Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/etpEu1cj7-R5VUN9lVCy1f6R_us.roa
File: etpEu1cj7-R5VUN9lVCy1f6R_us.roa (raw, json)
Hash identifier: YZEZp2TGlFEUPFteuruD5i0s6l1fSCZqW08CfFGNqPU=
Subject key identifier: 7A:DA:44:BB:57:23:EF:E4:79:55:43:7D:95:50:B2:D5:FE:91:FE:EB
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 01946B2C338BBCA3A1DD2205559DE52B6EC5
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/etpEu1cj7-R5VUN9lVCy1f6R_us.roa
Signing time: Wed 15 Jan 2025 18:14:06 +0000
ROA not before: Wed 15 Jan 2025 18:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 188.190.0.0/24 maxlen: 24
188.190.1.0/24 maxlen: 24
188.190.2.0/24 maxlen: 24
188.190.12.0/24 maxlen: 24
188.190.13.0/24 maxlen: 24
188.190.14.0/24 maxlen: 24
188.190.15.0/24 maxlen: 24
188.190.16.0/24 maxlen: 24
188.190.17.0/24 maxlen: 24
188.190.18.0/24 maxlen: 24
188.190.19.0/24 maxlen: 24
188.190.20.0/24 maxlen: 24
188.190.21.0/24 maxlen: 24
188.190.22.0/24 maxlen: 24
188.190.23.0/24 maxlen: 24
188.190.24.0/24 maxlen: 24
188.190.25.0/24 maxlen: 24
188.190.26.0/24 maxlen: 24
188.190.27.0/24 maxlen: 24
188.190.28.0/24 maxlen: 24
188.190.29.0/24 maxlen: 24
188.190.30.0/24 maxlen: 24
188.190.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:2c:33:8b:bc:a3:a1:dd:22:05:55:9d:e5:2b:6e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Jan 15 18:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ada44bb5723efe47955437d9550b2d5fe91feeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:1b:5c:ef:35:32:51:40:dc:98:bd:92:1b:
06:22:dc:7a:5d:29:95:fe:ff:9b:64:80:7a:f7:74:
ab:eb:b8:b7:35:25:3a:a1:93:a0:58:17:04:4c:25:
87:1b:c2:80:a7:04:80:aa:06:a2:db:bb:fb:fc:9c:
db:d0:e8:54:92:4e:19:04:cc:ac:24:bf:ba:71:72:
be:32:78:2d:00:d7:8b:ec:e8:00:71:df:68:0a:8a:
d8:a6:da:29:62:46:88:19:ac:cb:f1:b0:e3:b0:ec:
8a:e0:1a:04:a1:ec:88:05:8a:5f:ed:47:4a:86:76:
4c:82:0b:ec:89:5e:b9:db:97:43:e0:98:7e:f8:18:
85:bf:b7:9f:3a:aa:be:a7:d9:d1:84:c0:7d:3b:1f:
e7:c2:c6:cf:d6:f1:8d:9c:ef:1e:1c:5c:87:ec:95:
1c:1b:5a:32:0e:92:78:84:2d:a7:ad:6f:8f:b5:bc:
30:4e:eb:a5:00:96:21:fc:29:10:8c:94:6f:aa:6c:
72:93:18:87:6b:78:c1:fb:7a:27:bd:65:51:2c:00:
2a:2f:f6:bb:3d:a5:12:fd:b5:14:cf:85:89:c3:4f:
fb:f0:0a:0b:b7:82:36:47:a7:81:f1:62:80:ae:fa:
45:2b:36:4c:09:ab:f3:09:41:4f:62:e9:97:34:67:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DA:44:BB:57:23:EF:E4:79:55:43:7D:95:50:B2:D5:FE:91:FE:EB
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/etpEu1cj7-R5VUN9lVCy1f6R_us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.0.0-188.190.2.255
188.190.12.0-188.190.31.255
Signature Algorithm: sha256WithRSAEncryption
9c:ea:9d:fd:64:3f:ea:46:46:60:49:0a:35:a0:cc:84:b3:ce:
8e:ee:14:77:c9:94:09:7b:e1:6b:1d:f7:50:8b:3b:61:9a:e8:
27:ef:01:5f:c6:23:f6:45:15:c9:80:ba:cc:ac:1b:a2:95:91:
49:05:a6:0b:75:dc:c4:d6:5b:12:bd:07:0b:18:f2:76:22:1b:
c4:ca:68:f3:7d:d9:c9:0b:58:4b:80:cf:b1:97:92:85:aa:59:
65:58:56:09:32:fd:56:91:8e:21:03:05:2a:1e:52:75:22:c7:
71:1f:4e:59:d2:03:50:54:bb:d7:39:c3:52:53:6b:07:9b:33:
21:76:e9:ca:bd:56:44:20:e6:f8:f9:ea:3d:f8:e5:72:8c:10:
3f:c5:09:c9:3c:f7:73:ba:d9:a6:cd:ab:89:87:35:55:81:4a:
f9:71:d1:0d:d8:61:38:2f:00:f0:fa:31:60:bc:a5:d3:39:bf:
58:47:ef:0c:0c:59:2e:f5:c0:ab:ae:54:5c:1a:87:ad:07:09:
70:4c:77:52:76:cf:2a:db:f9:85:d3:34:36:27:6e:03:aa:ee:
e8:cf:93:2a:22:a1:2d:4a:11:89:5b:43:93:37:bc:c0:28:7b:
d4:c7:8d:35:c5:2b:7e:51:ff:df:78:e1:00:a0:56:7a:60:18:
50:8a:a4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:48:56 2025 by rpki-client