Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/M-EHR3HmGlEqhPSa4hFH9zBtA4U.roa
File: M-EHR3HmGlEqhPSa4hFH9zBtA4U.roa (raw, json)
Hash identifier: dHd9hXlo/bLFC9dpW29XAWP5l4uG2XM3fAni1G6KglA=
Subject key identifier: 33:E1:07:47:71:E6:1A:51:2A:84:F4:9A:E2:11:47:F7:30:6D:03:85
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 01942143EBD7FEF1DC7AF7400C6C89B8C957
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/M-EHR3HmGlEqhPSa4hFH9zBtA4U.roa
Signing time: Wed 01 Jan 2025 09:48:06 +0000
ROA not before: Wed 01 Jan 2025 09:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201150
IP address blocks: 193.24.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:eb:d7:fe:f1:dc:7a:f7:40:0c:6c:89:b8:c9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33e1074771e61a512a84f49ae21147f7306d0385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:9d:a5:f1:ea:cb:67:2c:60:ff:f6:6e:bf:
2f:c7:c3:5c:a8:9d:e2:b6:ed:73:de:af:9a:c8:69:
85:14:8c:36:5b:75:1a:c7:84:96:8b:9c:fc:3b:40:
da:3d:96:98:08:06:91:b0:2e:d2:37:6e:e2:7b:44:
79:73:dc:4f:db:f7:49:c0:c3:2e:92:6e:9e:15:3d:
68:14:55:86:9d:4b:73:e5:12:f4:fc:8f:32:48:de:
15:2c:c7:1e:94:08:f1:4b:dc:ad:85:66:53:88:40:
98:a5:20:e2:c8:d7:f4:15:03:ac:9f:c7:a5:2e:87:
f6:96:3d:d4:2a:9f:b3:8d:f2:6b:56:ee:72:08:d5:
b6:88:85:92:e6:95:f9:34:2f:92:15:4d:fd:7e:0c:
49:01:19:1d:38:f7:00:7a:b1:00:cb:5e:dc:6f:52:
6f:af:40:a0:82:d8:5d:b8:9e:50:ce:96:1a:0d:54:
59:8e:ff:d6:6a:f2:c5:3d:ce:59:2e:75:ed:89:41:
7d:7a:d2:bc:6f:51:a3:65:a9:97:2b:cd:24:48:a8:
5d:c1:a1:bf:c7:14:34:0c:b1:e1:a5:09:8d:4e:79:
b9:ad:d7:48:87:83:d6:7e:4e:51:b5:fc:8a:f9:a1:
eb:a6:cf:b3:6f:51:f9:22:01:ab:4a:f3:9e:ee:75:
a0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E1:07:47:71:E6:1A:51:2A:84:F4:9A:E2:11:47:F7:30:6D:03:85
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/M-EHR3HmGlEqhPSa4hFH9zBtA4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.121.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:31:a9:ed:fa:a0:cf:3e:3d:91:3f:3e:74:be:f9:e2:8a:5a:
94:a9:ec:fb:5b:0c:d1:36:8c:e1:d8:f5:be:f7:00:3f:62:a1:
bd:e4:bf:42:73:f9:36:37:13:68:ec:f0:68:31:1d:15:f7:3d:
42:2c:d4:94:f8:f2:32:e1:c8:b3:95:a7:99:71:c0:d1:9e:8d:
55:b1:32:a8:69:a2:61:05:37:92:d2:09:36:dc:3e:82:0e:e0:
ed:24:c2:9b:a8:f8:32:4a:4f:84:99:99:e1:f5:30:e4:8f:47:
ad:04:0c:ec:9a:a1:45:dd:2a:94:be:6e:3d:aa:fc:6f:c5:dc:
f7:57:7b:6d:8e:24:2c:a3:6e:e3:df:5e:29:66:e8:3b:1b:16:
7e:de:d4:77:aa:49:23:cc:dd:e7:29:94:74:de:84:d4:fc:6e:
6c:97:0c:cd:17:b7:b5:7e:72:b6:de:ae:4f:34:a5:9d:aa:53:
05:79:b8:df:89:6a:45:65:ee:de:77:26:f4:cd:c2:e0:2d:6d:
35:83:51:43:62:ac:ef:f6:d4:98:83:4a:21:5b:2a:ac:31:ee:
94:75:b7:67:cf:63:08:a6:9c:25:0c:91:bc:e9:76:ab:8b:6c:
f1:c0:0b:1a:1b:a9:2a:85:7d:ff:c3:0a:f7:c6:82:1f:9d:3b:
57:12:d3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:12:00 2025 by rpki-client