Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/eSn3YbpwvweZHmijnWa6CrvJO-w.roa
File: eSn3YbpwvweZHmijnWa6CrvJO-w.roa (raw, json)
Hash identifier: 5gtt9c4fJdr/R17DTl8ANEfMGwogq9ri5Vol0KYKy94=
Subject key identifier: 79:29:F7:61:BA:70:BF:07:99:1E:68:A3:9D:66:BA:0A:BB:C9:3B:EC
Certificate issuer: /CN=26472cfdcd392a184f1f051320bba806a204c6cd
Certificate serial: 018BC9BE5A06E4E6C31E0E32FFA97BFE2637
Authority key identifier: 26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/eSn3YbpwvweZHmijnWa6CrvJO-w.roa
Signing time: Mon 13 Nov 2023 17:32:57 +0000
ROA not before: Mon 13 Nov 2023 17:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 185.124.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:be:5a:06:e4:e6:c3:1e:0e:32:ff:a9:7b:fe:26:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26472cfdcd392a184f1f051320bba806a204c6cd
Validity
Not Before: Nov 13 17:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7929f761ba70bf07991e68a39d66ba0abbc93bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:45:62:1f:e4:3d:bc:00:b4:34:4e:6b:04:44:
d1:b1:ad:0a:b6:2a:33:30:a5:81:a8:24:29:e7:f9:
b7:21:9d:79:51:4b:1b:60:f9:c3:84:95:50:c8:ed:
ea:6e:e1:46:c9:45:6c:a2:ed:9d:91:4a:dd:63:56:
e5:61:29:b3:de:39:17:5d:54:dd:e8:22:36:67:98:
9d:44:87:8c:8d:b7:b3:29:8e:41:1f:13:5e:5b:44:
31:2f:4f:91:35:d3:56:6b:0c:4c:fb:03:fc:1e:45:
34:2f:1d:7b:40:ff:dd:82:ba:5c:09:52:8c:24:2f:
dc:af:75:3b:39:0f:bb:ab:51:e5:8a:b2:67:e8:c3:
82:d7:4b:f1:56:cd:33:2f:1e:63:6e:06:b4:af:df:
0f:f1:36:a1:2d:cb:be:a5:76:cf:66:f6:00:e0:91:
37:fb:f9:60:10:e7:b3:36:34:6e:50:2a:b1:b1:95:
55:16:5b:38:f6:3c:5f:61:53:1b:09:a3:45:54:aa:
d0:ad:e2:00:72:4b:80:1f:ff:ba:bd:08:b8:89:39:
33:6f:af:de:6d:67:65:a1:8e:04:fd:57:4f:fb:36:
81:35:e8:be:fd:0b:7a:2c:49:6c:49:4c:88:c3:a8:
0d:9d:12:f8:2e:76:8d:24:9a:4e:e4:6d:65:ba:23:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:29:F7:61:BA:70:BF:07:99:1E:68:A3:9D:66:BA:0A:BB:C9:3B:EC
X509v3 Authority Key Identifier:
keyid:26:47:2C:FD:CD:39:2A:18:4F:1F:05:13:20:BB:A8:06:A2:04:C6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jkcs_c05KhhPHwUTILuoBqIExs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/eSn3YbpwvweZHmijnWa6CrvJO-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/869eae-2a07-4b67-a6ab-0f4910b553d9/1/Jkcs_c05KhhPHwUTILuoBqIExs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.64.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:64:6f:4e:41:42:40:fd:21:26:72:c8:9d:59:33:33:63:cb:
56:e5:cf:d8:e4:68:41:14:0b:1f:28:0b:09:a6:1d:ed:96:2f:
38:f1:12:a9:cd:d7:06:c1:5a:a9:18:e5:08:ee:fc:1a:da:07:
fa:61:06:fb:db:4b:fe:78:b1:3f:88:8f:4b:f7:35:7c:81:f3:
26:66:c8:a8:d3:c5:6b:38:c1:01:5b:53:59:10:fa:4d:50:6b:
e9:f7:7c:17:b8:87:28:24:df:ad:ff:76:2d:1a:27:60:6c:11:
00:48:c9:4e:8f:e6:91:89:d1:ca:bc:4b:f8:aa:79:0c:df:b5:
7c:ec:31:ac:61:98:cc:29:1b:18:22:08:4d:96:c3:03:fb:07:
47:77:6f:6e:b5:dc:2a:81:5c:fc:e0:32:7d:af:c8:8f:c6:c8:
8d:0d:b9:e5:45:e8:31:af:b9:3e:4f:d6:2b:4a:00:a3:4f:37:
c5:95:92:d4:05:e3:57:ae:3d:0d:db:3e:b3:e6:59:fa:76:4a:
fa:e1:58:15:ed:a4:0c:58:44:e3:c1:ac:bb:7b:b8:26:f0:4e:
4f:d8:3e:02:a4:a0:a7:1a:06:f6:03:59:b7:48:b8:36:0f:e5:
17:8f:e9:f6:dd:00:3e:70:1e:3f:1c:f8:96:ba:fe:4e:41:e1:
07:d8:f9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:14 2025 by rpki-client