Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/uEikoskflEheFSoDf7Z0aCjkYcM.roa
File: uEikoskflEheFSoDf7Z0aCjkYcM.roa (raw, json)
Hash identifier: fJFaqGu2+71oR2GY6Dw8sSD/ki5FxEHYLF0uL14GF74=
Subject key identifier: B8:48:A4:A2:C9:1F:94:48:5E:15:2A:03:7F:B6:74:68:28:E4:61:C3
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 0194274662DE97C99CCA1D7AE7E95A8897D4
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/uEikoskflEheFSoDf7Z0aCjkYcM.roa
Signing time: Thu 02 Jan 2025 13:48:31 +0000
ROA not before: Thu 02 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63018
IP address blocks: 195.137.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:62:de:97:c9:9c:ca:1d:7a:e7:e9:5a:88:97:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Jan 2 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b848a4a2c91f94485e152a037fb6746828e461c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:1c:7c:cd:85:10:d0:ac:b1:ca:29:cf:18:
1c:f5:6d:22:e5:5b:b0:cc:57:ce:39:bc:f6:a1:16:
99:5b:d6:6a:42:6a:05:ff:0a:ff:7e:86:32:6d:55:
54:80:cb:d4:72:1c:6f:f9:5f:e8:f6:9a:d4:20:e8:
30:c1:75:b1:6b:6d:e5:a3:70:59:d4:cc:cc:6a:bd:
07:87:67:94:89:df:a5:f7:dc:7b:fc:6d:56:5c:bb:
d4:2c:af:7f:a2:f9:bb:88:0c:3b:17:04:74:51:c9:
fc:b4:53:12:64:fa:05:bf:7d:18:53:58:8a:b8:db:
d5:df:25:35:67:77:ac:91:95:da:34:a6:2c:f7:b1:
57:75:be:a8:46:1d:c4:9b:0b:db:d9:74:e3:f0:f0:
3f:60:e4:88:c5:1a:16:73:c5:5f:c5:29:12:96:e7:
7e:c2:d7:b0:65:c0:fd:76:46:3d:ab:d7:ce:3f:48:
53:43:ef:60:be:c7:f5:2f:d9:6d:21:12:88:72:54:
09:77:75:2b:0e:14:b2:e7:60:c8:e2:43:55:10:fb:
a1:8e:eb:c6:d7:a6:a3:94:2e:0e:46:3a:92:3b:62:
02:e2:02:74:bc:d6:bd:58:6d:14:f1:ce:42:16:84:
2b:a0:57:6f:49:27:48:00:92:45:07:fc:5f:c0:70:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:48:A4:A2:C9:1F:94:48:5E:15:2A:03:7F:B6:74:68:28:E4:61:C3
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/uEikoskflEheFSoDf7Z0aCjkYcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.220.0/24
Signature Algorithm: sha256WithRSAEncryption
07:5c:af:d0:53:6e:09:13:21:7d:18:b9:f0:76:f6:f9:fe:84:
f4:e1:44:d5:98:b3:cf:69:b9:cb:4d:78:10:35:3b:76:e5:e1:
f1:34:19:7f:9e:35:9f:fa:68:35:04:b7:86:b7:05:1f:04:85:
65:f9:bf:00:2b:f7:fa:c3:2b:a7:a7:1f:03:f0:d6:cb:5f:aa:
d9:3f:92:75:7f:dc:65:50:b0:90:3e:a3:37:d5:b8:68:d3:04:
e4:5c:15:bb:1d:3c:3b:00:b5:55:92:de:36:3d:d8:f7:e2:64:
82:c1:3f:b7:25:c9:60:da:0a:e3:50:45:83:b8:21:b8:c6:f4:
f8:8a:db:b3:f2:63:d1:bd:89:dd:e3:5d:98:23:21:dd:ff:56:
c3:44:69:53:f9:2e:99:9a:f0:6d:5b:68:1f:21:cc:79:fd:57:
4b:36:2d:1c:07:8c:57:06:55:76:ee:d4:a0:d8:27:08:1b:f5:
4c:07:b2:8d:5f:a8:e5:cf:0c:bb:fc:e4:16:32:a7:7f:b4:45:
40:cd:5b:de:5a:9c:12:cf:4d:65:64:5f:9c:e2:a4:45:e9:4d:
64:bf:cc:f6:08:b9:8a:b1:72:3d:70:4b:cf:5f:ec:98:1e:63:
04:d7:1c:5e:ba:1f:07:19:1e:dd:95:e2:28:c2:8f:a3:1f:80:
02:9c:59:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRmLel8mcyh165+laiJfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNzk4ZjBmZTRmNGRmZmRmZWQyYzhlNjJkMjM1NDMwZjQ5
Mzc3Y2QwHhcNMjUwMTAyMTM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODQ4YTRhMmM5MWY5NDQ4NWUxNTJhMDM3ZmI2NzQ2ODI4ZTQ2MWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1YcfM2FENCsscopzxgc9W0i5Vuw
zFfOObz2oRaZW9ZqQmoF/wr/foYybVVUgMvUchxv+V/o9prUIOgwwXWxa23lo3BZ
1MzMar0Hh2eUid+l99x7/G1WXLvULK9/ovm7iAw7FwR0Ucn8tFMSZPoFv30YU1iK
uNvV3yU1Z3eskZXaNKYs97FXdb6oRh3Emwvb2XTj8PA/YOSIxRoWc8VfxSkSlud+
wtewZcD9dkY9q9fOP0hTQ+9gvsf1L9ltIRKIclQJd3UrDhSy52DI4kNVEPuhjuvG
16ajlC4ORjqSO2IC4gJ0vNa9WG0U8c5CFoQroFdvSSdIAJJFB/xfwHBzgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLhIpKLJH5RIXhUqA3+2dGgo5GHDMB8GA1UdIwQY
MBaAFGp5jw/k9N/9/tLI5i0jVDD0k3fNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMt
NzdjZjgxMDQxMDgzLzEvdUVpa29za2ZsRWhlRlNvRGY3WjBhQ2prWWNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMtNzdjZjgxMDQxMDgz
LzEvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4ncMA0G
CSqGSIb3DQEBCwUAA4IBAQAHXK/QU24JEyF9GLnwdvb5/oT04UTVmLPPabnLTXgQ
NTt25eHxNBl/njWf+mg1BLeGtwUfBIVl+b8AK/f6wyunpx8D8NbLX6rZP5J1f9xl
ULCQPqM31bho0wTkXBW7HTw7ALVVkt42Pdj34mSCwT+3Jclg2grjUEWDuCG4xvT4
ituz8mPRvYnd412YIyHd/1bDRGlT+S6ZmvBtW2gfIcx5/VdLNi0cB4xXBlV27tSg
2CcIG/VMB7KNX6jlzwy7/OQWMqd/tEVAzVveWpwSz01lZF+c4qRF6U1kv8z2CLmK
sXI9cEvPX+yYHmME1xxeuh8HGR7dleIowo+jH4ACnFmE
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:44 2025 by rpki-client