Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/E8pnZAwdco6rqZPYbTvktaE1H_E.roa
File: E8pnZAwdco6rqZPYbTvktaE1H_E.roa (raw, json)
Hash identifier: mJU1Xr9YV7h0pCMVQKe6h9rLN6ylm3PlXlO/99QSzGM=
Subject key identifier: 13:CA:67:64:0C:1D:72:8E:AB:A9:93:D8:6D:3B:E4:B5:A1:35:1F:F1
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 01941FFA0B851C9A96DEC637C54C2CC3B777
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/E8pnZAwdco6rqZPYbTvktaE1H_E.roa
Signing time: Wed 01 Jan 2025 03:47:48 +0000
ROA not before: Wed 01 Jan 2025 03:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 185.195.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0b:85:1c:9a:96:de:c6:37:c5:4c:2c:c3:b7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: Jan 1 03:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13ca67640c1d728eaba993d86d3be4b5a1351ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:76:42:6c:6d:a3:31:d3:dd:2f:98:41:62:
3e:bc:22:5b:73:52:c7:c5:3e:74:d8:30:bd:1f:2c:
63:ca:9f:95:92:42:6d:db:4b:2b:d7:7c:30:dd:42:
bc:1f:03:62:c4:ae:6e:ad:e7:6b:f0:cb:39:50:b9:
e6:62:9a:08:1b:65:30:87:07:7f:ac:2a:b4:f7:2a:
a5:2a:d5:45:1f:8d:00:c1:c8:67:93:9a:69:bd:72:
7d:9d:6d:cc:45:3a:78:7a:42:f4:a9:8e:f8:55:9e:
f8:1e:d9:16:12:63:28:94:ce:48:9c:cd:5d:fb:f5:
95:50:98:e5:17:b2:4d:09:e5:29:82:72:82:6c:85:
6e:3a:6e:f0:6e:03:af:3d:64:34:1a:bf:67:6f:5c:
68:b1:27:54:47:49:01:cc:1c:6f:5c:de:54:c4:77:
9f:e5:b6:35:63:43:87:51:45:12:c6:e6:81:9f:9e:
72:5e:0d:05:8e:80:4f:51:81:70:0b:e1:c1:1f:0d:
aa:49:bc:0b:0f:f4:e2:a2:02:bf:38:f6:85:ed:a4:
36:11:1e:c0:66:1f:cf:8f:2e:99:9a:df:00:1a:4e:
fb:ce:24:eb:0d:28:52:93:16:c5:f8:32:fe:98:7b:
16:e6:67:e6:69:60:60:de:7f:9d:1f:17:f2:c8:b7:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CA:67:64:0C:1D:72:8E:AB:A9:93:D8:6D:3B:E4:B5:A1:35:1F:F1
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/E8pnZAwdco6rqZPYbTvktaE1H_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.61.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:2e:b6:10:b6:c9:13:5e:bb:aa:f6:bb:a5:bb:df:6e:34:4e:
0c:21:f1:c9:22:81:fc:2a:89:97:c4:40:f7:d0:9b:47:77:35:
99:58:a1:ea:52:14:5a:17:0b:c3:60:68:e6:ae:58:56:a2:36:
1b:ca:e7:3c:68:4a:c7:34:2c:c6:63:66:78:d7:81:aa:ea:c8:
c9:95:99:c0:14:8b:ea:68:71:db:d8:e6:d0:7e:f5:e6:62:af:
15:06:ad:6b:13:b1:c0:25:81:eb:0a:7b:b3:15:34:08:c9:6d:
7b:1e:8c:41:a0:78:a3:da:4d:32:b9:2e:dc:ac:15:59:cb:92:
8c:74:b1:ba:66:a4:e3:fe:59:5e:fc:1b:1a:a3:21:5a:bd:69:
46:34:4e:a1:41:86:24:7d:12:e0:bd:63:f1:2f:1e:ec:ba:69:
f8:1b:5c:b1:f8:e5:57:8b:ac:a5:f5:36:af:c8:50:23:cb:55:
e2:5a:9e:1b:f0:13:c7:7c:48:81:a3:0e:4e:ac:77:7b:20:1c:
88:39:e6:ba:47:8b:3a:de:5f:98:a3:44:28:fd:14:37:86:d1:
a3:aa:84:73:b9:51:df:f2:5b:d1:87:43:77:21:fe:18:43:12:
fe:41:11:3c:3e:56:1c:4b:a2:63:fc:23:c6:b1:b6:a0:86:9b:
05:29:07:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:29:25 2025 by rpki-client