Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Ecee3v9Yu4iz-pP0HUlYYms_FD8.roa
File: Ecee3v9Yu4iz-pP0HUlYYms_FD8.roa (raw, json)
Hash identifier: yJE1y6O9sAEzq4/QWr1YZT2jcJEU9X7mHX7Qo4RTnE4=
Subject key identifier: 11:C7:9E:DE:FF:58:BB:88:B3:FA:93:F4:1D:49:58:62:6B:3F:14:3F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC10F8CBF07C00573955DA208480E4
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Ecee3v9Yu4iz-pP0HUlYYms_FD8.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60127
IP address blocks: 185.147.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:10:f8:cb:f0:7c:00:57:39:55:da:20:84:80:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11c79edeff58bb88b3fa93f41d4958626b3f143f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:14:85:c2:3e:f3:5a:c9:39:7f:b7:48:be:7c:
3c:9b:4d:3c:59:42:40:e8:ee:bb:b1:57:18:6a:79:
ba:06:ef:12:e2:1f:5c:a7:05:31:6a:1c:70:71:fa:
e0:4a:06:af:4f:e9:03:eb:84:2c:1b:a9:a1:9e:e9:
c5:c8:8b:ad:e3:38:9b:0c:50:ef:a5:e9:16:83:22:
84:54:aa:e7:b4:e4:b6:81:7e:94:e2:5d:ef:40:a9:
2d:fa:7f:7a:94:21:d2:49:3b:4a:7f:02:40:58:01:
6c:f1:37:55:d8:7d:cb:72:ab:38:77:db:0d:ca:2c:
18:7f:4a:db:19:85:02:b7:16:2e:da:d7:c7:57:1b:
5e:99:58:5d:c3:72:cd:92:5b:20:68:a5:59:58:e1:
8b:af:88:c2:c6:e5:41:b2:74:bd:2d:48:a0:bf:7b:
18:d2:7a:76:e2:34:42:54:3c:0d:29:f3:51:42:11:
4b:4f:77:e2:74:ea:0b:5c:33:33:c7:f9:4c:56:e9:
61:fc:ed:b5:ab:f0:dc:53:96:41:5e:de:37:87:5b:
02:43:ff:87:97:34:b6:71:c5:a9:05:bd:71:61:dc:
6f:30:35:55:c9:3a:c7:38:1d:5f:9e:58:be:0f:67:
52:50:31:7d:46:58:f4:61:da:81:ed:ed:f9:31:32:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C7:9E:DE:FF:58:BB:88:B3:FA:93:F4:1D:49:58:62:6B:3F:14:3F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Ecee3v9Yu4iz-pP0HUlYYms_FD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.51.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ef:2f:ed:33:9e:0b:de:91:95:5c:b5:c9:15:e7:7e:5b:1a:
02:8c:29:9e:27:aa:cc:76:a9:b2:7e:84:3a:d5:58:b0:63:a1:
58:7f:ff:21:d6:00:84:77:92:1b:65:78:3e:c2:a3:46:62:49:
95:28:0e:5a:b7:f3:a1:48:d2:9c:b2:ff:62:70:65:c2:14:93:
38:5b:2b:62:7b:bc:b2:6f:b3:13:aa:fa:33:a2:d2:45:77:f3:
e9:8d:a8:43:57:9e:36:ba:15:6b:cf:c3:be:08:97:ef:d4:73:
43:9d:66:ae:d4:76:1c:17:01:c4:35:ef:33:54:11:39:c1:c9:
9a:be:2f:7f:03:bd:92:97:1d:bd:e6:8f:e8:d7:0d:5a:49:d9:
98:77:2a:0d:81:3c:ee:24:c2:6f:ef:3c:9c:3b:9f:d2:5f:fd:
07:21:23:26:70:1a:2c:f3:b8:c0:87:6f:d6:ef:41:6e:ec:a1:
80:6f:50:a9:f1:3b:fe:23:2f:1b:1c:50:d3:a5:29:82:fa:df:
7f:01:73:2f:fb:28:ba:a8:90:a3:07:dc:2f:fd:83:f7:38:23:
5c:9e:bc:72:10:04:14:dd:c8:14:13:4b:de:de:ea:db:d9:dc:
11:eb:7e:df:3e:87:54:2c:f6:9b:0e:05:be:ee:ad:ba:9c:fa:
3c:b7:e3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:21 2025 by rpki-client