Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/eb3BGeh-4gG7gVQzfJYmE4N9iJk.roa
File: eb3BGeh-4gG7gVQzfJYmE4N9iJk.roa (raw, json)
Hash identifier: ytxhtvq1ezR1if4ipOboDxmwy8xQfyDHM3VrrrzA9pU=
Subject key identifier: 79:BD:C1:19:E8:7E:E2:01:BB:81:54:33:7C:96:26:13:83:7D:88:99
Certificate issuer: /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial: 01942522255DD76DDE41E6E343E3117F97CF
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/eb3BGeh-4gG7gVQzfJYmE4N9iJk.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203
IP address blocks: 193.19.196.0/24 maxlen: 24
193.19.197.0/24 maxlen: 24
194.125.246.0/24 maxlen: 24
194.125.247.0/24 maxlen: 24
195.22.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:25:5d:d7:6d:de:41:e6:e3:43:e3:11:7f:97:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79bdc119e87ee201bb8154337c962613837d8899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:e7:6e:b8:d5:10:82:ac:ca:d9:72:bf:3b:
4b:fa:63:7d:3f:32:7b:00:b4:14:78:f3:ce:aa:0c:
41:7d:1d:9c:5f:36:9c:50:57:ee:14:3c:dc:ee:b0:
99:02:02:72:03:28:8e:9f:50:bb:ed:ef:89:5b:99:
32:66:75:35:4f:75:e7:1b:1c:b9:dd:06:68:6f:a3:
e7:fe:20:c4:5f:e2:ca:bf:33:b8:3f:a5:cc:95:f6:
27:b1:b1:75:13:4b:eb:38:3f:1e:25:1d:8d:2e:19:
f5:82:7b:26:20:dd:7b:18:ce:0e:ad:af:bf:08:32:
b8:ae:37:26:2b:8f:f6:fb:17:ce:b3:29:a0:a3:ad:
70:95:a2:a7:18:26:2e:96:f4:ae:28:a2:ac:33:83:
07:d1:64:ca:a3:32:5f:9c:61:84:32:b9:72:81:a1:
0c:f5:9a:84:8a:0e:4c:ba:1d:70:0e:af:5e:50:a4:
c9:66:c1:1c:62:a9:48:a7:05:44:91:80:e0:a2:df:
f5:0e:28:ac:04:24:3a:1b:a7:ad:16:7f:67:bb:8b:
b3:40:7a:21:b5:95:95:7f:f1:4c:cc:ec:e4:2c:21:
ce:9c:02:54:46:66:84:f4:fa:a0:d7:ec:a0:8d:c3:
af:1f:cb:f0:00:25:d4:bd:ad:6b:8c:60:63:ea:23:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BD:C1:19:E8:7E:E2:01:BB:81:54:33:7C:96:26:13:83:7D:88:99
X509v3 Authority Key Identifier:
keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/eb3BGeh-4gG7gVQzfJYmE4N9iJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.196.0/23
194.125.246.0/23
195.22.158.0/24
Signature Algorithm: sha256WithRSAEncryption
53:3e:84:09:ac:78:f3:28:d6:da:ea:85:08:2e:12:59:b7:74:
53:e3:4b:58:0a:e2:5a:40:a2:f7:b5:c9:98:6d:09:8a:d1:ce:
53:91:f1:5d:3e:cc:82:d1:7d:dc:9b:1f:d2:d9:e3:b4:93:de:
0c:19:f3:09:31:92:53:bf:b3:5f:65:7b:bb:1e:ed:3a:07:29:
49:fc:f3:65:1a:e5:df:46:99:50:19:75:ae:ff:06:dd:2c:55:
d2:36:e2:db:66:0a:db:39:fd:7e:07:98:ab:7f:39:61:ae:cd:
70:b6:a5:24:68:c0:30:55:e2:61:5e:e3:f8:b7:aa:76:4f:b0:
bc:54:83:e3:b3:7a:9d:72:83:98:aa:ed:d1:ca:cd:45:3f:c1:
51:bf:5c:78:a4:ae:eb:bc:09:bb:fd:8b:71:1c:7d:87:a3:d1:
d3:b6:11:0b:12:d2:54:76:eb:d6:a1:a9:44:63:79:0a:2d:c3:
c5:64:cb:1c:7c:5b:9d:32:38:c7:b7:9c:d8:63:74:bf:de:43:
d3:73:c2:4e:65:c0:53:42:b3:6e:01:d3:ac:33:ec:82:61:ce:
98:57:27:8a:f0:8c:7a:6f:ee:6a:d9:34:d5:e8:ca:2c:15:e3:
82:99:b4:97:c5:9f:d8:3f:fc:68:c5:99:fa:39:32:7d:e4:3f:
84:19:ec:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:55 2025 by rpki-client