Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/EjiEhqCQfFeJxheh78DjOW0HnX8.roa
File: EjiEhqCQfFeJxheh78DjOW0HnX8.roa (raw, json)
Hash identifier: xMjHQVoybWNabo3SxaU+I1LoAYBSZrLhM+vfUEw6Ma8=
Subject key identifier: 12:38:84:86:A0:90:7C:57:89:C6:17:A1:EF:C0:E3:39:6D:07:9D:7F
Certificate issuer: /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Certificate serial: 0194258F569A704F5E6439B98BB9E09F0C1D
Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/EjiEhqCQfFeJxheh78DjOW0HnX8.roa
Signing time: Thu 02 Jan 2025 05:48:58 +0000
ROA not before: Thu 02 Jan 2025 05:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212693
IP address blocks: 213.185.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:56:9a:70:4f:5e:64:39:b9:8b:b9:e0:9f:0c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Validity
Not Before: Jan 2 05:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12388486a0907c5789c617a1efc0e3396d079d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:dc:ec:18:05:29:7d:3e:66:23:4e:7f:aa:
d9:73:3b:20:d7:ce:50:9f:c6:70:bb:11:95:aa:25:
ec:e9:dc:7c:df:16:34:17:b4:c1:9f:28:18:4a:60:
91:c1:d6:85:d5:23:c4:68:18:3c:f7:c3:09:08:d8:
03:c9:5a:db:56:d5:06:26:dc:7e:82:14:dd:0d:bb:
f3:93:d2:1b:52:2f:4b:10:8d:c1:ba:f9:54:29:07:
a5:61:2d:10:6c:73:fc:82:25:59:02:eb:c3:30:fb:
5f:4c:b4:c6:93:f9:57:a9:47:01:b2:11:fe:6c:33:
71:3c:49:8f:d5:91:5f:aa:f1:97:01:c4:c3:62:1d:
e3:d3:5a:53:d3:32:5d:75:68:1c:63:61:db:78:a1:
ec:bb:02:66:f5:a2:d1:5f:a7:32:fd:32:5c:f5:13:
7e:5b:fe:65:68:8c:72:59:fc:24:0a:d2:60:60:84:
a4:dd:92:88:e3:3d:05:0a:a0:58:2f:7d:89:a7:a8:
8e:5d:78:3f:38:aa:11:e5:eb:67:66:54:84:48:74:
df:c9:2f:7a:9d:55:74:e3:d9:ad:c7:14:5f:71:07:
f5:6f:85:f8:16:4d:d2:1e:f4:3e:5b:91:d4:b3:ce:
b4:38:e0:1c:b9:e0:e8:04:b1:a0:c7:d8:f9:d8:7f:
e3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:38:84:86:A0:90:7C:57:89:C6:17:A1:EF:C0:E3:39:6D:07:9D:7F
X509v3 Authority Key Identifier:
keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/EjiEhqCQfFeJxheh78DjOW0HnX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.185.64.0/24
Signature Algorithm: sha256WithRSAEncryption
38:7c:0b:f7:13:76:e0:15:d1:e7:de:5b:d5:4c:eb:7e:84:f4:
17:b1:75:04:25:cd:c3:3e:bc:55:06:91:f9:77:8e:75:2b:c1:
c1:f8:35:c5:67:70:35:f8:a5:10:71:02:69:74:fe:24:ce:b7:
09:69:8c:8e:9a:a2:cd:82:34:48:08:92:ff:19:65:01:95:ee:
2e:0d:ca:88:90:cf:e4:4f:2e:4f:c5:5e:ba:26:b9:62:12:dc:
6e:7e:9d:ca:36:33:7f:60:9f:c3:9d:84:bc:fe:5b:0c:71:bd:
de:70:de:ac:a6:ac:53:34:f8:54:70:98:80:86:46:32:4a:d2:
4d:ca:df:6c:22:22:20:27:55:d7:07:23:b7:38:b7:5c:c7:32:
01:9f:77:8e:62:37:07:c8:9f:0f:ce:ad:56:d3:8a:9c:2f:20:
e0:2b:c7:ea:99:37:cd:65:78:c3:eb:7d:b2:57:fb:82:65:a4:
ad:b0:5b:d8:b8:21:f0:68:aa:96:a3:73:f3:43:df:f2:a6:fb:
c9:2b:5b:40:04:30:45:52:9a:c7:b9:16:04:ef:25:de:f6:07:
19:ef:fc:18:60:22:de:98:14:69:cb:19:35:66:9a:1d:9d:6f:
70:0d:55:7c:bb:ad:4f:5d:a5:a1:83:12:87:19:fd:d0:2e:01:
45:d1:55:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:14 2025 by rpki-client on console.sobornost.net