Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/EcMSrqduSSEdpF-7ulVjTtPYpNE.roa
File: EcMSrqduSSEdpF-7ulVjTtPYpNE.roa (raw, json)
Hash identifier: ZA8qM0bISMva3I03nVcIL7KQUByRBGHdqun/Plkp8KA=
Subject key identifier: 11:C3:12:AE:A7:6E:49:21:1D:A4:5F:BB:BA:55:63:4E:D3:D8:A4:D1
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 019423699F7CD825095B2422610703EBC060
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/EcMSrqduSSEdpF-7ulVjTtPYpNE.roa
Signing time: Wed 01 Jan 2025 19:48:32 +0000
ROA not before: Wed 01 Jan 2025 19:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207990
IP address blocks: 185.5.146.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9f:7c:d8:25:09:5b:24:22:61:07:03:eb:c0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Jan 1 19:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11c312aea76e49211da45fbbba55634ed3d8a4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:e2:a7:cf:79:d2:76:6e:ef:1d:72:76:34:
26:a8:63:00:eb:47:76:a1:26:f7:f7:a4:fc:fe:ba:
bb:bb:a6:3d:13:a5:47:4f:4c:62:e1:26:89:a3:15:
ec:c2:d1:ee:ad:ae:e0:3a:13:fc:7d:cb:e6:56:52:
df:f7:03:38:68:31:0c:dc:a0:de:30:9c:ff:4d:e8:
b7:3d:a4:67:ae:0c:de:f0:25:87:66:c0:eb:6b:62:
71:2a:85:5e:5c:ce:05:8d:e2:87:d8:69:aa:3c:43:
ad:4c:22:6f:dd:4e:ec:7b:ba:8e:36:ba:16:be:5a:
55:29:d5:b4:19:88:26:49:ec:ef:ce:7b:60:2b:10:
9d:ed:c7:08:47:c4:38:aa:79:dd:26:6a:cf:6d:e7:
58:ae:52:38:bf:21:3d:c6:69:df:f5:8f:c1:7b:5c:
82:82:7a:67:ac:1d:c1:7c:28:82:c4:33:cd:fb:f0:
7e:55:38:82:cd:72:34:7f:12:ca:3c:b7:30:54:44:
a0:ad:36:d3:47:db:a4:8e:01:7d:bc:cc:f4:25:e8:
38:0a:6f:76:3f:32:94:13:0f:ce:3b:ed:b5:b1:71:
73:47:d1:a2:d4:5d:40:08:af:52:71:6e:0b:bd:0d:
a1:0e:d7:04:09:ff:5e:88:f3:22:e9:c6:d0:d4:e0:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C3:12:AE:A7:6E:49:21:1D:A4:5F:BB:BA:55:63:4E:D3:D8:A4:D1
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/EcMSrqduSSEdpF-7ulVjTtPYpNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.146.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:df:c9:d4:3f:49:63:ae:ae:64:a1:5b:86:84:d6:8a:75:0b:
6f:cc:d9:46:5c:f0:f3:96:4a:c5:5c:98:c0:97:29:4c:34:2a:
7a:f0:5d:17:6d:94:b9:e7:20:54:06:38:7c:b8:2d:1d:cc:78:
87:94:08:a5:ac:b6:a5:a7:a1:bd:77:d6:ed:4a:ad:05:b8:38:
ca:7e:9a:de:be:b3:64:3b:f2:82:7a:ff:ee:45:d2:23:c5:e1:
23:5a:dc:d8:3d:c5:ed:53:d3:1a:a9:06:a9:9d:32:55:b7:00:
3a:2d:6e:ef:38:66:f4:6c:37:db:c0:b2:94:c8:9f:81:a3:d4:
c9:6f:5a:6f:59:1d:83:4d:bb:b5:7a:04:8d:10:04:87:83:8c:
21:4f:d3:2d:6a:a4:27:1c:05:72:89:4d:c8:62:46:bf:12:f4:
86:c3:3e:a4:62:b1:41:bc:1a:29:3a:58:6f:3b:3d:c2:b3:e6:
19:9d:4b:19:8b:da:c2:35:bc:16:bf:3e:e2:e0:b9:f2:0e:cd:
f8:37:36:47:f5:a1:73:59:98:13:54:85:65:5d:a4:ff:43:12:
45:71:28:1a:73:a1:26:23:91:a7:d1:5b:cd:77:bb:0c:37:f8:
c5:5a:19:34:7d:f9:d3:04:8b:6b:d4:83:54:67:5c:a2:9e:f9:
f5:56:23:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:50:32 2025 by rpki-client