Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/XOG9GifE23FTQF3mRx0A7MXoFc4.roa
File: XOG9GifE23FTQF3mRx0A7MXoFc4.roa (raw, json)
Hash identifier: IN7FvbrZSYqSaoTF08/58SkSZ7gLEeQADLkeQhFKUR0=
Subject key identifier: 5C:E1:BD:1A:27:C4:DB:71:53:40:5D:E6:47:1D:00:EC:C5:E8:15:CE
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 01856BD38CE5397926BD3C6A422FDA513C75
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/XOG9GifE23FTQF3mRx0A7MXoFc4.roa
Signing time: Sun 01 Jan 2023 05:35:04 +0000
ROA not before: Sun 01 Jan 2023 05:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12831
IP address blocks: 213.192.64.0/20 maxlen: 20
213.192.80.0/20 maxlen: 20
213.192.96.0/20 maxlen: 20
213.192.112.0/20 maxlen: 20
89.191.176.0/20 maxlen: 20
2001:4070:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:8c:e5:39:79:26:bd:3c:6a:42:2f:da:51:3c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Jan 1 05:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ce1bd1a27c4db7153405de6471d00ecc5e815ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:00:8e:05:0d:28:29:82:17:80:4d:c4:f4:1d:
32:f0:4d:ac:3a:22:7c:3c:b5:3e:7c:ae:3a:90:97:
3f:83:f0:4c:e7:d1:19:16:7e:bb:bb:fc:f6:25:76:
72:13:98:cf:07:eb:ec:8f:04:10:e2:28:93:cd:c1:
df:3c:81:50:9e:ab:7d:58:c9:cf:3b:c3:a0:02:d4:
98:7d:59:9e:7b:66:93:47:77:66:22:75:ff:31:7e:
43:b3:25:45:17:fd:8b:f6:87:24:97:e8:2e:8c:99:
58:df:0f:7d:24:6f:04:88:18:ed:23:5e:18:b2:47:
63:48:83:41:e2:c2:c9:c9:ff:c5:ec:73:56:9c:ce:
c9:34:93:40:c0:66:57:9d:4c:86:af:93:1e:77:da:
0c:62:cb:4c:a5:05:ec:e8:90:e2:62:21:77:68:31:
13:d1:15:d8:22:25:9e:b1:eb:66:06:ac:4f:27:2b:
e9:ac:ce:5e:06:81:3e:54:c1:27:c6:bb:10:77:93:
50:53:42:bd:e9:40:78:77:d9:1d:b5:81:db:cd:1c:
d7:36:71:4e:d5:18:86:3d:37:9b:9e:c4:55:95:7e:
e7:5f:5e:7e:b4:ea:e6:f4:f3:7c:ee:fa:62:d3:54:
c9:10:5f:ce:5e:1c:2f:4a:45:36:3b:5b:57:35:be:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E1:BD:1A:27:C4:DB:71:53:40:5D:E6:47:1D:00:EC:C5:E8:15:CE
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/XOG9GifE23FTQF3mRx0A7MXoFc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.176.0/20
213.192.64.0/18
IPv6:
2001:4070:8000::/33
Signature Algorithm: sha256WithRSAEncryption
2a:67:73:87:e8:98:f4:08:63:a7:2b:95:c0:2d:5b:e9:d6:1c:
b8:64:52:79:f5:00:4a:b2:b5:70:64:5b:11:0a:ca:13:42:21:
79:0f:3b:67:0a:81:f8:2c:57:6d:51:ac:7c:1c:c9:c2:d5:87:
26:eb:7d:5b:90:64:58:c2:44:d4:ef:ec:87:ec:1f:b1:97:0f:
50:8a:04:1f:56:b5:fe:b6:20:56:18:9f:8e:1e:d7:7f:18:5c:
74:9e:76:a1:c5:65:88:63:77:7e:c2:0e:d3:b0:20:c8:9d:5d:
09:ca:8c:18:ab:fe:0f:e3:01:fe:e0:72:dd:0b:ce:9e:04:7f:
91:6f:7a:9a:f8:7f:7a:0b:a7:0f:33:02:e7:11:21:67:e7:44:
97:0e:8d:5e:bc:b4:39:70:e8:8e:f7:4d:bd:a6:cc:75:b3:fc:
27:f7:ca:69:48:25:4e:06:e0:f8:91:f4:29:d9:77:1a:d6:06:
26:da:d6:42:15:0d:74:8c:a6:89:a0:ce:5d:4b:b4:e7:5d:f0:
76:bc:05:87:42:6b:de:45:85:a8:7a:da:af:c4:e9:ca:aa:a0:
8b:99:d5:7f:85:d6:9a:40:16:09:e3:9d:8f:7b:41:f5:ad:b1:
59:0f:3e:b8:94:ac:8a:b1:05:62:be:b0:80:b4:05:3d:c7:75:
1c:10:dc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:54 2025 by rpki-client