Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/seGxztHMaRspVzKL9CLnUu4K50E.roa
File: seGxztHMaRspVzKL9CLnUu4K50E.roa (raw, json)
Hash identifier: pHXA/5q7FhPuctYLl7xELFKJkXkgA/2y6/VkCsCDAfo=
Subject key identifier: B1:E1:B1:CE:D1:CC:69:1B:29:57:32:8B:F4:22:E7:52:EE:0A:E7:41
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019428250D9A5A6ED500C9EAE55B9BEA371B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/seGxztHMaRspVzKL9CLnUu4K50E.roa
Signing time: Thu 02 Jan 2025 17:51:44 +0000
ROA not before: Thu 02 Jan 2025 17:51:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212609
IP address blocks: 62.76.232.0/24 maxlen: 24
193.124.206.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
195.58.33.0/24 maxlen: 24
212.193.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:0d:9a:5a:6e:d5:00:c9:ea:e5:5b:9b:ea:37:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1e1b1ced1cc691b2957328bf422e752ee0ae741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6f:fa:cc:bb:50:91:9e:6e:72:9d:3b:0c:47:
bd:c1:41:74:00:61:d6:2e:e7:01:99:92:00:ac:08:
ba:f5:d5:b6:90:44:ba:94:ce:db:f5:9f:da:38:2f:
4d:df:63:6b:18:b6:40:a6:12:bf:85:e4:e0:12:ec:
36:c6:05:56:99:03:d8:87:f5:52:4e:57:39:34:dc:
27:04:d5:76:54:5c:db:70:a5:38:3b:38:98:f6:94:
5d:dd:06:8f:d3:bc:c6:13:5c:9d:c9:88:71:d2:96:
02:43:ad:0c:0b:90:68:f0:f1:48:ba:fd:be:b9:9e:
8f:e3:97:44:d8:ee:49:35:3b:cb:1e:f4:cd:79:b0:
c9:17:a5:6b:e0:73:8a:12:b7:0f:75:1b:ab:62:57:
18:45:20:33:b7:72:ad:09:4a:e1:bb:05:e3:5e:57:
b8:b6:5e:89:28:97:2b:43:c1:20:5e:d8:e9:f4:27:
70:9f:70:d9:5d:7e:70:5a:b6:58:8f:0e:53:0d:43:
1d:8c:06:d3:3a:5c:1e:74:fa:76:80:9a:ea:a3:bf:
dd:c4:25:69:7a:1e:fe:cd:f3:a8:4d:c2:db:3b:6f:
9f:7a:bf:c9:8d:c7:e4:c9:bf:37:60:62:ca:3c:b2:
a2:fb:96:78:ce:04:a2:23:a4:70:84:aa:a0:cc:25:
c8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E1:B1:CE:D1:CC:69:1B:29:57:32:8B:F4:22:E7:52:EE:0A:E7:41
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/seGxztHMaRspVzKL9CLnUu4K50E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
193.124.206.0/24
194.87.125.0/24
195.58.33.0/24
212.193.9.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:73:42:bd:a3:e2:13:f6:f0:9a:f1:55:a3:da:c0:cd:70:85:
92:a6:19:6a:c3:54:9a:b4:e6:40:0b:17:1f:ff:85:1f:4a:58:
da:8f:ce:a7:a1:47:10:47:3f:28:3d:30:61:71:16:41:a2:8c:
2c:63:d7:5b:3a:f3:86:96:de:09:62:5d:a7:39:72:c9:fb:2e:
1e:31:79:78:43:b2:b2:fc:bc:9c:4d:47:ad:64:76:4e:50:99:
5d:af:d4:48:47:e3:22:e0:bf:2e:ee:4f:e6:03:a2:6b:d0:55:
ca:22:56:c6:96:7d:6b:7e:b1:2a:24:17:54:bb:9a:35:6c:fa:
89:4c:bc:0c:4a:43:1a:29:27:c2:4b:97:71:a2:5e:4a:0f:4d:
eb:0b:b9:ba:47:84:38:da:36:95:ff:91:07:62:a4:d6:4a:de:
2b:a2:69:c7:c1:5d:bb:0f:40:aa:b9:e9:dd:7f:5c:17:6a:49:
59:22:54:8f:14:1c:94:a9:a3:87:e4:5f:81:6b:9e:1b:b4:e9:
66:9b:b7:e8:51:d9:58:22:f0:66:34:b7:77:cf:4b:21:17:08:
36:06:07:fb:43:94:c0:a7:84:9a:c3:58:ec:7e:a1:e7:e8:61:
2b:62:8e:85:da:65:0b:fd:aa:f0:64:8c:6c:a6:ff:73:83:8a:
f2:34:70:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:24:55 2025 by rpki-client