Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/72pbmlHoUDNNi9_U2U3igLv-Ejw.roa
File: 72pbmlHoUDNNi9_U2U3igLv-Ejw.roa (raw, json)
Hash identifier: +n5e4ojLZqtJRZkCcqRft73mFkgQhj3CgkBkuxQfYWM=
Subject key identifier: EF:6A:5B:9A:51:E8:50:33:4D:8B:DF:D4:D9:4D:E2:80:BB:FE:12:3C
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0194266B0B91F9508EA34390AE6D8E804D20
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/72pbmlHoUDNNi9_U2U3igLv-Ejw.roa
Signing time: Thu 02 Jan 2025 09:48:57 +0000
ROA not before: Thu 02 Jan 2025 09:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198160
IP address blocks: 185.236.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:0b:91:f9:50:8e:a3:43:90:ae:6d:8e:80:4d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 2 09:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef6a5b9a51e850334d8bdfd4d94de280bbfe123c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e6:a3:0b:23:24:ad:cf:d5:c4:8d:44:21:62:
e3:6a:85:bb:87:35:bc:14:9a:f4:4a:bf:db:c5:6f:
6f:45:10:bc:81:84:0a:c7:51:e5:ae:d5:db:a4:6d:
0e:a3:77:85:df:c9:ba:55:90:89:f1:68:23:0d:5c:
c8:14:b3:78:c9:ca:3c:c2:0c:90:5b:93:94:b2:54:
8b:40:8b:b7:8e:02:87:d8:77:87:52:6b:21:27:09:
55:90:a6:2e:26:46:cc:2b:e3:8f:cd:cf:5b:af:1d:
10:94:d9:50:70:d1:ff:47:73:b2:94:45:b8:4e:4e:
66:f8:63:1f:72:30:0c:d3:de:12:ac:4c:79:90:d7:
48:e4:bd:39:d4:ba:ce:38:f6:85:07:31:e0:8f:f3:
87:6b:d5:d2:59:4d:6b:a2:da:f8:67:4d:fc:7e:ce:
90:5c:12:af:9e:cd:58:d3:f5:de:4d:7d:b3:46:9b:
6f:0e:cd:cc:fe:ee:c8:0f:40:6b:f8:99:fa:1c:82:
e6:54:ad:19:a3:d4:da:94:af:b0:95:8b:54:88:2b:
9a:dd:5c:9e:a8:36:ce:cf:ce:a7:49:61:2d:05:39:
47:6e:ef:32:bf:7a:94:2a:e8:62:7a:73:dd:b4:57:
7e:a4:2c:ff:aa:8e:f4:24:8e:19:e6:a8:f1:b9:c5:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6A:5B:9A:51:E8:50:33:4D:8B:DF:D4:D9:4D:E2:80:BB:FE:12:3C
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/72pbmlHoUDNNi9_U2U3igLv-Ejw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.11.0/24
Signature Algorithm: sha256WithRSAEncryption
16:2a:ba:ea:64:d1:83:8f:51:10:ed:0d:c9:bf:3f:da:5a:bb:
9b:ad:c4:c5:68:82:75:a0:02:fe:ea:d1:c7:99:0c:b4:d6:d5:
cc:7c:6e:58:17:21:e9:c9:7d:f7:08:e0:6c:55:ca:e1:c7:f0:
1e:11:37:9a:2e:41:14:aa:c9:9d:c1:09:de:5d:02:a3:2f:29:
65:0b:29:e1:92:ec:66:b3:c8:14:81:5e:16:72:e5:a6:48:f2:
71:64:37:ea:1d:35:43:45:ed:15:25:d0:cf:92:c2:d5:16:bf:
64:be:12:b7:82:a8:64:1b:eb:47:db:d0:2a:f6:16:45:58:dc:
97:9a:79:b1:88:43:56:cf:d2:30:d8:d6:05:70:3b:44:b9:82:
c9:15:e9:4d:d0:85:10:f9:3a:4a:a9:66:6c:2d:5d:f0:7c:fb:
ba:61:2a:8b:77:9a:c8:f1:b1:5b:90:4a:23:4d:30:32:cc:77:
f1:bc:54:c8:94:ef:8e:4f:0e:01:fd:00:67:b9:72:2a:79:8e:
36:79:1e:e9:ef:ea:7e:a4:87:09:71:c2:e7:6e:89:a4:81:6d:
89:de:8e:cf:af:fc:80:f3:83:30:7c:21:ea:59:56:99:8b:39:
51:a8:9c:b9:d2:31:8c:ab:0f:ab:68:2c:33:21:d5:c8:03:0f:
20:6a:c9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:44 2025 by rpki-client