Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/y3EH8jD13CwfSTaHUQCyulDeShk.roa
File: y3EH8jD13CwfSTaHUQCyulDeShk.roa (raw, json)
Hash identifier: bDl3TKWPPvKkEy/Fo4XbU69385WBSk46O+5xcYuPdww=
Subject key identifier: CB:71:07:F2:30:F5:DC:2C:1F:49:36:87:51:00:B2:BA:50:DE:4A:19
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369D2A8A808A05F5D456A91AAD94C30
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/y3EH8jD13CwfSTaHUQCyulDeShk.roa
Signing time: Wed 01 Jan 2025 19:48:45 +0000
ROA not before: Wed 01 Jan 2025 19:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 185.113.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d2:a8:a8:08:a0:5f:5d:45:6a:91:aa:d9:4c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb7107f230f5dc2c1f4936875100b2ba50de4a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:15:ee:fa:70:45:ce:76:d0:35:75:9e:b4:2e:
36:29:33:b8:4c:5a:71:92:71:04:05:c6:bc:9d:a1:
4f:e5:35:54:aa:5f:6d:59:2e:38:cb:e3:0a:b8:8d:
1e:ca:d1:f2:50:6a:e0:7f:c1:28:8c:2b:2a:b3:54:
9a:40:9e:54:e8:0d:1e:c1:45:cd:0d:15:e8:6e:5f:
e0:1e:42:ec:75:1e:9a:9f:62:a5:e1:38:e6:23:04:
77:c7:6a:46:66:8b:ae:55:0d:8d:87:9d:60:40:08:
e1:17:d6:41:9b:dd:79:32:68:28:34:2e:a5:a7:00:
c4:4f:d6:7a:7d:ec:0e:db:c4:29:4e:be:ae:08:a2:
95:07:cc:93:92:10:16:fa:ad:db:83:23:3e:2c:ad:
77:ce:a7:21:51:64:52:1b:96:16:6c:c1:54:e1:12:
6e:24:25:89:28:f2:26:32:1d:6c:cd:ae:8b:5b:3a:
6d:d9:18:73:e8:95:16:77:86:47:84:68:e3:05:9f:
c0:5f:ba:5a:f2:03:89:e5:cd:4f:91:ad:87:9c:76:
2c:45:81:27:a5:6c:73:83:55:d4:1f:14:46:0d:9e:
04:cd:74:09:90:b6:c8:ac:7f:95:0d:5a:b6:47:91:
83:9c:6d:04:5b:9f:35:88:63:1d:71:d2:01:d1:12:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:71:07:F2:30:F5:DC:2C:1F:49:36:87:51:00:B2:BA:50:DE:4A:19
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/y3EH8jD13CwfSTaHUQCyulDeShk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:26:40:47:39:10:af:7a:a3:d2:2a:a2:98:73:59:63:db:79:
4e:f4:97:dd:22:d7:4c:d3:84:65:7f:7e:34:4e:45:61:d1:55:
3d:ed:ae:d6:64:70:73:e0:da:a3:a7:46:2c:f2:ea:37:15:09:
b2:54:81:e5:5a:07:ba:d3:8a:44:2d:ec:6a:c5:0e:28:50:08:
7e:fc:67:b6:1b:be:10:6d:30:f8:73:b0:93:52:56:ce:a6:7f:
4f:45:a4:e1:db:a4:e0:6a:50:df:e1:07:38:41:7f:72:3a:06:
4c:ac:0c:35:6b:a5:09:67:b3:91:7c:11:46:45:a7:cd:0a:44:
a3:e2:31:1d:87:13:51:ad:18:25:19:9f:d3:57:8d:a2:51:7d:
43:12:46:5b:f2:c0:82:07:0e:0e:02:86:f0:53:45:33:26:e3:
ff:d4:4a:44:48:57:f5:28:a6:37:8f:48:b2:af:c0:10:b8:4a:
fa:f5:40:b4:72:b4:bf:7c:42:22:c3:f1:cc:3d:f7:8e:b7:36:
9a:0e:e5:f6:2e:a2:1a:4e:ce:a5:c0:28:ad:5f:f6:c5:41:72:
6e:36:7b:71:c5:b3:4e:5f:3f:78:33:81:71:c6:fa:99:db:72:
8d:e5:94:cb:07:8a:8b:45:d8:06:e3:64:9f:20:40:41:75:b2:
83:b8:34:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:14 2025 by rpki-client