Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa
File: eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa (raw, json)
Hash identifier: 0U4VHTAuepwYPC2Z/6g1Ww1nF+bkWcW/tHt+TFQC1MQ=
Subject key identifier: 78:EB:47:15:9B:23:49:41:00:C2:B6:C7:16:40:84:D0:F3:69:49:37
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 0194258F52ED6E4223D6FE7505BEDACB7213
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa
Signing time: Thu 02 Jan 2025 05:48:57 +0000
ROA not before: Thu 02 Jan 2025 05:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207811
IP address blocks: 194.31.93.0/24 maxlen: 24
194.31.193.0/24 maxlen: 24
194.31.199.0/24 maxlen: 24
194.31.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:52:ed:6e:42:23:d6:fe:75:05:be:da:cb:72:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Jan 2 05:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78eb47159b23494100c2b6c7164084d0f3694937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:11:a0:02:81:1a:b9:26:24:5c:7c:14:f6:
77:0d:fb:82:28:e3:46:3b:33:b2:bb:f1:fb:a8:3c:
68:a8:88:4d:15:e8:e1:96:4d:e0:b4:7b:15:14:79:
19:ac:46:96:fe:39:7b:24:b2:0a:41:0f:e9:f3:be:
a8:20:c2:cd:10:b8:45:b1:92:b8:28:40:e2:cd:3e:
02:9c:6d:db:bf:81:f2:32:f5:43:2f:8c:ef:7e:89:
95:b9:16:f8:41:84:ff:a8:6a:85:35:60:ae:d6:5a:
52:fc:8d:77:68:e8:2a:69:99:fa:11:23:54:5b:8c:
25:61:10:4b:ea:3f:dc:69:18:71:b5:d8:7c:8e:18:
25:be:57:98:dd:bc:81:56:7f:db:b3:26:61:0c:e4:
62:87:e1:2a:06:b7:73:41:8b:70:2b:bf:6e:2c:23:
ab:9a:7d:d7:d7:c8:98:2c:45:f5:02:c9:bb:8e:5a:
0f:22:90:5c:74:1a:ca:bb:71:c6:d5:81:56:4a:f5:
2b:07:b9:f9:d4:bd:87:12:b3:be:97:ef:7c:fb:6d:
17:45:76:fd:7b:4c:07:c3:4b:64:0f:27:e0:bc:f7:
9a:2a:5c:3c:fc:b0:88:be:73:6e:95:94:18:bf:5a:
4b:2e:32:28:bb:5a:aa:92:ba:2b:08:19:90:3f:fe:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EB:47:15:9B:23:49:41:00:C2:B6:C7:16:40:84:D0:F3:69:49:37
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/eOtHFZsjSUEAwrbHFkCE0PNpSTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.93.0/24
194.31.193.0/24
194.31.199.0/24
194.31.220.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:2d:52:66:98:fd:3a:93:f5:25:e0:1c:10:40:05:2b:63:ca:
36:07:9d:1e:9b:57:54:b7:f9:5d:a8:96:52:bc:fc:65:19:7e:
e1:cc:77:55:8c:7f:f8:fe:08:3e:31:28:15:41:3a:7c:b1:d4:
db:ff:79:8b:e0:84:e1:97:2e:e6:0e:53:94:2e:b2:be:45:88:
5b:ab:76:23:f3:6a:4d:72:21:d6:77:47:9d:79:60:a8:b7:fa:
e7:90:44:ee:de:3a:0c:0c:fa:f7:4b:27:1e:3f:eb:cf:52:48:
fd:b8:38:6f:81:9b:c7:21:bf:f4:e8:97:1b:3a:d3:ba:cc:f2:
cd:5c:b0:69:10:e0:78:8c:a6:7c:7a:90:96:16:21:2a:8a:b2:
1f:75:d2:e0:c9:ef:94:7a:ce:46:00:55:c3:b8:c4:79:de:6d:
f1:10:b5:f8:bc:80:48:f9:f4:9f:19:be:40:09:bf:3b:c9:65:
48:82:24:aa:27:35:9e:70:71:29:cf:69:bf:b7:f9:b8:85:8a:
76:55:54:e8:69:5d:a2:64:62:c9:0f:2e:81:1d:e9:66:07:f1:
aa:d0:d3:06:38:1d:59:03:05:6a:51:2d:4b:9a:de:20:f2:98:
73:9d:6d:34:8c:ec:22:94:8f:ee:ec:f2:d5:3b:f7:f9:7d:6d:
84:1b:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:18 2025 by rpki-client