Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/nuuh4PxFOVgC2DEJC61w6Iyn5ks.roa
File: nuuh4PxFOVgC2DEJC61w6Iyn5ks.roa (raw, json)
Hash identifier: AH98aFwhUAJeGWsVIU2IF6imcAQ7KTuBqXyRcVHz9K4=
Subject key identifier: 9E:EB:A1:E0:FC:45:39:58:02:D8:31:09:0B:AD:70:E8:8C:A7:E6:4B
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0188BE3F9167BCC82319D6E25A5250CE44A2
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/nuuh4PxFOVgC2DEJC61w6Iyn5ks.roa
Signing time: Thu 15 Jun 2023 08:50:16 +0000
ROA not before: Thu 15 Jun 2023 08:50:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 185.236.8.0/23 maxlen: 23
185.236.11.0/24 maxlen: 24
185.255.112.0/24 maxlen: 24
85.117.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:3f:91:67:bc:c8:23:19:d6:e2:5a:52:50:ce:44:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jun 15 08:50:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9eeba1e0fc45395802d831090bad70e88ca7e64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bd:89:36:e7:99:26:c3:b6:74:c8:e7:cb:75:
5d:df:d0:06:c4:98:54:f2:bc:b0:2f:4a:66:c3:8c:
71:ff:c8:7a:97:71:6d:58:9c:c6:7e:ac:33:e1:f8:
6c:90:3b:12:01:99:f0:5c:e6:7f:b7:14:3e:0e:09:
ba:c9:66:96:99:bf:41:94:18:ae:1c:51:b9:c9:2f:
72:a0:90:5e:1c:e1:45:e8:11:73:3a:02:16:56:70:
ad:d2:28:f7:38:a2:cb:67:a3:4a:6b:b8:10:a4:09:
b5:6d:e1:c3:2b:82:9d:45:cc:91:b0:36:9c:57:37:
60:bb:b3:53:47:a8:06:8b:8d:25:b0:8b:de:4c:b2:
18:95:3c:f7:02:0d:1c:04:b7:c3:20:80:c0:49:8f:
30:63:37:fb:e1:68:10:1a:34:40:d6:41:7d:0f:31:
6d:9b:fc:d9:bf:c9:fb:c4:9e:da:3e:6f:b5:ef:00:
2a:bf:a5:1e:71:2f:01:a2:26:f4:ba:60:b9:ff:ad:
f7:ad:91:a6:8f:be:04:d1:df:87:e3:32:1b:2a:14:
57:c3:b4:87:1c:6e:da:6c:70:31:1d:56:60:14:43:
1f:03:91:4b:8e:a7:f0:fe:53:60:7d:04:60:2a:b2:
64:8a:71:07:99:95:57:20:73:52:57:b4:a7:46:2f:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EB:A1:E0:FC:45:39:58:02:D8:31:09:0B:AD:70:E8:8C:A7:E6:4B
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/nuuh4PxFOVgC2DEJC61w6Iyn5ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.243.0/24
185.236.8.0/23
185.236.11.0/24
185.255.112.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f3:c4:c7:c1:17:a1:46:08:82:84:27:85:9c:58:b1:35:b1:
4b:b2:24:10:10:08:8a:1b:d8:41:fc:58:bf:f9:98:d6:ff:9c:
46:58:fd:42:5a:a3:ea:aa:55:ac:40:0f:f1:c9:a9:f7:cc:82:
aa:18:ae:68:14:fc:fe:87:82:6d:93:99:c3:6d:24:f5:91:dd:
d9:a6:77:f3:c6:ff:2a:d6:84:23:ed:f8:e5:ad:6d:ba:99:44:
63:62:55:6d:c7:4a:08:c8:1b:c2:eb:8f:0b:63:1c:70:49:48:
3f:2b:fe:3c:87:df:96:55:f1:fe:d8:68:ad:54:29:d0:99:89:
5c:b3:02:a2:08:b5:34:44:b9:1d:53:da:f8:bb:a5:e1:e8:c9:
27:1c:ab:0f:fa:dc:ff:a5:18:f2:a0:8b:30:44:e9:c0:c3:4e:
b8:8b:3c:98:3c:ac:80:d9:a6:da:94:4d:68:ee:40:b9:b6:02:
88:9a:21:db:a8:58:08:86:53:4c:e1:82:f2:37:d4:2e:e5:58:
70:be:45:fc:ad:11:0d:07:97:8b:55:4d:d5:56:4f:a4:42:fb:
84:74:f8:31:cf:0c:d4:a6:cf:c7:10:b2:06:c9:31:eb:91:ae:
f7:0f:32:79:d7:ca:82:47:7d:bd:01:94:aa:73:93:66:f4:75:
9d:81:d0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:20 2025 by rpki-client