:b1:99:fb:45:3d:9d:ba:67:c7:bf:0e:f1:
05:ae:7e:36:da:eb:49:dc:97:3f:42:7e:51:d3:41:
da:f6:b3:b6:5c:35:e3:80:7d:06:b7:f1:14:8b:c5:
83:4e:8c:b5:ac:8d:a4:e0:49:2c:07:df:16:0c:78:
e0:90:ec:b3:48:62:b8:f1:cd:f2:2a:6f:f2:eb:76:
04:60:36:3b:37:5a:c2:8d:ff:28:9a:78:82:3b:a6:
9e:8f:1d:ed:ba:50:0c:80:1b:b5:bb:5b:19:58:5b:
cd:12:4a:bc:32:fd:b9:8e:cc:48:64:fe:a3:71:a0:
f8:15:89:15:34:1d:ad:39:33:aa:b6:70:b7:76:cd:
a9:05:c5:b8:50:8a:39:77:60:56:e0:8b:1e:2f:d5:
9c:b5:b7:46:95:94:4f:8d:29:f2:bc:d8:c0:f2:58:
3c:f3:d5:7f:7b:11:c1:9b:56:14:73:07:49:60:8a:
57:ca:78:96:19:5f:4d:ec:e3:13:55:70:ba:a8:52:
3a:55:4b:52:77:61:0d:b9:70:87:33:f1:b8:b5:39:
00:ec:99:a7:1d:bb:5d:75:8d:b9:70:e3:ab:5e:c8:
8d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:40:A6:10:60:63:69:12:54:98:5F:B7:27:DB:CF:33:D9:76:FF:4B
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_ECmEGBjaRJUmF-3J9vPM9l2_0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.121.190.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c1:ce:56:7e:f1:a1:23:3a:21:81:1c:6e:aa:92:26:63:34:
da:90:c2:02:b3:5a:31:57:bd:bc:6b:16:fa:25:03:ef:6d:68:
1b:a7:91:96:39:38:10:0e:a4:fc:5b:c4:79:51:fc:f2:aa:7b:
11:2d:87:d4:98:d0:69:6c:ad:25:43:b6:e9:67:3c:ab:52:33:
ea:f2:0e:7c:8e:5f:a6:3a:ba:cb:a1:5b:b9:e6:84:e6:b4:36:
c7:d6:10:41:cd:48:03:30:d8:31:52:6b:72:cf:d2:8c:cb:93:
d7:b0:70:ea:be:60:03:1d:d5:d2:b9:72:4c:82:c9:f9:a1:6e:
28:84:53:90:35:a0:6c:21:84:0d:29:cd:29:0a:0d:12:1d:2e:
74:88:27:69:fb:f5:f7:a5:c3:09:f5:b7:d8:2b:7e:e0:db:c5:
4d:5a:7a:44:4a:c7:e2:ad:f6:f6:67:2a:32:9f:86:b7:e8:b7:
65:03:62:5d:d0:b0:76:81:d2:9a:df:57:42:24:6e:3e:68:15:
28:c1:c0:84:f4:ce:28:cb:fb:4b:9b:de:ab:60:2e:c7:08:3c:
f9:ec:c0:18:79:aa:6f:7b:f3:a5:da:99:23:1d:91:b3:98:76:
77:18:ac:b9:13:b7:0f:83:5d:7b:9e:60:76:39:54:5a:d4:bd:
97:98:19:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:30 2025 by rpki-client