Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/E_fV2_-LSoXs8TNNVud176N90DM.roa
File: E_fV2_-LSoXs8TNNVud176N90DM.roa (raw, json)
Hash identifier: pEduf01l+IkFgVqqHIULEF/rXEiD2nJYC04Z+8oaaWE=
Subject key identifier: 13:F7:D5:DB:FF:8B:4A:85:EC:F1:33:4D:56:E7:75:EF:A3:7D:D0:33
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 01942827405BA703C99AF0D042926DE78F7C
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/E_fV2_-LSoXs8TNNVud176N90DM.roa
Signing time: Thu 02 Jan 2025 17:54:08 +0000
ROA not before: Thu 02 Jan 2025 17:54:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 185.198.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:40:5b:a7:03:c9:9a:f0:d0:42:92:6d:e7:8f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jan 2 17:54:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13f7d5dbff8b4a85ecf1334d56e775efa37dd033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9e:f8:eb:6b:a9:73:b2:eb:e6:81:dd:24:ba:
d0:e7:e2:c3:ef:7f:7f:09:41:76:0b:77:16:f5:65:
98:af:1a:4d:57:ba:38:05:44:13:96:cd:e8:46:e5:
a8:f6:3d:b5:6f:44:0e:de:c9:f6:68:f5:c8:b4:dd:
67:32:88:f2:91:34:72:ed:c8:cd:40:ce:cb:8e:e3:
27:4a:d9:a8:9b:37:29:e6:5e:16:cc:7d:4b:55:a9:
6c:48:a0:78:37:3a:ad:29:cb:06:39:ca:62:fa:3b:
df:a9:ae:cb:20:b6:d5:4a:63:82:73:f5:e5:ec:79:
7b:39:7a:21:c4:f9:f9:b5:90:c9:56:c3:99:c5:1a:
a2:79:41:0d:03:b8:ca:e9:43:72:ec:71:a4:70:94:
d8:f7:d5:46:25:0b:c9:d3:46:b8:14:f0:e0:f6:b5:
43:4e:21:ec:30:82:1d:32:f9:dc:02:49:27:20:d1:
80:ac:fc:7e:2c:87:81:2a:f8:7c:90:4f:7a:08:2c:
73:0e:50:f6:cf:e3:50:e0:d8:ac:ef:6c:d1:dc:ff:
c2:7f:09:25:83:02:8a:29:3e:0a:7f:9a:d2:5c:c2:
0d:73:61:5d:20:27:5b:03:87:89:c4:61:35:8f:55:
54:9d:c0:97:ea:06:5b:99:4e:3f:e5:87:72:b0:ec:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F7:D5:DB:FF:8B:4A:85:EC:F1:33:4D:56:E7:75:EF:A3:7D:D0:33
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/E_fV2_-LSoXs8TNNVud176N90DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.36.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:c8:18:eb:d6:49:6d:5a:df:aa:39:58:b9:3a:0c:59:25:4f:
8e:95:4c:ce:bb:57:8f:a5:80:5a:78:52:1a:75:22:48:e1:51:
fb:41:83:9c:13:28:6c:7a:d8:cd:47:65:3a:9e:1f:03:ce:21:
bb:45:dd:43:0c:34:a3:82:58:f1:30:aa:57:01:b4:c3:ba:47:
05:a4:c6:b6:e7:94:fa:cd:03:d0:ee:57:c7:66:be:20:80:11:
c4:41:64:83:9a:78:37:56:4a:f8:18:8f:f5:06:8f:49:60:e8:
ad:4c:15:d3:53:77:3e:96:4a:1a:14:53:d2:08:9c:c1:7f:bc:
0b:34:f0:e3:e9:90:dc:9f:e4:a1:70:e0:51:3b:88:10:c5:c9:
64:98:c2:7f:c7:5a:30:2c:b2:89:b0:9e:ae:eb:09:d0:99:9d:
f6:11:72:2c:5f:96:78:d2:cd:e5:e8:d0:4d:8f:da:e4:55:a5:
5d:84:12:52:3c:96:6f:8a:d9:10:a1:55:1e:63:a7:4c:2c:0a:
6d:b5:5e:27:b1:6c:16:6a:b3:31:f5:0f:aa:1b:00:87:13:67:
4d:7a:60:3d:6b:6a:c8:4e:ee:77:66:cd:8c:92:37:cb:75:f4:
8c:64:6f:a2:6f:20:3e:31:08:61:f9:15:8d:e3:30:1a:96:06:
d6:30:6a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:06 2025 by rpki-client