Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/e53vTBSmStx9Oi8SN1yY_ufKWXY.roa
File: e53vTBSmStx9Oi8SN1yY_ufKWXY.roa (raw, json)
Hash identifier: Bg5UkqK2+LynWCesKDV1hgP+JW0y9zPzN600b1/344o=
Subject key identifier: 7B:9D:EF:4C:14:A6:4A:DC:7D:3A:2F:12:37:5C:98:FE:E7:CA:59:76
Certificate issuer: /CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Certificate serial: 0190ED8749B9AD9AFB4FD78BA88A02B7E72D
Authority key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/e53vTBSmStx9Oi8SN1yY_ufKWXY.roa
Signing time: Fri 26 Jul 2024 05:33:04 +0000
ROA not before: Fri 26 Jul 2024 05:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.119.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ed:87:49:b9:ad:9a:fb:4f:d7:8b:a8:8a:02:b7:e7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Validity
Not Before: Jul 26 05:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b9def4c14a64adc7d3a2f12375c98fee7ca5976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:c1:f7:f6:c5:1f:4e:62:bc:cd:d9:86:e7:
b6:1d:d9:f3:3a:01:00:47:9b:22:0c:46:57:13:86:
a9:a6:51:bc:45:91:5c:b5:71:ee:d3:9a:7b:51:8e:
17:22:32:ef:ca:02:78:e3:e0:23:5d:f9:cb:96:bc:
bf:94:2c:53:d6:df:a7:5c:09:e3:67:56:64:49:b3:
10:39:fd:a0:37:19:c7:49:74:97:6b:4b:f8:5d:f7:
13:5a:b8:3e:05:02:80:22:42:37:ec:c2:37:9b:0b:
7a:3a:60:5c:63:5a:97:92:a4:8e:3c:62:27:ef:0a:
20:f3:29:f4:62:da:71:fb:20:ee:1c:6f:49:be:d0:
83:45:d3:a5:e7:a3:33:f6:7a:5f:14:6c:0d:0d:2a:
05:99:19:2f:4b:a8:89:f1:fe:43:fb:6f:da:a4:5a:
da:e6:81:1f:65:08:e5:38:20:43:48:bc:00:1a:f9:
90:25:8f:ec:db:fc:fb:18:ab:8f:2d:f6:b8:ac:e4:
80:a3:e9:70:c9:79:73:b2:3a:d7:48:03:aa:c5:10:
8b:8b:6c:f3:9f:d1:9c:05:26:45:a7:3d:54:64:af:
15:1a:a9:8f:3c:50:14:2e:78:7e:cf:e5:e7:13:d8:
2c:eb:5f:01:a4:59:dd:c7:b0:9d:74:4a:eb:40:14:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9D:EF:4C:14:A6:4A:DC:7D:3A:2F:12:37:5C:98:FE:E7:CA:59:76
X509v3 Authority Key Identifier:
keyid:1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/e53vTBSmStx9Oi8SN1yY_ufKWXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.197.0/24
Signature Algorithm: sha256WithRSAEncryption
16:25:98:74:10:f0:a3:8c:a3:f4:18:e5:3c:b2:fd:3c:8e:59:
64:9e:93:6d:4e:38:d3:64:97:b2:67:be:c3:c3:b8:fe:6e:11:
7d:09:3f:89:29:0e:36:fd:59:6e:00:ae:77:25:7a:05:08:f8:
a6:a6:ac:23:7a:f6:60:83:6d:01:43:74:74:b4:79:22:39:5c:
28:2b:6d:32:32:6c:38:6f:81:b6:c2:54:e6:a2:92:60:94:72:
81:59:6f:19:9e:ad:5c:2a:cb:d3:a5:fb:f4:52:39:13:02:9a:
e7:92:ae:69:95:68:9e:19:19:f8:8b:e2:a6:49:21:9d:40:65:
0c:d2:30:ce:47:b3:e3:46:10:6c:51:13:11:ac:b9:45:89:54:
42:9f:e8:dc:08:e0:23:5e:a0:dc:2d:c3:9e:88:3b:af:df:b5:
a1:e3:6d:56:46:77:09:6b:7b:70:16:68:48:76:75:d2:62:cb:
87:3f:38:60:e1:52:dd:98:70:7a:d1:ff:05:be:6e:92:08:59:
17:23:aa:e7:2e:22:af:ad:fa:fb:2d:39:4d:e5:95:5c:5e:91:
c0:48:73:6b:d0:ca:1c:50:c1:e4:47:41:53:3e:b2:e6:8a:50:
d0:48:c6:44:53:34:ca:a0:04:19:b5:d2:a2:4d:99:2d:40:32:
0f:7f:25:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:31 2025 by rpki-client