Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/4eQiZBdZCuH9EctQXmcQu9zax4o.roa
File: 4eQiZBdZCuH9EctQXmcQu9zax4o.roa (raw, json)
Hash identifier: ewj5yBvURFqE4jigY2bHWb2QO9rCN2tUXVor6abe+YM=
Subject key identifier: E1:E4:22:64:17:59:0A:E1:FD:11:CB:50:5E:67:10:BB:DC:DA:C7:8A
Certificate issuer: /CN=0bb7a29b255451e61bc42c8b9ae4943f71696ccf
Certificate serial: 019424B3966C412279F9B176D42099361B77
Authority key identifier: 0B:B7:A2:9B:25:54:51:E6:1B:C4:2C:8B:9A:E4:94:3F:71:69:6C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7eimyVUUeYbxCyLmuSUP3FpbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/4eQiZBdZCuH9EctQXmcQu9zax4o.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212077
IP address blocks: 185.113.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:96:6c:41:22:79:f9:b1:76:d4:20:99:36:1b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb7a29b255451e61bc42c8b9ae4943f71696ccf
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1e4226417590ae1fd11cb505e6710bbdcdac78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:ff:f4:b9:f5:52:34:fe:1a:2e:27:70:f2:
f1:a8:57:c9:ea:d4:6d:08:2c:08:7d:ad:6d:2c:4c:
bb:ea:47:3b:28:dc:39:4a:51:11:9f:d0:c8:ce:41:
29:99:7c:07:4b:6d:29:e1:d5:69:4c:8f:cd:cd:c6:
5b:db:9f:de:ab:5c:30:9c:9a:a5:a1:d3:be:7c:90:
04:2d:db:dc:00:e5:ba:5d:3e:28:a9:62:23:41:ec:
06:48:a6:57:ca:75:dc:f3:04:92:64:5f:83:67:04:
1a:6f:e1:12:3f:e9:d4:77:15:fc:85:4b:c2:7e:a4:
ec:45:28:a0:ae:9f:3b:fb:f4:af:37:c4:dd:f6:d6:
5d:40:69:c6:b7:a4:8d:75:ce:13:09:ca:4c:cd:a5:
fe:d8:b7:10:fe:30:2f:5a:fa:57:1e:10:3c:91:9e:
a6:89:73:76:d6:38:26:24:2d:c5:e8:2a:7d:7e:80:
7c:23:84:72:de:f3:54:fc:be:c7:60:6a:ad:00:7f:
11:6a:df:f4:1b:07:42:11:91:72:e7:de:f3:9f:82:
f0:be:e9:c4:11:98:3e:08:11:0b:03:8b:c6:2a:f7:
80:88:b1:8c:26:e3:b3:6b:c6:8f:74:13:19:af:96:
f0:16:1c:2c:98:d7:4b:d4:26:a5:88:1e:7c:e1:9b:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E4:22:64:17:59:0A:E1:FD:11:CB:50:5E:67:10:BB:DC:DA:C7:8A
X509v3 Authority Key Identifier:
keyid:0B:B7:A2:9B:25:54:51:E6:1B:C4:2C:8B:9A:E4:94:3F:71:69:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7eimyVUUeYbxCyLmuSUP3FpbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/4eQiZBdZCuH9EctQXmcQu9zax4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c866ce-7db8-4ef1-979b-6b7dda50d5a5/1/C7eimyVUUeYbxCyLmuSUP3FpbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.10.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a4:88:4f:64:6e:4f:dd:50:c4:62:e3:b6:8b:3a:18:58:8b:
a5:51:41:75:c1:3f:a7:30:6e:50:0d:4e:fe:5e:7f:02:cf:a8:
00:d3:9b:6c:f1:7d:61:02:18:2b:fb:22:40:ef:a4:03:48:62:
c8:7d:4e:92:11:3e:5d:e3:8c:5a:35:fc:6c:6e:cd:b1:07:eb:
7d:50:34:58:d5:c7:0b:7f:6e:a8:96:fb:67:e7:26:6e:22:5f:
99:58:85:d9:1b:af:e3:17:c1:e1:b2:e5:32:b7:b7:07:e5:b0:
f5:af:df:04:fb:3b:63:6f:f4:0c:3a:58:78:49:4d:78:2f:32:
af:ff:9e:3f:2c:9a:1c:fa:12:ae:3a:3c:49:7d:43:50:07:a9:
bf:93:cc:42:a7:f2:c2:2b:18:96:f9:7c:18:c1:06:a4:9f:cb:
65:74:24:37:e7:e8:11:3a:58:33:43:2f:16:2c:18:e0:76:c0:
c0:67:ec:2a:9a:b5:23:41:85:b6:09:e0:2b:d7:56:bd:0c:10:
63:6b:53:1b:fc:b2:80:f7:f7:14:5f:75:2e:46:b6:40:d6:23:
ad:7a:f7:80:4b:5a:1f:2c:c9:00:1d:f6:29:bf:00:ab:ce:70:
30:ef:59:e4:b4:79:69:d6:1c:da:78:a7:ad:58:be:4e:18:07:
17:fc:51:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:11 2025 by rpki-client