Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/ebklZqmx0-dRJX-3stcdCCjPSZQ.roa
File: ebklZqmx0-dRJX-3stcdCCjPSZQ.roa (raw, json)
Hash identifier: oxCqtL4IdqqluHjcszErTou8uGJlC2MCnMVsPPzgZCM=
Subject key identifier: 79:B9:25:66:A9:B1:D3:E7:51:25:7F:B7:B2:D7:1D:08:28:CF:49:94
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 019425FDE2B21151944326C9B3968A1942C5
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/ebklZqmx0-dRJX-3stcdCCjPSZQ.roa
Signing time: Thu 02 Jan 2025 07:49:43 +0000
ROA not before: Thu 02 Jan 2025 07:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198425
IP address blocks: 194.31.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e2:b2:11:51:94:43:26:c9:b3:96:8a:19:42:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Jan 2 07:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79b92566a9b1d3e751257fb7b2d71d0828cf4994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:b9:03:0d:97:64:ec:54:f8:f0:db:dc:40:
28:59:65:39:e1:0b:d8:7b:0c:92:ce:ba:55:cf:c8:
2d:28:e9:47:30:b1:71:37:a8:1d:54:15:9d:7d:80:
1a:cc:11:db:53:0d:a9:6a:c6:01:b9:92:17:a6:1a:
2f:d5:00:94:61:df:ab:67:bc:fa:c2:db:b3:98:fd:
73:5b:40:4a:ac:07:47:71:28:3f:eb:43:de:ca:5f:
d7:22:95:17:a9:c8:39:b9:31:60:56:87:3b:65:96:
7c:8e:5e:b5:0b:10:6b:c1:b4:46:81:1d:e2:fc:95:
ec:cd:44:6e:fa:d1:f1:50:19:48:39:cd:27:c5:d5:
15:11:e4:52:10:57:31:47:3f:21:4f:c9:bb:57:72:
e4:d9:4f:0f:5f:c7:36:ad:ac:19:a6:14:f2:ba:d6:
0f:82:a1:06:c8:54:96:c9:a6:db:8c:24:7a:b0:c6:
0a:07:ce:2c:2e:50:3b:da:92:2e:76:8a:42:31:2b:
d1:19:0f:bd:c4:3b:9c:29:b2:2d:46:16:aa:45:25:
37:4e:eb:8f:e9:1d:9c:4e:0d:f9:70:58:78:5e:37:
6f:1d:32:e5:8d:9f:71:e6:8f:ae:d9:49:ba:50:d2:
2b:e7:7a:b5:84:af:ca:89:df:d7:2e:a3:db:14:fe:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B9:25:66:A9:B1:D3:E7:51:25:7F:B7:B2:D7:1D:08:28:CF:49:94
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/ebklZqmx0-dRJX-3stcdCCjPSZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.58.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ac:a4:22:5a:ec:3d:2c:63:73:aa:e7:d7:3d:5b:67:98:5c:
c7:12:e8:ba:ac:c6:b1:2f:05:13:73:dc:c3:b3:59:20:16:d0:
48:3b:94:75:2a:da:d0:63:80:0f:d8:0c:7f:d2:bc:77:d0:e4:
1a:c7:11:4b:9d:67:7f:8b:92:10:a8:60:8e:ee:14:97:d4:00:
98:6e:5d:4b:06:0d:e8:6f:84:6b:58:a9:b4:de:ab:86:a7:d2:
fd:6b:41:94:da:c8:89:a7:06:b4:5c:2f:c9:94:4d:69:92:c0:
4a:0d:35:df:88:2d:f8:8e:72:a7:48:50:72:2a:ac:10:e2:dd:
e9:dd:89:38:24:b3:ee:92:96:71:bd:18:ca:8d:a5:23:62:f2:
3b:67:ce:04:94:98:98:b8:ad:5b:dc:36:36:0d:ce:d7:3c:93:
50:3e:9d:49:cd:5f:68:73:61:ca:96:d6:b2:57:4e:59:cc:1d:
71:ad:db:c5:f9:f7:99:ad:ee:eb:86:21:c4:10:ac:76:a8:f8:
16:c5:a3:7c:0c:e7:06:c1:1b:6e:e4:96:3c:c0:a5:4d:b8:20:
8c:e6:c1:4b:0b:28:70:cd:58:2f:a7:d1:c8:b7:6f:93:8a:92:
0b:80:14:be:2b:4b:fa:d2:46:b7:b0:b1:66:1b:9e:80:53:15:
ce:1c:91:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:42 2025 by rpki-client