Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ecy-vVs7nD4VH0tFij9A1MLeNec.roa
File: ecy-vVs7nD4VH0tFij9A1MLeNec.roa (raw, json)
Hash identifier: jvqx6cFKQ3F/77wCVldtfEqXBdlyz3EG75oDHhz3vM4=
Subject key identifier: 79:CC:BE:BD:5B:3B:9C:3E:15:1F:4B:45:8A:3F:40:D4:C2:DE:35:E7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194ACDA4FBF9E64F8E648B4AC306D427803
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ecy-vVs7nD4VH0tFij9A1MLeNec.roa
Signing time: Tue 28 Jan 2025 12:19:35 +0000
ROA not before: Tue 28 Jan 2025 12:19:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 194.87.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:da:4f:bf:9e:64:f8:e6:48:b4:ac:30:6d:42:78:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 28 12:19:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79ccbebd5b3b9c3e151f4b458a3f40d4c2de35e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:fb:63:b0:1d:b8:ae:00:de:94:37:ad:39:
75:f9:f9:b2:76:7c:82:0a:1b:07:f0:53:55:76:c3:
b0:88:5a:d9:06:b4:6e:f8:60:98:f4:a9:bf:2f:a4:
e4:c4:9e:a1:5c:9c:e6:bb:50:e1:46:4c:d4:8c:76:
ba:dc:57:d7:4f:5d:9e:20:9c:bc:65:e6:be:68:67:
0b:ee:fd:c6:22:82:02:bc:c2:d4:b3:bd:6a:09:a3:
53:45:43:ca:86:25:8c:07:16:67:98:73:c7:61:0e:
62:9e:9a:ca:d3:f8:e4:1d:fe:bd:58:6f:b9:d5:40:
cf:fe:d6:82:69:90:d3:04:aa:f3:30:32:bd:1a:b8:
7a:22:73:ed:42:08:8a:77:2f:cf:96:d2:a7:8f:b3:
b9:3e:71:9c:f7:63:30:d5:b2:2d:69:f2:e2:e7:32:
02:8d:38:36:06:48:ab:8c:2d:7b:10:2f:1f:69:69:
58:d5:d0:05:85:b6:4c:b6:ae:70:95:dc:0e:57:a6:
42:10:f6:c2:e0:b4:56:79:86:a3:ec:2b:e1:9a:b4:
5b:9e:99:35:a2:d7:b4:01:05:e0:fa:f0:af:ec:6b:
b6:10:0e:21:27:ee:3f:2b:a4:1b:25:0e:45:bf:91:
31:b8:8c:f0:d4:7d:70:c6:08:57:ea:b3:56:1e:d8:
ac:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CC:BE:BD:5B:3B:9C:3E:15:1F:4B:45:8A:3F:40:D4:C2:DE:35:E7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ecy-vVs7nD4VH0tFij9A1MLeNec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.126.0/24
Signature Algorithm: sha256WithRSAEncryption
66:3b:16:35:64:06:7c:e4:de:25:61:c5:41:e1:a5:4d:d1:ea:
31:32:58:8f:5b:90:a0:6e:2e:9e:8b:ff:d8:c6:fa:e9:a1:5e:
c7:50:4e:84:d0:85:be:bf:b9:6b:5a:4c:6d:39:87:de:2d:c7:
0c:0a:60:15:71:c5:8f:c1:15:82:93:fb:d3:13:1b:22:01:95:
40:da:41:99:c9:aa:9e:25:07:1f:8a:fb:d2:33:1a:e1:0f:e8:
80:e0:31:0a:0a:3d:12:36:ec:38:1b:98:a1:41:b8:c0:10:82:
5d:80:bf:16:5c:23:6d:fa:6b:16:49:f0:e2:15:2d:05:7d:af:
8d:67:a8:a2:77:48:44:19:48:32:78:18:b9:b3:46:46:6c:d2:
cc:37:95:22:be:14:a2:4a:ce:43:aa:59:f3:79:f8:18:b3:72:
45:00:5f:1e:d2:2d:13:93:44:19:2a:47:98:b9:9d:3d:f5:b4:
3f:0c:fb:4c:fd:85:6d:e7:4a:de:31:5c:d6:f9:75:12:dc:5e:
29:d5:3d:df:57:7c:3b:13:7e:30:57:f6:3c:77:c9:7f:06:11:
12:5e:d6:44:db:70:68:e8:5c:98:b8:7b:ac:70:96:43:cf:f1:
a1:39:d0:ea:bb:c4:2e:22:c0:f0:88:3b:55:e2:33:4b:84:5d:
e9:b3:ca:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:36 2025 by rpki-client