Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/71HFEmbe2TkWKbkPdeXbJnCMk-g.roa
File: 71HFEmbe2TkWKbkPdeXbJnCMk-g.roa (raw, json)
Hash identifier: ZxIyM7gfB4eB7lWerifHRYoYJjA1PraMSJFoT0MK+lk=
Subject key identifier: EF:51:C5:12:66:DE:D9:39:16:29:B9:0F:75:E5:DB:26:70:8C:93:E8
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01939B8DCF16520CB50222EAD9498AC2DAD7
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/71HFEmbe2TkWKbkPdeXbJnCMk-g.roa
Signing time: Fri 06 Dec 2024 10:39:42 +0000
ROA not before: Fri 06 Dec 2024 10:39:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6893
IP address blocks: 185.49.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:8d:cf:16:52:0c:b5:02:22:ea:d9:49:8a:c2:da:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Dec 6 10:39:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef51c51266ded9391629b90f75e5db26708c93e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e4:0d:00:7b:9c:a6:b9:d7:d7:41:f1:aa:82:
2e:97:0f:c4:19:40:61:1b:ad:e7:f1:e1:e7:e9:db:
c2:7a:16:90:89:12:75:9e:74:9c:86:88:cf:20:eb:
8b:ee:a3:a4:3c:5a:79:11:8b:06:a4:18:b5:29:80:
71:ac:d3:39:25:17:c6:65:89:5f:d1:c7:a5:57:a7:
96:fe:43:3c:1d:4f:90:a5:38:b5:c3:3c:4c:1e:2c:
65:3b:89:85:98:73:bc:b7:3b:1a:a1:ea:70:29:fb:
09:88:5e:38:81:d5:2e:5e:d0:c7:e7:ef:e4:26:f4:
3a:a4:30:a7:36:a2:e1:f1:10:99:36:1b:8a:fe:84:
0b:d2:14:8e:fd:34:ca:9c:c6:07:60:d4:db:4d:f0:
a5:0e:04:b8:e9:ac:d5:75:a0:c2:da:c2:56:6a:34:
a8:1a:1e:ac:bf:57:0d:2d:71:f3:a5:d9:eb:9a:6a:
25:e9:fd:7b:5e:52:17:04:33:7b:99:c0:b8:28:a0:
03:f4:60:e3:97:4c:fa:06:03:84:2b:19:34:14:34:
2b:ae:84:33:bd:c3:df:9a:b7:5a:54:6a:ad:de:c4:
61:d1:e8:8d:75:b4:25:03:37:5c:d0:25:6e:18:0d:
1d:98:aa:46:74:49:54:d9:ba:0d:07:df:8d:21:56:
c6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:51:C5:12:66:DE:D9:39:16:29:B9:0F:75:E5:DB:26:70:8C:93:E8
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/71HFEmbe2TkWKbkPdeXbJnCMk-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.123.0/24
Signature Algorithm: sha256WithRSAEncryption
98:98:fd:5a:71:b7:da:30:b5:32:62:51:12:04:22:3b:4c:fb:
8e:90:03:7d:fa:e0:32:b5:e7:97:0c:1b:09:b8:32:1b:b8:cb:
b5:5b:29:07:18:dd:24:af:db:24:cf:94:fb:af:9f:aa:72:84:
3a:42:1b:c4:42:c2:38:70:8c:f5:9e:3a:ac:78:2e:34:26:65:
ab:73:5d:8f:20:43:5f:e5:c5:13:a7:5d:e6:7e:c7:94:d0:02:
66:3f:dc:13:6c:03:91:39:64:06:2d:03:4e:df:fb:93:ac:f5:
b6:8b:a8:d9:96:66:c3:de:bf:0c:82:d7:c4:14:72:8a:24:ff:
db:d6:6a:7d:a2:33:eb:b3:c3:a2:78:6c:12:6c:1b:60:a9:b5:
4c:4e:95:f2:86:0b:92:50:47:9c:f2:18:3a:41:22:19:9c:99:
81:f2:a6:76:7b:c6:d6:07:d0:fd:b8:34:7a:4b:21:4b:d5:85:
0a:e8:21:bb:c5:5e:a7:11:7a:91:f8:85:f2:c4:81:bd:0f:2b:
cc:8b:e4:94:3a:fa:2c:ee:2a:93:d4:98:c7:55:dd:3d:85:9b:
6c:9b:d2:2e:47:81:2b:28:7e:43:22:ee:c4:5f:d9:74:ab:98:
00:25:ad:99:1c:ae:bf:69:c0:f1:05:08:fd:ef:d9:67:17:99:
17:e2:9e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:03 2025 by rpki-client