Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/EQAhdlSS1FIFJlau-mazb3tbQD8.roa
File: EQAhdlSS1FIFJlau-mazb3tbQD8.roa (raw, json)
Hash identifier: EYIWh35VYrIjFevk0wSjam09x/CTgAsspbJddnJMeDU=
Subject key identifier: 11:00:21:76:54:92:D4:52:05:26:56:AE:FA:66:B3:6F:7B:5B:40:3F
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 01941FFA9E4BA0BFAFA08707B1E1826241D6
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/EQAhdlSS1FIFJlau-mazb3tbQD8.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 264617
IP address blocks: 88.218.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9e:4b:a0:bf:af:a0:87:07:b1:e1:82:62:41:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=110021765492d452052656aefa66b36f7b5b403f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:2e:3c:f0:df:9d:e5:17:8c:6c:ad:e4:a0:
1c:a2:31:7b:a3:1b:cc:e7:71:cf:21:9a:1e:4c:49:
58:be:08:f9:ce:da:1b:a7:5b:77:ad:02:1c:cc:67:
6f:9e:bb:b5:85:0c:ab:52:57:bc:f5:70:39:28:9f:
e9:2a:06:b5:08:f7:d7:94:6b:0e:5f:08:0e:67:9d:
66:87:a6:f6:16:31:a3:21:c6:d5:3a:c9:7b:7b:6a:
f1:54:fc:8b:5b:5d:e5:14:89:f1:27:f6:67:e8:c1:
9a:e9:b6:a4:b7:7c:3f:79:99:34:7e:a5:78:75:e6:
fa:e2:64:0b:fa:6e:11:4b:b8:4c:77:7c:5b:65:69:
f2:cc:8b:db:6e:8a:c3:87:08:0c:76:16:91:4d:89:
84:63:f3:c4:d9:e9:9c:41:f5:f1:54:16:d6:55:e8:
cf:1e:06:47:b0:c1:7c:15:bd:f2:1b:f5:93:07:7f:
b6:91:36:34:69:aa:e2:5d:21:59:2c:b5:90:91:ed:
fd:7b:eb:1e:a9:6f:55:7d:7d:1c:6e:2f:a8:f6:75:
a0:d6:90:a4:fe:e0:58:b5:21:69:6c:9a:6c:ac:c2:
46:c4:c4:c5:81:38:1c:9a:3b:09:6a:5c:39:ab:84:
f4:3f:26:4e:55:9e:80:f0:b0:57:d4:bf:8e:23:e6:
08:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:00:21:76:54:92:D4:52:05:26:56:AE:FA:66:B3:6F:7B:5B:40:3F
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/EQAhdlSS1FIFJlau-mazb3tbQD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:e5:92:c8:59:2e:42:32:f8:0d:7f:cc:89:4e:47:ef:56:97:
61:21:eb:e8:89:4c:bc:5b:83:69:29:28:2e:36:d2:05:b2:b7:
8a:d3:41:36:87:6b:d1:2f:87:3b:0b:d3:e3:84:c2:84:48:f4:
ae:89:be:22:21:4f:3c:05:74:93:4d:25:5c:b3:6d:c8:9b:fa:
47:52:fd:d3:19:87:a8:75:61:c2:de:05:16:5d:8b:7c:8a:c2:
05:00:5d:67:ed:c3:09:cb:15:41:a3:bb:54:03:db:7e:0a:91:
a2:8e:b4:9c:93:98:0b:3f:2e:42:ac:ed:f0:9d:7f:5c:8e:13:
bf:26:2e:4e:87:21:80:7b:83:9a:9e:8d:1e:1c:2e:fd:82:b0:
26:8c:77:50:b1:50:b4:b3:a4:b6:1a:4a:a8:a2:97:61:c6:0c:
4e:b2:cb:e1:a9:b6:d5:9b:85:79:6c:2e:7b:d3:4d:9e:ab:b0:
1e:40:bd:7d:c0:4d:b0:1f:cb:45:46:25:cb:39:fc:43:dc:cf:
0b:15:c4:4c:5c:32:ac:ab:e8:a6:13:fa:13:42:bb:f7:cc:49:
ea:79:1e:d8:2d:73:73:60:5e:43:50:32:23:03:5e:96:cd:84:
4b:55:5a:a4:49:5b:07:0c:57:4e:05:95:0b:d9:ff:18:7a:f3:
00:2e:02:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:06:47 2025 by rpki-client