Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/EzVC6hFH0RtKA1lARrwdwMJ07Q0.roa
File: EzVC6hFH0RtKA1lARrwdwMJ07Q0.roa (raw, json)
Hash identifier: 2S3sYcvaMN06mor0RfdxJiX/gftEZ6TMLtUoAQi1mDE=
Subject key identifier: 13:35:42:EA:11:47:D1:1B:4A:03:59:40:46:BC:1D:C0:C2:74:ED:0D
Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial: 019423D7FB13BA2BDEDCA756AAA47F82CB4D
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/EzVC6hFH0RtKA1lARrwdwMJ07Q0.roa
Signing time: Wed 01 Jan 2025 21:49:04 +0000
ROA not before: Wed 01 Jan 2025 21:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 185.206.123.0/24 maxlen: 24
2a10:ca00:1::/48 maxlen: 48
2a10:ca00:2::/48 maxlen: 48
2a10:ca00:3::/48 maxlen: 48
2a10:ca00:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fb:13:ba:2b:de:dc:a7:56:aa:a4:7f:82:cb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
Validity
Not Before: Jan 1 21:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=133542ea1147d11b4a03594046bc1dc0c274ed0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4e:36:ed:05:54:4c:15:da:23:ae:ee:b2:33:
94:1a:92:80:3b:3c:af:28:15:db:d3:57:d9:3e:92:
d6:75:10:57:b4:8c:69:b9:d6:5d:7e:61:da:1f:59:
da:f7:1b:95:f2:cd:07:d5:73:b4:29:a2:4e:d5:fa:
57:e9:cf:4a:26:d8:3c:ef:e7:46:98:28:b1:06:27:
53:43:b2:b3:ce:3e:da:c4:30:3e:5a:04:4a:c1:a6:
bf:f8:08:a0:15:11:61:30:22:05:35:32:ba:1a:45:
0e:94:7d:34:17:4d:46:fc:09:1c:9e:56:ab:60:48:
75:bf:0b:a7:84:8a:db:b8:06:84:2d:9f:3e:ad:74:
e0:b1:15:4d:19:5d:7b:5a:39:58:e4:cc:63:68:88:
4f:27:44:f0:96:89:f0:28:6a:ee:d3:a8:66:ee:31:
87:36:8e:7a:f3:af:89:54:b6:b5:2e:d9:2a:1b:83:
af:98:62:98:c8:4f:f9:d9:d1:ad:70:3d:74:fa:bb:
80:b6:e9:37:dc:03:6e:5a:2b:51:99:f1:b4:8d:01:
b8:c4:ab:e7:8b:2f:7b:52:89:c7:2a:3c:75:b8:5e:
1b:78:00:de:69:13:ea:68:85:7f:0a:a2:1a:f8:e2:
d4:0a:4a:2e:b4:af:f7:40:6d:fc:d5:57:04:af:78:
65:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:35:42:EA:11:47:D1:1B:4A:03:59:40:46:BC:1D:C0:C2:74:ED:0D
X509v3 Authority Key Identifier:
keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/EzVC6hFH0RtKA1lARrwdwMJ07Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.123.0/24
IPv6:
2a10:ca00:1::-2a10:ca00:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1f:2c:fb:37:d0:9c:48:7d:fe:e2:b9:a6:5b:ef:76:fe:ee:d7:
c4:7c:16:8b:20:a1:25:bb:d2:48:19:d5:86:3a:bf:15:36:ee:
9f:d9:a0:c9:93:1e:d7:8e:b3:f1:78:f8:65:09:29:88:63:09:
36:49:7e:92:90:09:81:65:f1:98:83:75:e1:b5:93:51:43:20:
cc:6a:0a:79:67:c9:5e:17:10:49:9b:31:7c:cf:35:e0:7a:75:
03:59:bf:36:a0:09:ae:41:ed:2b:7f:73:bd:19:cb:77:3a:e1:
db:a3:dd:28:07:c0:a0:f0:35:9d:1d:e9:6f:c0:49:1c:56:14:
05:da:4c:eb:39:86:77:46:73:fb:59:ac:48:7a:0f:b6:b2:52:
38:ba:d9:07:fa:75:38:cc:57:42:08:f2:78:58:fa:c2:c6:88:
43:d6:8e:b5:ff:83:c1:6f:a3:2e:51:42:66:d8:87:e3:14:f5:
7d:04:ed:b2:26:b1:52:7e:67:3c:6a:64:98:8a:8b:5a:d7:b0:
39:18:7b:e4:59:12:68:d7:50:31:70:87:16:1e:cc:ce:e5:8b:
06:8a:fb:f0:b4:60:5e:12:6c:80:29:5a:c3:e1:a4:4b:75:2c:
ad:d3:0f:20:0f:95:d4:d4:e4:df:89:de:ec:e9:7b:c8:d6:4d:
0c:8a:f4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:52:00 2025 by rpki-client