Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/EenjJDEtyKdPO2mlZ-Y_AukpBLU.roa
File: EenjJDEtyKdPO2mlZ-Y_AukpBLU.roa (raw, json)
Hash identifier: 1+tDk1TFkDb5O2ECjAqOHwllv2ftLthjwxwE8HWCa5M=
Subject key identifier: 11:E9:E3:24:31:2D:C8:A7:4F:3B:69:A5:67:E6:3F:02:E9:29:04:B5
Certificate issuer: /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial: 01851A1228B446B8B50C6B697BE288F096D6
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/EenjJDEtyKdPO2mlZ-Y_AukpBLU.roa
Signing time: Fri 16 Dec 2022 08:34:35 +0000
ROA not before: Fri 16 Dec 2022 08:34:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25275
IP address blocks: 195.234.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:12:28:b4:46:b8:b5:0c:6b:69:7b:e2:88:f0:96:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Validity
Not Before: Dec 16 08:34:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11e9e324312dc8a74f3b69a567e63f02e92904b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:40:bd:5c:f3:03:b4:f3:8a:84:d4:1d:41:
df:57:c7:70:f3:28:fc:ea:20:fb:57:f2:ed:62:11:
39:0d:16:75:70:f7:a8:1e:04:18:a1:99:f8:58:63:
af:60:fe:c3:96:a7:ff:09:4e:57:a6:a7:43:49:d7:
12:23:87:64:11:87:5a:8f:67:5c:8f:70:24:e7:f5:
bf:59:5c:09:23:99:89:21:7b:9c:24:1f:1e:72:e1:
79:80:5b:b1:88:38:c1:8f:9c:eb:ff:56:5a:89:a6:
38:f8:a7:d7:d8:b1:c9:f7:32:25:22:d0:ef:f7:79:
a7:98:c5:fe:a4:f2:3d:1f:ed:9e:a7:6f:30:97:0d:
b4:af:c2:2d:fa:c5:0c:fe:53:2a:47:3d:0c:5c:7c:
26:6e:c8:c1:83:49:82:49:52:7a:af:42:f2:74:f2:
ff:23:b2:1e:ae:dd:70:66:0c:f6:d0:2d:6f:95:29:
fc:a8:66:1e:e3:f4:a0:df:0a:33:ed:e4:66:66:3a:
04:7e:b1:3a:2f:70:6d:95:78:7d:3c:02:7b:c0:eb:
e0:0b:58:72:61:6d:a4:72:bf:f9:39:21:01:9c:24:
ee:b2:16:11:ed:d7:14:47:48:8c:76:a4:02:ce:ac:
b5:b3:15:5f:38:c4:a4:fd:99:e9:c7:26:c4:1f:d5:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E9:E3:24:31:2D:C8:A7:4F:3B:69:A5:67:E6:3F:02:E9:29:04:B5
X509v3 Authority Key Identifier:
keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/EenjJDEtyKdPO2mlZ-Y_AukpBLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.224.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:9e:d7:e8:8b:ff:63:ba:65:9b:bd:dd:f4:25:c1:da:23:08:
03:ce:0b:b5:9a:b0:2c:2c:8b:58:b9:cc:5f:cb:16:cf:5f:b0:
e7:7f:a6:d9:34:b6:d4:9a:45:11:79:2b:d1:ac:a7:1e:07:32:
4d:cc:cc:c0:18:48:6b:72:c0:2f:07:5e:e4:50:03:6e:7a:1f:
ad:44:08:10:9a:6c:de:9b:1c:a3:2d:7b:7f:6a:6b:25:c8:97:
71:43:c3:4a:29:d8:c8:bd:16:67:af:f5:65:0c:5e:6c:c7:f1:
a6:52:db:06:c6:ff:c3:58:3b:b2:99:f6:da:d5:10:43:5c:5b:
4b:03:3b:a9:94:dc:ac:52:e6:5e:d4:88:5e:a1:92:6f:71:ef:
58:d3:4c:0c:e0:de:f5:5f:3c:53:f1:f0:13:e5:14:92:e8:99:
4a:c5:45:ec:35:8e:34:8e:d9:17:0e:db:62:c3:14:17:38:a4:
83:97:40:6c:95:da:94:60:8f:72:7a:34:29:48:a9:42:76:e4:
f6:a5:fa:a8:1b:35:39:d5:9f:5d:43:c3:95:92:86:9f:83:ea:
e6:dc:dc:18:ee:02:1e:6b:58:98:6a:bc:5c:00:2e:91:c7:9a:
90:b8:b4:35:e8:61:91:43:e2:6f:f8:48:d4:4a:69:db:86:d6:
86:7e:52:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:09 2025 by rpki-client