Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/eNIzChavkXrXhBcx5KhFIa_03No.roa
File: eNIzChavkXrXhBcx5KhFIa_03No.roa (raw, json)
Hash identifier: al6RTv9L5NiUuPwMYnEc4gdzs2XQ2y9lN+MHqth5CUY=
Subject key identifier: 78:D2:33:0A:16:AF:91:7A:D7:84:17:31:E4:A8:45:21:AF:F4:DC:DA
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 0194228E2B47ACD4DA0D354F0F5807D6A061
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/eNIzChavkXrXhBcx5KhFIa_03No.roa
Signing time: Wed 01 Jan 2025 15:48:50 +0000
ROA not before: Wed 01 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272470
IP address blocks: 185.155.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2b:47:ac:d4:da:0d:35:4f:0f:58:07:d6:a0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d2330a16af917ad7841731e4a84521aff4dcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:1f:82:45:ac:b1:5f:b3:23:05:b9:8a:fb:
d1:55:98:51:21:32:32:48:64:04:c6:26:02:ae:6d:
6d:53:d2:32:80:fa:4d:fe:97:9d:93:5b:ae:22:a9:
63:c5:fc:e5:af:ab:1e:3b:dd:ca:91:fa:fb:42:9c:
bc:96:1b:5d:bf:05:39:37:68:5c:d1:73:e9:4c:fa:
60:2e:7d:a0:37:4f:bd:2a:25:48:70:1a:09:78:0b:
ba:8b:f8:04:40:c6:c9:6f:c2:6b:44:87:14:50:c8:
a8:c9:62:64:f9:32:fb:84:f5:32:a5:4a:03:a0:90:
8e:4d:35:c6:d0:4d:65:5a:94:07:0a:d9:ed:34:8e:
77:ca:42:3e:03:55:4e:5f:64:63:64:23:5f:ee:87:
fd:f1:10:6f:16:f0:fa:7b:00:3d:69:50:af:08:ad:
ff:61:af:90:22:23:3a:ed:b7:ff:1b:26:09:6e:04:
d5:b1:39:5e:12:fc:46:8c:a5:de:94:ff:8f:ac:cf:
a3:45:40:fd:19:92:c6:35:0e:53:b1:d8:ba:3e:30:
f2:92:dc:97:6c:a1:79:3d:c6:e0:8e:6b:bb:e9:be:
eb:95:6f:a1:42:e4:c8:ac:7e:82:13:fa:b9:1a:1d:
9f:6c:e8:8f:b2:ff:73:c0:14:42:33:e1:68:d4:50:
16:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D2:33:0A:16:AF:91:7A:D7:84:17:31:E4:A8:45:21:AF:F4:DC:DA
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/eNIzChavkXrXhBcx5KhFIa_03No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.53.0/24
Signature Algorithm: sha256WithRSAEncryption
39:cc:fa:54:21:a9:7a:5b:e6:b4:0d:ba:e8:aa:b4:6f:95:54:
45:48:f2:d7:d1:cc:c8:67:41:ee:83:07:47:ec:5c:f3:29:3e:
75:d1:67:1c:e8:06:4d:ce:de:b6:84:61:0d:d8:0e:24:62:bb:
6d:23:3b:83:c9:b1:72:84:91:96:cc:61:62:29:5b:43:90:28:
37:0b:91:c5:26:bb:72:0e:c5:9d:82:b0:0c:39:ab:bc:a3:48:
e9:bb:b5:be:c6:18:c2:7c:cc:0a:d8:5d:c9:28:2c:de:2e:a8:
28:75:05:30:d4:3a:71:29:0b:b4:71:cc:6d:03:51:36:de:4a:
57:0f:6f:e2:47:dc:c5:fb:55:81:ad:9d:1f:1e:19:f8:62:8d:
b2:7b:c0:b3:53:a1:99:fb:3d:f6:fe:b6:8e:bb:e6:67:57:ec:
94:f8:9c:7b:11:8d:04:99:ca:57:8d:e9:c2:75:aa:ed:ef:8c:
93:03:c4:c9:ee:51:a9:1e:9b:eb:f5:83:3e:50:24:0a:2c:61:
3a:a3:88:9d:f4:a0:27:8f:7a:9f:e5:25:24:49:db:5a:8e:79:
1b:22:ea:f4:5b:fd:03:75:dc:25:4d:43:1c:fd:3d:f9:6c:d6:
f0:3f:84:a9:24:cb:dc:27:93:c3:e2:e9:05:a3:b1:cc:cf:f4:
b8:1a:45:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:10 2025 by rpki-client