Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/e-NfxLOjepxdkomksF6fURsj11U.roa
File: e-NfxLOjepxdkomksF6fURsj11U.roa (raw, json)
Hash identifier: ML0eKDnYtp4BmwIcaHEUm4JJG8UHv8aRfTM7p2ZVXmA=
Subject key identifier: 7B:E3:5F:C4:B3:A3:7A:9C:5D:92:89:A4:B0:5E:9F:51:1B:23:D7:55
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 0189E94D85F2CCA4F97BBADD7F1B53315A35
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/e-NfxLOjepxdkomksF6fURsj11U.roa
Signing time: Sat 12 Aug 2023 10:31:59 +0000
ROA not before: Sat 12 Aug 2023 10:31:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213220
IP address blocks: 185.245.42.0/23 maxlen: 24
185.245.43.0/24 maxlen: 24
185.245.40.0/24 maxlen: 24
185.243.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e9:4d:85:f2:cc:a4:f9:7b:ba:dd:7f:1b:53:31:5a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Aug 12 10:31:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7be35fc4b3a37a9c5d9289a4b05e9f511b23d755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:27:0b:a8:9f:7a:ec:65:15:7b:47:a3:2c:9a:
cd:90:d1:b7:48:51:23:0c:a2:26:bd:2e:85:0b:75:
74:14:70:68:f4:e2:4f:e2:14:44:49:6c:b2:cb:fe:
3a:0a:2d:55:49:c2:9f:7a:20:bb:d0:ad:f2:a8:09:
6a:e3:75:01:99:11:c0:9f:5d:43:1d:49:25:82:3c:
cf:a4:6d:e9:b9:ae:48:35:29:bc:ad:78:b3:3b:62:
c2:4d:db:7b:9a:f4:a4:a7:96:28:13:d1:c1:b7:27:
f8:a2:a8:a9:4e:72:f2:88:9c:bc:b1:97:d4:cd:b3:
92:e5:67:05:3a:97:cf:fb:42:65:21:d6:b4:ac:67:
aa:6c:3a:46:71:e8:e0:7c:4d:dd:80:7a:ee:c9:ca:
dd:34:93:24:07:a6:f6:43:23:a7:cb:a2:2f:b7:4a:
90:3a:68:70:06:fd:2c:58:ed:6f:3f:6b:1e:54:5a:
20:41:73:8d:7a:e8:a0:86:c8:55:0a:65:24:c4:00:
d3:e0:d1:b6:10:f2:ed:59:aa:6a:0d:f0:f4:51:ac:
fb:b6:f4:2f:d6:c2:ec:2b:68:fa:79:5c:77:cb:a8:
85:62:0f:94:14:b5:5a:f8:d4:18:e4:c5:ef:5c:98:
bd:f4:7c:40:ac:27:b3:74:06:21:3e:47:d6:27:05:
72:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E3:5F:C4:B3:A3:7A:9C:5D:92:89:A4:B0:5E:9F:51:1B:23:D7:55
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/e-NfxLOjepxdkomksF6fURsj11U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.243.0/24
185.245.40.0/24
185.245.42.0/23
Signature Algorithm: sha256WithRSAEncryption
67:c4:c9:28:64:c3:03:11:71:11:b7:cf:ab:9b:69:8c:47:7b:
54:43:e9:48:be:e7:e9:63:fc:7f:8b:93:7e:2b:17:ec:b4:01:
45:5b:b4:6d:15:00:bd:e6:f3:20:a5:10:67:f8:3f:61:24:48:
f5:bd:d0:39:f3:0f:5a:55:83:85:f7:d1:e7:0f:f9:86:58:21:
c0:2f:8c:50:cf:38:85:0c:15:a4:9e:a5:02:40:53:4a:1a:22:
86:8c:4e:c2:69:46:fe:dc:c4:77:c1:19:e5:fb:dd:5f:dd:b9:
20:c9:b5:72:49:88:0e:43:d7:25:81:be:ad:58:bb:ff:3b:55:
de:eb:69:5c:82:16:d9:e0:6f:e2:3b:9c:23:ae:06:ac:ff:5e:
d3:2b:b8:52:e9:9c:22:c0:c0:11:4b:6b:46:b3:d8:14:80:19:
bb:0c:97:cf:f6:49:b2:90:e5:60:84:ab:54:0d:d6:2c:0a:c4:
9d:05:be:cc:71:fa:9a:12:a4:c3:5d:47:13:ca:b9:d4:5e:cd:
31:35:46:30:70:8f:15:0f:4e:03:cb:db:75:44:e0:53:bd:ab:
0f:a6:ff:66:bb:37:7d:e0:09:d3:ad:b2:ab:1b:05:01:10:cc:
17:30:de:7b:26:b6:74:96:ee:73:85:41:b3:ff:a2:de:93:e3:
b1:6d:ff:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:13 2025 by rpki-client