Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/EcvaRl1iw5Fob5jLrMM5EQhbGk4.roa
File: EcvaRl1iw5Fob5jLrMM5EQhbGk4.roa (raw, json)
Hash identifier: LgQKet+vbUGnquoaPqj1LFUwk12nwLR01mm8VtlBXOg=
Subject key identifier: 11:CB:DA:46:5D:62:C3:91:68:6F:98:CB:AC:C3:39:11:08:5B:1A:4E
Certificate issuer: /CN=7938dfb9eb924079bb706cb616eda572864a9e13
Certificate serial: 0195ADD5922140AA2D3B9105E705797E9155
Authority key identifier: 79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/EcvaRl1iw5Fob5jLrMM5EQhbGk4.roa
Signing time: Wed 19 Mar 2025 09:56:49 +0000
ROA not before: Wed 19 Mar 2025 09:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51235
IP address blocks: 185.51.42.0/23 maxlen: 23
185.51.42.0/24 maxlen: 24
185.51.43.0/24 maxlen: 24
2a04:c147::/34 maxlen: 34
2a04:c147:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:d5:92:21:40:aa:2d:3b:91:05:e7:05:79:7e:91:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7938dfb9eb924079bb706cb616eda572864a9e13
Validity
Not Before: Mar 19 09:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11cbda465d62c391686f98cbacc33911085b1a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:a1:98:44:5d:2a:33:9f:be:79:1d:5e:dc:
25:75:6b:3e:d8:cb:92:30:41:c9:45:33:ef:a3:da:
bf:a3:82:fd:97:0e:1a:e7:77:48:8b:59:4e:0f:39:
80:14:6e:00:d0:c9:c4:21:ec:6f:ad:4d:99:07:e5:
a6:19:fc:b8:dd:b6:51:c5:dd:c1:d4:48:bd:f1:97:
23:d3:1f:6e:02:39:3e:f0:8d:d8:69:1d:e2:09:0c:
ce:bb:8b:e2:8f:7d:f7:9d:a1:2c:54:10:c7:46:f3:
d2:e7:ff:12:ce:6a:29:7a:b9:5b:d9:ea:0a:dc:22:
f0:f7:8f:e1:6e:3c:bc:b5:3a:75:3a:6a:1e:15:da:
02:b5:06:db:9e:b5:8b:47:7b:6b:00:fb:11:52:d8:
86:0d:38:c2:4e:6b:23:ca:b8:74:f0:60:7a:40:ed:
27:33:ef:53:7e:9f:98:d1:d6:37:7c:fb:ac:f0:d9:
c8:b8:7b:8c:e6:fd:4e:91:a4:3d:d4:8d:2d:3f:92:
5b:06:86:4e:38:33:e4:5a:72:53:fe:13:ad:e9:84:
07:97:3d:74:d9:1f:27:76:88:c3:1b:b7:ee:9b:7b:
26:90:24:f8:f0:4f:07:1b:72:08:8b:39:eb:0f:e4:
a8:23:2b:59:e3:7f:8d:1a:9f:dd:54:31:f8:64:05:
f3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CB:DA:46:5D:62:C3:91:68:6F:98:CB:AC:C3:39:11:08:5B:1A:4E
X509v3 Authority Key Identifier:
keyid:79:38:DF:B9:EB:92:40:79:BB:70:6C:B6:16:ED:A5:72:86:4A:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTjfueuSQHm7cGy2Fu2lcoZKnhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/EcvaRl1iw5Fob5jLrMM5EQhbGk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f53ee-fb00-4df4-9764-06da2bb06071/1/eTjfueuSQHm7cGy2Fu2lcoZKnhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.42.0/23
IPv6:
2a04:c147::/33
Signature Algorithm: sha256WithRSAEncryption
07:27:51:b0:a6:de:72:af:e1:d1:9a:bd:72:8b:b3:c8:b0:9a:
1c:09:91:f0:aa:5e:ca:76:05:dd:f2:98:c0:a3:cc:8d:cd:f0:
40:f1:3d:5d:1e:c7:54:3a:35:fc:45:c3:a9:9a:2e:80:4c:bc:
ba:ff:4e:2c:ee:73:ca:0f:98:df:74:84:d6:c6:80:96:af:df:
08:60:03:44:5a:5b:fe:8b:66:11:eb:7c:aa:3a:9d:ad:cc:c9:
86:fa:b7:cf:18:6f:ae:44:37:4c:e2:f4:b9:1c:f1:ea:57:41:
32:b7:c6:d7:24:45:a3:e5:5b:7d:db:dc:8f:e1:12:b1:24:21:
5b:af:7a:80:21:7c:c6:02:b8:a4:43:f7:60:77:08:02:c9:b1:
51:8f:d4:4a:9a:9f:3a:c7:39:66:85:71:31:95:56:d2:d9:88:
ea:14:ef:cd:a2:09:28:30:32:f0:b3:31:a2:6a:fc:ba:a7:84:
83:32:16:f6:8a:7e:d7:5b:54:7b:22:96:b8:78:4e:1e:ee:d3:
08:31:ee:9c:4f:33:1b:77:51:d9:be:01:b9:90:6d:87:6c:59:
e9:23:c0:06:54:69:c8:94:9f:58:fc:41:1c:38:18:c7:ef:16:
f9:8c:ab:6a:c4:11:ad:84:5f:c5:32:92:4a:c1:c0:dc:39:d1:
4c:9e:25:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:44 2025 by rpki-client