Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/bGR8Rd2Yo4DLDc3y_H7_bZHLHPc.roa
File: bGR8Rd2Yo4DLDc3y_H7_bZHLHPc.roa (raw, json)
Hash identifier: Ju7NNZc6R+CIRlWjUOfJIjX66C7zebGfVDhCnYk6i/M=
Subject key identifier: 6C:64:7C:45:DD:98:A3:80:CB:0D:CD:F2:FC:7E:FF:6D:91:CB:1C:F7
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 01953851899FEF55FF075EF58001B489AD36
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/bGR8Rd2Yo4DLDc3y_H7_bZHLHPc.roa
Signing time: Mon 24 Feb 2025 14:17:02 +0000
ROA not before: Mon 24 Feb 2025 14:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197502
IP address blocks: 213.192.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:51:89:9f:ef:55:ff:07:5e:f5:80:01:b4:89:ad:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Feb 24 14:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c647c45dd98a380cb0dcdf2fc7eff6d91cb1cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:7a:0f:c4:62:cd:64:7d:ec:0a:35:a9:42:
df:87:c5:2c:a5:94:5b:42:e7:7a:ac:96:b0:01:45:
20:e4:bf:3e:08:ac:07:c6:99:df:35:5e:81:27:51:
ac:7e:cc:74:f4:75:6e:f8:27:45:97:80:0c:62:b1:
6a:42:12:73:ab:d8:e2:98:7d:86:39:cc:67:d5:1b:
5c:28:50:02:3b:ff:a1:1f:18:88:00:5d:36:ec:e5:
36:f5:eb:98:66:0c:64:80:32:a0:31:50:a0:e5:4e:
b1:12:2f:1d:6f:1b:d5:c9:25:fb:9d:84:ba:80:a0:
74:79:fc:0f:99:0d:f7:3d:4b:02:2c:cf:59:20:93:
0b:13:82:ae:81:e1:6b:6a:5b:ea:07:5b:df:0a:49:
c6:9d:14:34:b4:57:88:5b:5f:b5:1e:6d:9f:b0:3d:
4f:ec:16:98:17:e9:c6:ff:b0:b6:06:15:72:66:90:
6d:19:56:fa:eb:8c:49:cc:fc:41:5e:07:e2:d0:ba:
0b:da:53:f4:f1:08:09:9a:d7:7a:c5:f5:4d:d3:58:
5b:9f:4b:32:3c:39:c0:04:b2:b4:dc:fc:bd:79:d3:
81:37:8b:3f:14:3a:41:ed:09:13:ab:17:4b:aa:cc:
22:3d:7a:7f:8d:38:77:83:0a:74:49:58:22:ee:f4:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:64:7C:45:DD:98:A3:80:CB:0D:CD:F2:FC:7E:FF:6D:91:CB:1C:F7
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/bGR8Rd2Yo4DLDc3y_H7_bZHLHPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.116.0/24
Signature Algorithm: sha256WithRSAEncryption
33:38:77:ae:88:6a:64:db:02:9e:ae:4d:3d:fe:2b:db:3f:a4:
e9:79:a6:44:06:06:25:4a:a4:c5:02:1a:da:fc:0e:fe:8d:02:
71:7a:9c:3c:11:ed:15:97:1b:47:b2:2e:2c:36:ea:53:ba:44:
e5:ca:5c:2f:e7:9e:cf:a5:9c:b1:2c:1f:cc:3c:95:ed:1e:20:
82:14:3e:df:ef:e1:b7:a1:4f:18:8a:1d:e7:5d:06:94:e5:90:
3d:49:25:58:c1:bd:0c:bc:e8:53:1c:06:07:f4:31:60:53:22:
8c:0a:99:e0:b0:d3:3d:df:8f:43:6f:22:8f:19:71:dd:97:98:
dd:cf:24:ad:2d:3c:a5:89:18:d3:19:89:4b:75:6e:d0:15:0e:
4c:04:0a:72:96:86:d8:50:1e:f9:2a:37:fa:7f:88:a5:82:0a:
7d:e0:bb:f2:39:db:f2:98:dd:ee:84:f4:11:3d:b4:d5:61:da:
a4:27:8e:c1:23:cd:f8:57:b9:58:31:ae:38:7a:d4:87:16:c8:
82:12:89:4f:9a:58:b0:65:e7:d6:b2:32:f5:59:83:34:24:91:
ea:59:00:3f:56:9f:a7:e1:f5:ea:e6:51:a3:be:a1:09:92:59:
23:dd:03:03:01:90:ca:93:48:f7:bb:1c:1e:41:90:11:bd:c7:
6e:66:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:47:02 2025 by rpki-client