Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/eyUo66luB5QRDX6w7YyJ7pXY5Hg.roa
File: eyUo66luB5QRDX6w7YyJ7pXY5Hg.roa (raw, json)
Hash identifier: 2hmFNfoArlOZk2oHOZuni7YNp6ha/UAEA8AYiguMdtc=
Subject key identifier: 7B:25:28:EB:A9:6E:07:94:11:0D:7E:B0:ED:8C:89:EE:95:D8:E4:78
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 01942521C37FB6DE0F26213B800088F95A61
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/eyUo66luB5QRDX6w7YyJ7pXY5Hg.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 194.150.73.0/24 maxlen: 24
194.150.74.0/24 maxlen: 24
194.150.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c3:7f:b6:de:0f:26:21:3b:80:00:88:f9:5a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b2528eba96e0794110d7eb0ed8c89ee95d8e478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:f7:2b:ff:af:98:25:d9:f3:a8:8b:55:53:
a6:db:1d:9e:9a:67:7e:67:fa:2c:a9:17:93:b3:e9:
0c:00:94:53:20:a4:72:70:04:aa:a6:b5:da:4d:ba:
63:1f:e0:0c:14:2d:1b:f7:71:1f:49:de:01:e9:05:
8e:d5:c7:83:cf:a2:38:d7:a0:37:1b:83:e6:ea:82:
98:31:78:4e:20:15:45:5d:da:28:9a:a0:04:c8:e8:
3e:02:7d:8c:c1:36:27:eb:8c:7e:95:78:f4:22:d6:
55:cf:f5:22:a4:6d:62:bd:a4:dc:5a:ef:04:ae:aa:
58:d2:f5:67:35:6f:37:2d:f3:ea:a8:83:45:96:98:
ef:a7:28:c3:14:a3:4a:99:19:1c:d7:55:c2:dd:84:
46:92:3e:02:23:5a:2a:38:08:88:86:1b:91:b1:ae:
e1:23:b4:7e:f6:34:02:14:a8:bf:74:f7:7c:e1:a6:
7d:be:63:7f:e3:e2:83:46:e5:40:eb:16:1c:97:3c:
f3:36:08:88:98:63:a5:11:a1:5f:b3:b1:f4:26:86:
87:cf:b2:30:ad:02:c4:96:c1:8c:10:a3:18:66:f2:
35:73:f7:6b:64:47:de:52:a8:30:a0:fd:66:7f:03:
66:35:4e:9d:82:33:7e:98:ba:38:b3:b4:a7:a4:d7:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:25:28:EB:A9:6E:07:94:11:0D:7E:B0:ED:8C:89:EE:95:D8:E4:78
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/eyUo66luB5QRDX6w7YyJ7pXY5Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.73.0-194.150.75.255
Signature Algorithm: sha256WithRSAEncryption
3e:3d:ff:bd:c3:0f:16:f8:67:8b:7d:19:62:d0:f6:2b:86:98:
a0:1a:9a:df:ca:9e:65:81:98:cb:aa:63:b3:e8:14:78:af:45:
1d:e2:4d:0f:8a:45:05:93:ee:3e:4f:7a:cf:72:59:6c:9e:2f:
c1:bf:75:f1:d8:d7:ba:b0:fc:45:6b:2b:35:6d:2b:da:3c:98:
64:65:3e:07:54:f2:90:e8:16:3a:1e:12:a8:4c:12:38:47:00:
f6:91:fe:b7:91:22:30:a8:24:61:8f:a4:e7:bc:f5:45:59:6a:
c6:ae:6a:3b:be:73:1b:b1:96:77:e1:65:07:8b:2c:a4:f4:e0:
43:46:bc:f3:77:6c:f5:61:f1:3e:67:fd:4d:58:6b:f6:75:a9:
77:a8:60:f8:ba:63:03:5f:6a:04:f2:03:c8:da:1e:f9:f1:92:
86:29:a9:d4:5a:1c:76:ef:53:c0:6c:db:a1:8d:e3:a5:9e:d4:
d0:36:2e:ca:7a:17:e1:49:10:1e:ee:41:ba:12:7b:7a:7a:22:
99:1c:46:79:17:75:97:40:45:f1:10:9c:35:76:e6:b5:3e:11:
92:05:8a:bf:16:8c:da:02:6a:9b:be:7a:38:63:eb:bf:54:e2:
e6:47:98:32:52:30:70:70:a0:71:5d:fb:6e:42:ea:ea:41:92:
16:d3:ff:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:04 2025 by rpki-client