Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/eAIf5pwwtS5DMcRXjingbijYa6I.roa
File: eAIf5pwwtS5DMcRXjingbijYa6I.roa (raw, json)
Hash identifier: 5x7C4C2DIQEq7YkrMXUAQXNBSZ9Y9MaJGusjLg+DCEM=
Subject key identifier: 78:02:1F:E6:9C:30:B5:2E:43:31:C4:57:8E:29:E0:6E:28:D8:6B:A2
Certificate issuer: /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial: 0194221F60DE25A7B5C727AA273EF2638BB6
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/eAIf5pwwtS5DMcRXjingbijYa6I.roa
Signing time: Wed 01 Jan 2025 13:47:49 +0000
ROA not before: Wed 01 Jan 2025 13:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201628
IP address blocks: 185.68.180.0/23 maxlen: 23
185.68.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:60:de:25:a7:b5:c7:27:aa:27:3e:f2:63:8b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
Validity
Not Before: Jan 1 13:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78021fe69c30b52e4331c4578e29e06e28d86ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:4c:c9:eb:e8:0f:b4:18:c2:31:62:cd:94:
0b:98:d6:5e:6e:62:52:76:ba:47:95:91:14:73:d6:
56:01:f9:3f:14:c5:85:97:0e:60:05:36:32:ea:34:
60:f6:c5:63:06:55:7a:d9:c6:6d:86:38:4f:d2:b4:
e8:62:4e:0f:b1:93:50:84:f6:87:a5:fc:33:44:0a:
6b:b8:a6:5c:0a:be:30:af:01:4b:70:09:be:a2:d4:
1c:54:c9:3e:9d:6b:f5:b0:ee:79:59:4e:47:34:d9:
6b:25:ac:b6:89:59:17:79:de:5a:15:32:45:a1:a5:
1d:84:68:9d:8a:e5:9c:19:8c:5e:9f:fc:99:9a:91:
92:5c:d9:75:2d:74:f0:59:bb:35:98:dc:4b:12:d8:
d1:a1:88:a5:06:17:cc:68:19:47:ce:8a:10:4a:8f:
60:b4:95:b6:35:1a:77:7d:65:c0:88:d3:f8:99:df:
39:2e:0b:a2:e8:df:42:34:f6:0f:65:41:4b:7a:87:
1b:a1:96:3f:ad:41:55:f4:25:00:71:35:4a:a0:fe:
dc:e0:ff:86:bf:c3:c3:25:52:86:2e:b6:37:dd:6e:
0d:25:5b:c4:ea:f0:23:fc:3e:5c:ae:f2:05:a8:61:
d4:3d:6a:d2:99:88:57:7c:bf:b4:10:e9:5e:2e:95:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:02:1F:E6:9C:30:B5:2E:43:31:C4:57:8E:29:E0:6E:28:D8:6B:A2
X509v3 Authority Key Identifier:
keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/eAIf5pwwtS5DMcRXjingbijYa6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.180.0/23
185.68.183.0/24
Signature Algorithm: sha256WithRSAEncryption
85:2e:db:18:e8:7e:8d:1d:af:0a:71:57:66:ed:81:26:8f:1e:
17:eb:0e:a0:b9:e3:c8:62:dd:0d:24:18:67:79:e8:63:9c:e2:
87:03:b5:e0:b1:a6:ad:1d:04:8d:12:4e:1d:7e:06:84:2f:c0:
59:92:41:76:56:74:29:b2:20:3f:1a:f5:84:32:cd:a7:3e:95:
40:e5:5b:fd:82:63:59:e1:0d:1c:bf:70:af:f7:2b:01:fa:30:
b3:f5:88:f6:c7:bf:f3:01:30:6b:bb:e2:3d:70:c7:62:05:25:
16:3a:76:e0:cb:48:05:cd:99:e2:1e:30:39:82:ca:19:3e:3a:
0d:da:94:26:c8:f6:9b:5d:2d:f6:5f:70:25:18:6d:9d:72:0c:
2a:94:ed:18:bd:62:df:ab:41:cf:90:77:36:fb:de:5f:2b:ba:
2c:fa:a5:05:a5:14:51:26:ad:86:a0:4c:c0:8d:11:57:08:ff:
d3:8f:38:5a:bd:18:4d:be:6a:93:f4:03:d3:ec:b8:97:ec:4a:
59:8f:09:a8:cf:44:33:eb:3b:8d:7b:27:a7:12:2a:06:8c:9b:
6e:95:61:ba:fa:24:7d:15:22:93:db:9c:84:f2:d8:6b:42:7f:
8e:8e:5d:01:82:32:b3:04:5d:d3:39:51:c4:c1:99:89:b4:3d:
4d:f2:be:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:03 2025 by rpki-client