Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/Be7hWobHeXIDcEV-DcvLVcoAOIA.roa
File: Be7hWobHeXIDcEV-DcvLVcoAOIA.roa (raw, json)
Hash identifier: BaLaak1kH9hW9zdiezS80huivnGVBMTLdsyXEFD6uzM=
Subject key identifier: 05:EE:E1:5A:86:C7:79:72:03:70:45:7E:0D:CB:CB:55:CA:00:38:80
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 019421446C94E54EDCB3F7BC6653B72C70A4
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/Be7hWobHeXIDcEV-DcvLVcoAOIA.roa
Signing time: Wed 01 Jan 2025 09:48:39 +0000
ROA not before: Wed 01 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 185.113.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6c:94:e5:4e:dc:b3:f7:bc:66:53:b7:2c:70:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05eee15a86c779720370457e0dcbcb55ca003880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:36:e3:90:76:bf:bd:61:70:08:f5:c3:c5:
a7:cd:33:56:aa:8e:33:e8:06:e7:69:73:65:06:75:
6f:bb:4a:74:2a:33:c3:b1:10:af:de:f0:33:dc:7e:
0d:9f:3d:fe:d1:d5:49:0f:5c:cf:a6:ea:61:ad:9c:
61:1b:f5:06:27:3b:dc:7f:09:ce:a5:b3:bd:13:d0:
4c:ae:ee:00:ed:e9:de:da:82:2a:12:1b:f7:f8:a2:
3f:f5:4c:7e:c5:cd:46:b5:13:8c:67:27:60:84:72:
84:88:35:f6:c5:24:23:bb:d6:3c:c1:1b:3e:1c:1f:
d9:83:9e:be:f7:35:7e:a4:9a:95:7b:85:5f:94:1a:
bb:6f:12:9a:e9:c0:a6:af:2f:98:16:65:cb:5b:b4:
47:38:78:63:5d:b6:3b:4f:99:fb:68:87:94:57:f5:
2e:c5:2d:00:d3:31:56:c8:95:e3:07:26:8c:46:37:
c6:b2:2c:d6:77:1b:04:67:41:fd:e5:4d:98:bc:43:
a1:81:d5:f5:63:e7:6d:7a:4f:7d:14:92:83:5f:98:
cb:23:04:7b:6b:f2:b0:1e:4e:08:1d:d1:1f:05:a2:
4f:b7:ee:95:21:e5:1a:2d:9f:d2:87:15:59:91:f4:
6f:47:73:5d:34:a8:50:e2:3e:34:f1:e6:c2:25:a5:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EE:E1:5A:86:C7:79:72:03:70:45:7E:0D:CB:CB:55:CA:00:38:80
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/Be7hWobHeXIDcEV-DcvLVcoAOIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.223.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:78:1e:cc:7e:b6:38:c1:af:7d:f6:68:6a:b3:48:27:ae:9b:
8c:4b:3d:22:f4:a7:cf:ee:32:b8:6d:12:f7:a1:4c:f9:64:50:
aa:0b:1a:9d:ed:ea:67:1d:3d:d4:16:d6:86:15:d0:45:3b:8a:
ea:4a:8b:a9:3a:25:f4:5a:ab:30:08:42:19:94:51:50:d8:57:
9c:36:a2:61:4b:d2:c3:43:98:62:ca:45:e8:ec:aa:8f:fe:42:
c0:73:d6:59:58:32:53:7c:31:4a:9b:d3:cd:df:eb:e8:b9:c9:
c8:6c:0c:26:cd:ba:20:18:7f:b4:a2:a5:31:01:06:1f:0b:b1:
a3:a7:93:d0:6d:1e:88:4c:16:91:fd:d9:ea:72:a4:5f:db:e0:
2a:68:9a:90:21:7c:97:5f:54:82:aa:70:87:2d:65:bb:b4:d4:
b2:22:5f:c9:e7:23:40:5b:81:44:54:81:71:28:91:1c:97:82:
f6:00:36:73:1a:e3:b9:6d:41:f1:16:39:91:49:d7:16:78:96:
35:f8:c1:3e:6e:cd:af:3e:37:5f:cc:ed:a5:38:d3:fe:95:31:
bf:0b:46:c4:a0:54:ea:96:2c:10:92:59:25:59:59:fb:bd:6d:
8c:c7:9d:f7:31:4c:42:d6:c7:5e:7a:c4:9d:82:fd:d5:d1:32:
65:69:68:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:22:17 2025 by rpki-client