Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/EaaXkbC8P0tMcWH8_B2AeHqJuik.roa
File: EaaXkbC8P0tMcWH8_B2AeHqJuik.roa (raw, json)
Hash identifier: Agyi8/XYUtn0V9u60ReeITYzaWhDJOT1A+JDHxK163o=
Subject key identifier: 11:A6:97:91:B0:BC:3F:4B:4C:71:61:FC:FC:1D:80:78:7A:89:BA:29
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 019425FCCC0A72C6FB5DFA6E138481CF47EC
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/EaaXkbC8P0tMcWH8_B2AeHqJuik.roa
Signing time: Thu 02 Jan 2025 07:48:31 +0000
ROA not before: Thu 02 Jan 2025 07:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 185.11.217.0/24 maxlen: 24
2a03:69c0:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:cc:0a:72:c6:fb:5d:fa:6e:13:84:81:cf:47:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: Jan 2 07:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11a69791b0bc3f4b4c7161fcfc1d80787a89ba29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:d9:3c:bd:d9:44:68:d4:ee:d6:7d:bb:e8:
11:7e:c8:7f:36:13:d3:f5:a9:de:78:c3:e1:e3:eb:
8c:0b:7e:49:48:0a:4b:45:27:71:05:4b:1f:dd:7a:
b3:2b:ac:f8:31:cd:d9:8d:d4:ea:45:6d:14:4e:3f:
ac:5c:94:74:7d:6b:ad:e0:71:cf:18:d0:e1:3f:14:
cf:ee:d0:bc:e8:df:3b:01:72:ab:04:b8:5f:3b:e5:
61:2e:0b:18:7c:a7:36:77:27:36:41:f8:30:32:e5:
9e:53:f1:80:3a:ba:84:3d:79:75:8f:ef:4c:2b:b8:
3e:e3:d5:b8:c6:5b:4d:c4:1f:3d:22:ae:bd:71:33:
68:89:45:e9:cc:2d:8b:7a:11:c5:82:14:47:d4:03:
0e:08:a6:d3:22:d6:df:3a:56:ae:40:2a:5b:2d:87:
86:53:25:7a:f4:00:4b:c8:6a:d8:cc:fa:ac:5a:a1:
2e:f6:fa:fa:18:33:bb:6d:3d:c8:b9:65:f5:7e:23:
de:47:4c:1c:f8:e0:fc:50:8b:c4:74:c5:46:97:3f:
f1:8f:25:b0:83:fa:70:62:81:59:8c:94:fb:5f:68:
da:2a:ff:97:f1:84:5d:6f:4c:e8:52:aa:69:1e:ac:
5a:07:58:73:e1:b9:85:a8:2d:83:25:21:b8:3d:e0:
8b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A6:97:91:B0:BC:3F:4B:4C:71:61:FC:FC:1D:80:78:7A:89:BA:29
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/EaaXkbC8P0tMcWH8_B2AeHqJuik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.217.0/24
IPv6:
2a03:69c0:100::/40
Signature Algorithm: sha256WithRSAEncryption
5a:46:ff:17:a3:4f:d9:fe:10:0e:14:dd:bd:95:2f:12:54:53:
49:f5:8f:62:1b:23:6c:ef:da:85:e9:c7:b7:4a:65:fc:22:c4:
15:17:d5:9e:b2:1b:9e:a7:f5:72:a2:6b:14:3f:43:e2:1f:a7:
ea:72:73:91:7c:7d:26:2e:99:ff:94:ac:88:00:89:1a:29:f6:
84:ff:69:1b:55:71:c1:4e:12:69:49:22:2d:43:c6:21:82:9a:
c6:27:3c:c5:0d:14:4e:95:40:b6:35:1a:75:9f:3d:34:ff:91:
bc:36:27:52:b4:b5:d4:d7:7c:b4:fe:4d:0c:6c:59:9a:28:eb:
07:15:56:d0:60:5d:8a:b3:d9:26:84:f2:4a:ff:1f:e9:79:4e:
75:b8:68:d7:c2:fd:67:d1:6b:e9:df:11:f0:33:c8:1d:4b:87:
4d:8d:a6:d1:d5:38:1e:0d:5f:c2:c4:a6:d4:58:25:ea:c2:df:
e6:e2:ae:94:77:48:31:8d:46:88:9c:8b:9b:b5:90:b9:42:55:
10:1a:bf:35:75:15:6d:14:bc:61:ec:3e:97:e4:38:bb:af:0a:
53:80:61:01:49:c5:9f:38:24:7c:09:bd:c7:3c:21:36:4e:ae:
1e:83:af:f6:c3:51:47:b3:ec:74:47:3f:0c:0c:9d:2f:28:7e:
93:e7:cd:20
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQl/MwKcsb7XfpuE4SBz0fsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMDIxNGExYmYxZDNhZmQyZGQ2NmIyM2E5OTczMTA2YjVk
MzE2Y2EwHhcNMjUwMTAyMDc0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWE2OTc5MWIwYmMzZjRiNGM3MTYxZmNmYzFkODA3ODdhODliYTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIfZPL3ZRGjU7tZ9u+gRfsh/NhPT
9aneeMPh4+uMC35JSApLRSdxBUsf3XqzK6z4Mc3ZjdTqRW0UTj+sXJR0fWut4HHP
GNDhPxTP7tC86N87AXKrBLhfO+VhLgsYfKc2dyc2QfgwMuWeU/GAOrqEPXl1j+9M
K7g+49W4xltNxB89Iq69cTNoiUXpzC2LehHFghRH1AMOCKbTItbfOlauQCpbLYeG
UyV69ABLyGrYzPqsWqEu9vr6GDO7bT3IuWX1fiPeR0wc+OD8UIvEdMVGlz/xjyWw
g/pwYoFZjJT7X2jaKv+X8YRdb0zoUqppHqxaB1hz4bmFqC2DJSG4PeCLgQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFBGml5GwvD9LTHFh/PwdgHh6ibopMB8GA1UdIwQY
MBaAFAoCFKG/HTr9LdZrI6mXMQa10xbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wNGVjYzAtNjYzYy00NjBlLTkyMGQt
MzMyZWU1NDI1YzdhLzEvRWFhWGtiQzhQMHRNY1dIOF9CMkFlSHFKdWlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wNGVjYzAtNjYzYy00NjBlLTkyMGQtMzMyZWU1NDI1Yzdh
LzEvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAuQvZMA4E
AgACMAgDBgAqA2nAATANBgkqhkiG9w0BAQsFAAOCAQEAWkb/F6NP2f4QDhTdvZUv
ElRTSfWPYhsjbO/ahenHt0pl/CLEFRfVnrIbnqf1cqJrFD9D4h+n6nJzkXx9Ji6Z
/5SsiACJGin2hP9pG1VxwU4SaUkiLUPGIYKaxic8xQ0UTpVAtjUadZ89NP+RvDYn
UrS11Nd8tP5NDGxZmijrBxVW0GBdirPZJoTySv8f6XlOdbho18L9Z9Fr6d8R8DPI
HUuHTY2m0dU4Hg1fwsSm1Fgl6sLf5uKulHdIMY1GiJyLm7WQuUJVEBq/NXUVbRS8
Yew+l+Q4u68KU4BhAUnFnzgkfAm9xzwhNk6uHoOv9sNRR7PsdEc/DAydLyh+k+fN
IA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:17 2025 by rpki-client