Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/eN7u_dmLHK9u0yEl40kJguRJ0Ns.roa
File: eN7u_dmLHK9u0yEl40kJguRJ0Ns.roa (raw, json)
Hash identifier: bn93CTnX61aJIdS2Ic9QTPFTutjv8CPzrI+TQpoIq1g=
Subject key identifier: 78:DE:EE:FD:D9:8B:1C:AF:6E:D3:21:25:E3:49:09:82:E4:49:D0:DB
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 018D18E70D03F145EEAD63A82E554C008F2E
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/eN7u_dmLHK9u0yEl40kJguRJ0Ns.roa
Signing time: Wed 17 Jan 2024 19:30:11 +0000
ROA not before: Wed 17 Jan 2024 19:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54113
IP address blocks: 185.31.16.0/24 maxlen: 24
185.31.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:18:e7:0d:03:f1:45:ee:ad:63:a8:2e:55:4c:00:8f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Jan 17 19:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78deeefdd98b1caf6ed32125e3490982e449d0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:38:7a:cd:83:90:e1:0d:64:59:54:98:ae:
59:b4:0a:f3:d4:78:99:0f:68:16:6b:35:c6:f7:5a:
45:c9:a6:8e:05:47:ad:c3:b6:f7:71:f2:73:d8:22:
99:25:ce:3f:02:69:ae:6d:13:40:47:2a:79:e0:2c:
df:04:b2:6c:21:85:2e:ca:da:61:ea:4b:10:72:a8:
67:d6:e4:79:00:e2:22:ca:47:43:4b:b3:d8:fd:c6:
3c:d9:4c:b2:b5:85:30:7b:9c:39:24:6f:c3:b0:ea:
66:71:5c:e5:f0:8c:06:ee:cc:60:ed:87:4b:46:26:
c5:58:c4:aa:71:80:dc:ca:19:82:31:9d:88:0f:35:
1e:21:ef:ab:35:16:c9:32:19:2c:04:03:89:21:07:
fc:04:09:99:7c:84:ee:06:33:09:24:3f:96:11:71:
33:b2:91:53:ee:b0:50:1e:e1:ce:42:1f:33:61:d0:
ea:9d:5d:90:66:19:f4:bb:6c:77:13:00:e8:f4:e3:
cb:a8:92:24:9d:a8:ef:63:c8:94:50:8c:ce:21:07:
4d:35:8c:0e:6f:42:61:55:8c:61:6c:1c:85:65:40:
d9:da:98:4a:61:de:27:0f:e2:c6:7e:f0:0a:9a:bc:
39:a3:ef:23:8c:b4:e5:71:4f:72:13:6e:8b:38:1f:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DE:EE:FD:D9:8B:1C:AF:6E:D3:21:25:E3:49:09:82:E4:49:D0:DB
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/eN7u_dmLHK9u0yEl40kJguRJ0Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.16.0/24
185.31.19.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bf:27:74:eb:b9:3e:04:9e:d9:f2:a4:59:33:d7:8b:19:cb:
15:b9:5e:e7:93:df:12:a9:cd:ca:16:91:a4:74:85:cd:94:36:
e3:43:17:7e:82:54:ab:1c:c7:4b:1d:99:15:a6:b5:28:67:9e:
65:e0:62:65:b3:66:56:bd:5c:1e:2f:ce:7b:64:bf:f1:cd:eb:
4d:6d:f9:cb:91:4d:4b:29:15:39:5a:d4:35:fb:70:21:f8:a5:
49:29:6d:4b:02:a6:dc:2c:bd:6a:32:9c:ab:09:d5:99:48:9a:
35:9b:e3:30:5a:b5:c1:6e:0a:cd:54:ff:7b:08:9f:d9:68:cd:
86:ea:99:52:46:a7:b2:88:35:2c:b1:45:97:6a:b6:6f:43:4a:
81:03:40:64:1d:25:b3:09:da:84:42:4c:ad:ec:df:52:a2:b3:
4f:fd:8d:05:e1:c2:85:fb:8b:ea:61:41:8a:ec:3e:23:a3:e9:
9b:b2:ed:2a:e5:b1:34:57:3f:f7:d9:4a:46:1e:db:85:4a:67:
c4:17:27:93:7f:5e:04:05:12:28:77:09:e0:5a:22:e9:ab:fe:
71:79:54:bd:39:ec:6d:3f:8b:40:7a:86:af:83:76:7a:77:67:
eb:df:c7:41:09:93:26:43:3e:08:53:3c:32:19:f4:47:58:f7:
b5:01:f8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:48:41 2025 by rpki-client