Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/1eZC9enfXbKkbChbya2s-NBXR10.roa
File: 1eZC9enfXbKkbChbya2s-NBXR10.roa (raw, json)
Hash identifier: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=
Subject key identifier: D5:E6:42:F5:E9:DF:5D:B2:A4:6C:28:5B:C9:AD:AC:F8:D0:57:47:5D
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 0194228DE9D8871081694A8987D39E0A0CF7
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/1eZC9enfXbKkbChbya2s-NBXR10.roa
Signing time: Wed 01 Jan 2025 15:48:33 +0000
ROA not before: Wed 01 Jan 2025 15:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 185.113.64.0/23 maxlen: 23
185.113.64.0/24 maxlen: 24
185.113.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e9:d8:87:10:81:69:4a:89:87:d3:9e:0a:0c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5e642f5e9df5db2a46c285bc9adacf8d057475d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:08:b6:68:e5:3b:47:9f:cd:f8:bb:0a:c3:87:
dc:5c:a0:65:ae:3b:8b:ee:e3:2b:85:72:90:cf:4b:
ab:c2:0f:8d:4c:44:78:b0:4f:45:5d:e0:12:86:01:
90:48:50:65:19:8e:86:b6:e2:0c:d0:07:9f:7f:66:
80:4f:a8:4d:e0:fe:e4:48:d3:d4:26:d9:44:54:ca:
62:5f:70:64:d1:d7:6e:80:30:31:3b:ed:f0:4f:17:
2c:b6:98:ca:ea:f9:2f:75:f1:92:e6:cf:5b:e4:dd:
7c:3e:8c:56:c1:89:93:07:7f:cd:f9:94:df:c1:61:
57:f1:0c:c7:43:02:e7:54:e7:4d:a4:ea:fa:8e:33:
7c:5a:f0:61:9a:7a:37:3c:df:e0:59:9a:a7:4d:61:
68:21:a5:0d:db:95:a4:c6:8d:d5:3e:66:9f:32:01:
ae:fd:66:fa:9b:ef:48:b7:c3:26:ec:f6:57:db:2e:
b7:02:89:4a:c3:2a:65:27:3e:28:01:65:8d:96:0d:
da:b2:68:2b:eb:07:af:63:bb:a7:6b:80:db:4b:86:
43:e7:5b:0f:46:dd:fc:e1:2a:f8:30:89:0f:2c:c0:
21:9e:d9:19:36:9d:e6:49:f4:1c:fd:56:2e:a1:0d:
18:22:5c:fe:df:94:6c:30:48:3e:8f:50:ea:40:f1:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E6:42:F5:E9:DF:5D:B2:A4:6C:28:5B:C9:AD:AC:F8:D0:57:47:5D
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/1eZC9enfXbKkbChbya2s-NBXR10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.64.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:4e:22:36:4d:97:65:34:17:e2:a5:a8:9a:05:4f:56:39:fa:
30:d0:9d:2c:30:f8:09:37:ea:a7:90:87:6c:11:f1:89:d8:58:
61:6d:b4:58:38:5d:67:36:88:15:ba:3d:e3:f0:59:4b:98:a1:
e0:88:db:5c:94:3b:3f:a6:12:76:48:a9:d0:e9:0c:ab:70:c1:
d2:2a:2c:91:b8:53:1b:21:09:18:f2:61:e1:6e:54:de:44:55:
4c:40:70:7d:69:cd:c2:50:a0:c2:97:e9:c5:e0:b7:75:bb:0e:
81:cd:8c:b6:d1:d8:22:b8:0e:af:14:4d:b6:a4:8d:95:85:88:
06:d3:98:91:d7:8e:2c:57:2a:58:35:cf:0e:c6:1e:c8:1b:57:
e5:33:d3:26:d5:43:c4:ff:bd:42:c1:f8:bd:3d:89:65:6f:07:
f9:d2:3a:cf:cf:3a:50:b1:40:64:6a:7e:27:97:63:af:b5:d9:
e6:5d:9f:e2:63:93:12:1b:24:03:07:a4:a8:92:3c:10:b8:00:
ac:e1:bd:e4:cd:36:b8:b3:c7:d2:fb:46:01:0d:91:92:ce:b6:
0f:f2:39:96:88:a3:d4:fd:2f:c1:52:7e:97:be:4d:3c:67:df:
ec:67:85:dc:7b:87:5b:df:fb:4f:83:e4:97:9d:e8:03:a9:2d:
cc:5f:bc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:43 2025 by rpki-client