Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/ebOku8xEI298KvY-nyvK9tWb6FA.roa
File: ebOku8xEI298KvY-nyvK9tWb6FA.roa (raw, json)
Hash identifier: a5+jxAr4ask6hZY3MKueRH2rWcR2j9Q7nIukLKzVuw0=
Subject key identifier: 79:B3:A4:BB:CC:44:23:6F:7C:2A:F6:3E:9F:2B:CA:F6:D5:9B:E8:50
Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Certificate serial: 019421B207D9BACECA411E587B8487C41024
Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/ebOku8xEI298KvY-nyvK9tWb6FA.roa
Signing time: Wed 01 Jan 2025 11:48:22 +0000
ROA not before: Wed 01 Jan 2025 11:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13242
IP address blocks: 85.254.200.0/22 maxlen: 22
85.254.204.0/23 maxlen: 23
85.254.238.0/23 maxlen: 23
85.254.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:07:d9:ba:ce:ca:41:1e:58:7b:84:87:c4:10:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5
Validity
Not Before: Jan 1 11:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79b3a4bbcc44236f7c2af63e9f2bcaf6d59be850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4c:30:5f:4a:6d:d3:1c:6a:7c:9c:c9:4a:4b:
13:a1:ea:ae:09:13:ad:28:93:86:8f:68:3c:f9:3d:
b6:75:f6:bf:d8:e2:af:c4:3e:aa:36:9c:7d:4a:f8:
28:02:8b:1f:54:59:d1:67:03:6f:0b:29:b9:43:f1:
2b:3e:e5:c7:0f:cc:ab:d3:77:fb:ce:d4:88:28:b9:
23:07:5c:11:62:e5:1a:23:a3:3e:e5:57:c2:eb:0e:
88:ff:f5:bb:bc:c1:cc:17:5e:93:fc:0d:f8:9b:84:
b8:ce:ba:35:1f:f3:e5:a7:8d:0f:2c:79:8e:03:83:
2a:e6:ef:3f:bb:5c:48:50:54:9e:7c:64:56:52:de:
c3:4b:aa:ef:02:f6:f1:df:01:38:80:6a:7c:83:3d:
ec:89:a0:90:cf:8d:e4:87:d5:c6:ad:29:80:12:7f:
e8:99:4d:e4:31:fd:60:ac:fe:ac:6f:ff:19:8b:4b:
7f:23:4c:8b:fd:c4:f9:d4:12:7f:89:39:b3:93:50:
dd:b2:e3:e3:68:70:44:94:9e:5d:39:2f:0b:53:e1:
66:44:00:6c:3b:5e:82:52:12:2c:63:40:aa:4e:d3:
7a:89:9f:39:7b:a3:cf:b1:ec:e1:d6:6f:4c:26:78:
7e:d2:c7:52:26:44:06:88:af:63:d3:3a:48:89:5b:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B3:A4:BB:CC:44:23:6F:7C:2A:F6:3E:9F:2B:CA:F6:D5:9B:E8:50
X509v3 Authority Key Identifier:
keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/ebOku8xEI298KvY-nyvK9tWb6FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.200.0-85.254.205.255
85.254.238.0-85.254.247.255
Signature Algorithm: sha256WithRSAEncryption
c0:8f:3f:36:86:57:b3:6f:86:40:7a:ca:61:79:fd:0d:c7:09:
0b:59:f8:c9:e5:d8:39:8b:01:28:ee:7a:e3:83:f0:4a:72:9b:
0b:69:de:bc:42:89:dd:b2:07:4b:44:b3:04:fa:14:7d:48:85:
bb:bf:4a:d4:18:7b:f7:8d:4f:62:5a:ce:a8:1a:94:3b:9c:d7:
72:48:c8:58:74:4d:2d:56:19:ac:c6:e8:db:bd:f6:1d:84:98:
c4:4c:de:ed:fa:b5:d5:c8:f4:7f:c9:dd:d2:e4:a5:db:57:d8:
41:fe:e9:ad:a5:20:b9:9a:2f:de:69:35:9e:cb:b9:74:c5:60:
cc:27:3a:f1:3a:70:71:22:f6:e9:a1:14:10:81:6e:b1:b7:aa:
48:d1:a0:0c:8b:a6:13:41:03:b6:ed:94:11:a8:82:b4:f6:d0:
ed:36:75:38:9e:1e:19:22:8e:31:01:c3:98:ef:b3:fe:9b:dc:
e1:5c:84:85:56:f9:a8:38:e0:e7:50:a9:b1:c7:77:1a:a0:46:
6e:c9:2a:79:6b:f2:cd:95:f1:05:1d:8a:c4:30:e3:8a:97:4f:
83:b7:df:af:c8:d5:42:a2:7e:a9:1c:02:1d:7e:49:44:5e:c8:
fa:ab:bd:73:2a:d2:ba:e5:dc:5b:e7:46:63:e7:2e:81:90:99:
37:8e:59:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:46 2025 by rpki-client