Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/eqT6wyPQANegQWczS_E8NsRIGH0.roa
File: eqT6wyPQANegQWczS_E8NsRIGH0.roa (raw, json)
Hash identifier: uVTDWyi87OupvvigMLyo7l17Ar6OD8Dv20/y/RB28lE=
Subject key identifier: 7A:A4:FA:C3:23:D0:00:D7:A0:41:67:33:4B:F1:3C:36:C4:48:18:7D
Certificate issuer: /CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Certificate serial: 019421B18806A14E05E03F9C7D32C2E9BEC9
Authority key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/eqT6wyPQANegQWczS_E8NsRIGH0.roa
Signing time: Wed 01 Jan 2025 11:47:50 +0000
ROA not before: Wed 01 Jan 2025 11:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62105
IP address blocks: 185.128.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:88:06:a1:4e:05:e0:3f:9c:7d:32:c2:e9:be:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26
Validity
Not Before: Jan 1 11:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7aa4fac323d000d7a04167334bf13c36c448187d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:14:f0:b4:b0:53:e4:aa:1f:c0:9e:78:bf:
f0:51:e6:0c:36:fa:c7:fc:1e:94:ca:f7:c0:59:60:
2b:69:0d:4f:80:6f:36:ad:df:73:74:ca:12:3f:d2:
bb:c5:88:1c:55:d2:d9:77:75:1f:39:ad:eb:28:99:
c5:da:68:f7:a5:ec:d0:68:4b:c9:ea:15:7b:38:0d:
6f:16:9d:71:54:21:79:20:f0:61:fb:33:fe:27:4a:
74:f7:55:a6:15:94:d0:58:3c:5a:f6:65:f8:08:82:
69:c5:f2:8a:9d:cf:60:07:5b:2b:d4:97:9d:72:b5:
93:2a:08:84:26:08:7c:79:16:1e:30:49:8d:7e:ff:
61:2c:de:de:10:cc:5a:f4:fe:de:d1:3a:03:89:0d:
7a:3e:a0:86:0f:7d:42:55:66:7f:0b:d4:98:0f:24:
95:21:20:8f:ee:d2:7b:cc:01:60:08:8d:97:71:cb:
a2:96:6a:d6:ce:03:62:ec:69:41:0d:19:63:5a:a3:
27:d4:81:e8:4e:f4:e8:af:b9:00:38:68:b0:65:bb:
a4:9d:9b:59:91:e6:2d:d7:22:e4:c7:ca:5e:65:9f:
d5:73:da:96:f7:f1:2b:13:b0:df:7c:70:d5:c6:10:
71:c9:0b:0e:dc:d0:9c:c4:e7:2b:9a:28:da:ca:c1:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A4:FA:C3:23:D0:00:D7:A0:41:67:33:4B:F1:3C:36:C4:48:18:7D
X509v3 Authority Key Identifier:
keyid:DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/eqT6wyPQANegQWczS_E8NsRIGH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.11.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d5:e8:5f:c2:79:49:00:b7:0a:1a:2a:5d:e4:0a:81:7b:f7:
e1:b2:33:b3:9f:20:d5:cc:65:41:0a:13:02:3e:ef:2d:a1:58:
31:1b:2b:b9:fc:49:2c:85:aa:7f:01:2d:38:43:18:88:3e:55:
55:64:cd:20:02:2b:09:d8:15:fa:9b:42:2d:cd:25:71:5e:20:
e3:02:91:73:d5:a9:02:50:db:d0:79:ae:a3:b9:fd:9c:94:64:
4c:60:92:6d:16:89:5d:c7:6a:57:b9:68:30:0b:29:c0:c2:c1:
5d:aa:08:5e:3b:88:b4:4c:f3:f3:59:5c:1a:34:42:38:f3:46:
8f:74:9c:5e:e0:54:3f:56:10:c6:a6:ca:c3:ee:00:fa:cd:e7:
e8:56:60:5c:c2:79:2b:24:94:d7:cf:ea:9a:49:70:84:b9:0e:
4e:82:26:93:2f:12:54:53:04:9d:a3:cc:ad:55:30:90:53:24:
1f:12:a6:36:4e:ba:aa:fa:06:11:e4:25:41:a5:76:c4:db:dc:
e2:37:38:71:d3:73:cc:35:24:92:0f:a7:03:be:7f:ee:73:fc:
a5:52:03:98:f1:07:80:b7:4d:f0:51:21:dc:4c:0c:2f:e0:70:
44:42:45:65:35:ae:5a:f6:22:1b:b9:03:d6:3b:d3:a5:c4:6b:
b1:f7:e9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:42 2025 by rpki-client on console.sobornost.net