Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/euJQQHPXaEEafjtTEpsACoT0UO8.roa
File: euJQQHPXaEEafjtTEpsACoT0UO8.roa (raw, json)
Hash identifier: LMr9+ppvHgb0CfRsIuadMwP8K1TTGxo74gFD8Bmp2bs=
Subject key identifier: 7A:E2:50:40:73:D7:68:41:1A:7E:3B:53:12:9B:00:0A:84:F4:50:EF
Certificate issuer: /CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Certificate serial: 019424B3191E63A480F9280D9D692E344813
Authority key identifier: 94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/euJQQHPXaEEafjtTEpsACoT0UO8.roa
Signing time: Thu 02 Jan 2025 01:48:24 +0000
ROA not before: Thu 02 Jan 2025 01:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 86.111.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:19:1e:63:a4:80:f9:28:0d:9d:69:2e:34:48:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949832f025cbefa1ea1bca0c390b63c176948cd2
Validity
Not Before: Jan 2 01:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ae2504073d768411a7e3b53129b000a84f450ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:aa:b4:2e:85:0e:83:84:2f:0d:11:85:fa:a3:
65:37:1b:11:12:34:9c:7f:c6:b8:e7:80:18:8d:2b:
0c:b9:b6:82:b9:0c:92:bc:b5:2e:79:fb:e7:b7:84:
5b:81:87:0f:51:cc:45:cd:93:00:9c:c3:62:38:11:
23:41:cd:3c:21:b0:63:89:2e:e4:0b:2c:3b:7b:9f:
0b:e3:f3:4e:e8:16:e0:d8:f1:b7:c3:f2:1e:93:35:
90:76:e4:b3:f3:12:4f:26:a4:0a:7f:02:aa:40:25:
40:6c:0a:65:34:09:c5:20:3d:95:86:ea:ae:f4:ae:
29:fa:44:ec:e2:0a:d1:67:06:72:39:22:6c:bd:70:
7d:f9:b3:31:52:51:84:b3:2c:b5:1b:42:b9:b7:0f:
8c:ee:2e:3e:ec:28:ec:9e:bc:65:93:10:86:28:07:
42:f1:b4:26:b1:5f:be:62:fd:61:6e:96:06:41:ba:
3e:b8:d3:ab:69:be:78:7a:3d:1a:81:8c:89:67:19:
98:7e:1d:0e:27:a1:b9:ff:c4:9c:09:b5:3f:79:df:
b4:66:63:cd:ca:8e:0d:d5:3c:f5:69:1f:c2:2a:d5:
35:4a:4f:fa:2d:91:3f:84:06:2b:f8:42:fa:84:b8:
e4:35:fe:26:3d:87:5b:91:6d:e2:8e:2e:61:99:48:
c3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E2:50:40:73:D7:68:41:1A:7E:3B:53:12:9B:00:0A:84:F4:50:EF
X509v3 Authority Key Identifier:
keyid:94:98:32:F0:25:CB:EF:A1:EA:1B:CA:0C:39:0B:63:C1:76:94:8C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJgy8CXL76HqG8oMOQtjwXaUjNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/euJQQHPXaEEafjtTEpsACoT0UO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5c056-03b1-46a9-b214-78fc3bc28ba1/1/lJgy8CXL76HqG8oMOQtjwXaUjNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.214.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b6:c1:8b:d7:35:3a:2a:b3:2f:6f:64:0a:cc:93:91:c9:1d:
c7:83:b5:8e:74:46:87:0f:c3:bf:f9:f0:5a:f6:9b:c6:32:ac:
b8:39:60:08:84:64:2c:53:fc:e2:01:be:70:2e:8c:29:93:ab:
57:6f:bf:4a:5c:35:ea:07:26:27:e3:a7:c7:64:1f:3f:84:44:
2e:eb:dd:0e:52:03:dc:d8:75:a8:01:13:8d:9a:a1:2a:4e:82:
79:8d:b1:51:02:d3:5d:d0:e7:50:ac:10:1c:8c:a1:ba:cc:4e:
75:30:bb:69:cd:46:3f:51:98:55:d9:c9:fd:aa:3d:b7:94:3c:
a3:56:8b:0d:c4:df:01:a2:60:ff:0a:f3:66:ac:04:88:11:8a:
73:c6:67:50:05:6f:ed:a7:ea:b2:c2:44:6a:05:15:e8:87:b4:
0b:9f:09:06:d7:86:69:77:19:5f:f9:d6:cf:43:87:5b:28:ca:
dc:55:e2:c9:94:c5:1c:73:02:2b:55:f6:42:d5:71:81:0f:47:
8e:f8:c7:3f:df:40:4c:e6:3d:71:af:47:17:b4:be:0f:41:75:
08:9d:13:66:7c:b9:b2:b7:e8:5b:8c:c6:5b:8e:82:7f:3e:9b:
fe:08:35:af:26:52:af:47:bc:ca:1a:a5:55:80:e3:43:d2:1c:
32:da:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:52:28 2025 by rpki-client