Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/_cTjsccOlGfEayp8PXkvdYi_98o.roa
File: _cTjsccOlGfEayp8PXkvdYi_98o.roa (raw, json)
Hash identifier: FJYOiN3Fx5xaiccdaHyFz//7kwAj9hCTVSJd74dQwjU=
Subject key identifier: FD:C4:E3:B1:C7:0E:94:67:C4:6B:2A:7C:3D:79:2F:75:88:BF:F7:CA
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 0195D1A5A9788A2C28DC324CFEF626B41589
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/_cTjsccOlGfEayp8PXkvdYi_98o.roa
Signing time: Wed 26 Mar 2025 08:50:49 +0000
ROA not before: Wed 26 Mar 2025 08:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211293
IP address blocks: 213.192.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:a5:a9:78:8a:2c:28:dc:32:4c:fe:f6:26:b4:15:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Mar 26 08:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdc4e3b1c70e9467c46b2a7c3d792f7588bff7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:6c:18:41:4c:e8:e8:b0:4d:11:65:76:9b:
ef:3d:f5:ac:a2:39:88:7e:fe:84:75:ae:54:cd:1b:
4a:17:25:e4:d4:a6:be:c5:6e:1f:56:e6:28:0d:e7:
db:a0:89:bb:97:b0:a3:89:d2:5a:72:71:fc:4f:1f:
23:d2:ac:e4:d9:f3:92:e1:55:5c:bf:ac:fb:24:dc:
25:b5:51:f4:3f:9e:f0:82:d1:83:1d:97:06:9e:ce:
f4:46:ef:7e:42:0c:a9:01:c8:3b:ed:c7:1a:ba:7a:
a5:b0:bd:9b:db:28:14:98:54:cd:6f:27:64:8c:13:
31:8d:0c:ca:d3:59:90:10:59:f5:e0:d6:29:e0:5a:
45:b4:9f:1a:a5:be:12:a2:18:a0:88:8c:78:40:6e:
9f:b2:ff:34:21:12:7d:21:2d:1d:5d:bf:d1:e0:6a:
45:45:0f:b8:45:4c:1b:30:12:22:cb:b1:d5:41:f4:
3f:95:a2:5a:bf:db:1d:43:f3:39:4a:78:a2:da:7d:
19:74:f6:3e:e6:f2:06:6c:3c:50:1f:bf:ac:2f:4f:
11:18:65:26:fd:29:e4:96:5c:2a:34:5c:ed:2e:98:
5b:58:51:af:48:db:7b:96:6e:44:4d:52:49:1b:3f:
46:34:e2:38:b3:ca:d0:f3:25:64:7a:b6:09:63:66:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C4:E3:B1:C7:0E:94:67:C4:6B:2A:7C:3D:79:2F:75:88:BF:F7:CA
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/_cTjsccOlGfEayp8PXkvdYi_98o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.115.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:68:ed:ce:f2:4c:af:bd:66:2d:a0:68:91:47:1c:fa:c2:61:
1a:51:81:89:68:1c:49:6f:e7:ac:90:3a:5a:7e:2e:b6:66:c1:
c3:22:f2:05:96:d3:e5:09:b8:e2:b6:cd:56:d9:ea:46:9c:74:
94:6a:5d:53:f7:e3:b0:af:4a:0e:7e:3a:74:83:b7:f2:b3:d1:
7a:96:da:3c:23:13:3d:28:7e:89:53:02:fc:06:aa:a5:d1:29:
07:0d:66:ec:c4:7c:a5:4f:7b:66:d9:de:16:94:9e:4e:9f:80:
9f:cd:a6:10:44:39:df:a8:55:9d:16:79:92:9e:77:e7:a8:ff:
4b:46:c1:e8:6f:e9:4d:59:c2:04:4e:07:8e:11:77:ff:43:e7:
39:15:bb:67:9b:90:b1:b0:8a:f0:2d:52:38:7f:65:cd:8b:34:
d4:70:32:d7:61:a0:81:17:c9:91:e2:35:37:cb:66:25:1f:d4:
d0:af:45:66:27:67:06:b9:d5:cd:ae:83:08:22:e6:c4:3d:de:
fb:96:f4:4c:37:cf:c3:3d:8a:df:04:46:28:4a:a6:ec:94:b7:
5a:a5:1b:4a:c1:5c:4d:a6:d6:f9:a4:ca:b5:42:6c:d3:05:c3:
e7:fc:09:4c:8d:46:f1:47:52:a9:be:d2:1d:e8:03:62:fd:bd:
26:95:cb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:18:59 2025 by rpki-client