Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/7uuYIODPb_AxpEbSkXG4ikwEz-8.roa
File: 7uuYIODPb_AxpEbSkXG4ikwEz-8.roa (raw, json)
Hash identifier: H14+KgaSvxKeyLjcS++jAl+BQPd40Sm8S2VRvJlA/xs=
Subject key identifier: EE:EB:98:20:E0:CF:6F:F0:31:A4:46:D2:91:71:B8:8A:4C:04:CF:EF
Certificate issuer: /CN=562e8e050d384502eb797f5e944931a66fdd555a
Certificate serial: 019420D6245B241753565ACD04BC7ECBB341
Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/7uuYIODPb_AxpEbSkXG4ikwEz-8.roa
Signing time: Wed 01 Jan 2025 07:48:12 +0000
ROA not before: Wed 01 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15626
IP address blocks: 91.199.45.0/24 maxlen: 24
91.235.128.0/24 maxlen: 24
185.237.204.0/23 maxlen: 23
195.54.163.0/24 maxlen: 24
2a06:c6c0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:24:5b:24:17:53:56:5a:cd:04:bc:7e:cb:b3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a
Validity
Not Before: Jan 1 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eeeb9820e0cf6ff031a446d29171b88a4c04cfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ef:5f:bd:4b:de:dc:eb:f3:1c:0c:0d:69:19:
05:86:7e:28:22:ce:2f:b2:f8:0a:48:f6:8d:ce:27:
df:7a:a3:86:8e:d5:b3:03:95:f8:ea:d5:bd:76:a1:
c0:e0:d6:da:e8:e1:6c:8a:50:8a:6c:a7:bb:8f:cd:
c0:81:61:08:04:f8:81:a2:90:38:bc:f0:e3:d5:31:
27:d5:6f:54:13:ee:9e:28:d0:81:61:50:b7:c1:9f:
61:c6:c7:06:33:b4:a9:c7:e8:76:a5:22:cb:97:bc:
72:17:fe:f9:1b:fc:03:ac:4d:7e:0e:4c:c3:8c:3e:
10:5f:99:36:ec:6a:e0:52:58:3a:94:d1:e8:92:00:
f6:f1:8d:59:a2:c8:c8:e5:e2:d7:8e:17:f5:29:78:
05:3c:c6:75:ce:54:2b:ee:b4:c0:bc:01:e0:b7:3a:
d3:ef:c9:6e:9c:79:f7:27:e3:f5:20:7c:81:95:d6:
c4:27:c3:b3:7a:ec:1f:91:27:a4:7c:55:17:f1:e2:
aa:26:9b:3b:05:7d:2d:e5:e1:55:20:43:9b:3c:49:
0d:ae:36:72:c9:cf:42:c2:e1:8f:f6:f5:05:fe:c2:
e6:2e:b6:fe:0e:d0:fc:14:b5:20:f2:16:f1:ca:1e:
ce:16:47:08:9d:c1:39:9d:da:e1:43:f1:39:49:d6:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EB:98:20:E0:CF:6F:F0:31:A4:46:D2:91:71:B8:8A:4C:04:CF:EF
X509v3 Authority Key Identifier:
keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/7uuYIODPb_AxpEbSkXG4ikwEz-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.45.0/24
91.235.128.0/24
185.237.204.0/23
195.54.163.0/24
IPv6:
2a06:c6c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
2e:4d:44:d2:95:6f:90:01:65:5d:e6:79:ba:83:58:61:b2:3e:
91:1f:46:8d:32:fa:41:48:a9:a4:bd:bd:90:e3:e6:5f:05:8d:
2e:0a:6e:34:cb:6e:97:27:d4:bf:5b:64:43:f5:c6:4a:7a:1d:
fb:f3:60:b4:d2:0f:7b:51:d7:2b:ed:4d:79:24:cd:7f:df:b7:
c9:2c:03:25:ce:63:4f:9d:d6:38:9e:e0:68:49:ba:84:32:78:
be:cc:7c:ec:30:bc:78:f6:88:d9:ec:53:a4:98:52:d2:50:af:
48:3b:a8:69:77:02:2b:77:18:8a:a0:7c:10:f9:19:76:98:a7:
41:76:24:8a:9d:90:4b:91:99:ef:33:5b:63:ac:f1:73:38:73:
e4:8d:c1:ae:7d:0f:1e:10:a7:fc:ba:e9:00:35:b3:11:a4:53:
7e:2e:20:6f:75:45:d6:32:0d:5e:cf:50:7c:96:38:ae:de:ef:
f7:02:9f:74:c4:78:1a:1c:c9:95:f9:1a:ea:9d:46:e1:a7:2b:
c9:01:7d:d8:ce:d9:80:75:1b:c9:6a:df:0d:c8:11:aa:7e:57:
a2:bb:2a:46:9b:f1:eb:18:c5:e9:57:4e:f1:02:7a:4d:4b:3b:
90:6f:0f:30:14:26:16:73:35:f8:38:55:e6:a7:3b:04:80:82:
eb:fe:4d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:57:51 2025 by rpki-client