Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/0eFE803oL-x-2UtW8hW4h_oGSOQ.roa
File: 0eFE803oL-x-2UtW8hW4h_oGSOQ.roa (raw, json)
Hash identifier: 1/pEIXtNgxj6Ggb1H5PZs612B1gxk22zRzlXx7oVu5s=
Subject key identifier: D1:E1:44:F3:4D:E8:2F:EC:7E:D9:4B:56:F2:15:B8:87:FA:06:48:E4
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 0194258EF536B2BA5752FC1B5B7FDA8B4293
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/0eFE803oL-x-2UtW8hW4h_oGSOQ.roa
Signing time: Thu 02 Jan 2025 05:48:33 +0000
ROA not before: Thu 02 Jan 2025 05:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34762
IP address blocks: 86.39.128.0/17 maxlen: 24
185.115.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f5:36:b2:ba:57:52:fc:1b:5b:7f:da:8b:42:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Jan 2 05:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1e144f34de82fec7ed94b56f215b887fa0648e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:27:40:49:fe:f4:b3:ef:89:e2:b1:59:f2:
b7:04:f9:ea:85:36:f8:c5:8e:96:46:85:53:1c:fa:
28:a0:e3:be:69:3c:eb:86:33:21:7a:45:39:7a:8f:
58:01:d9:4a:02:5d:1a:1f:f9:a8:a0:6e:85:40:e8:
1c:51:69:ab:69:f5:0a:cb:82:a6:da:53:92:3d:2e:
8c:1e:3d:c5:e8:aa:af:d3:a5:65:64:13:dc:57:8e:
d7:bd:7e:3d:f5:66:df:a6:05:d1:c8:72:fe:1b:92:
e2:6f:7c:ab:11:56:53:eb:c5:27:b8:75:b3:1d:a8:
b1:e8:7c:eb:a6:ca:8e:cd:4c:a6:8f:b2:78:4d:84:
59:c6:70:8d:f6:37:d5:d7:13:27:e1:76:69:fb:c4:
44:cc:a5:3d:96:43:d0:d1:5b:8e:75:4d:fd:71:12:
9c:79:ba:6d:75:71:d3:b7:1e:75:61:40:6f:0b:c1:
89:38:af:63:e7:db:61:2e:28:8a:66:4d:b4:79:66:
2e:ce:95:e8:88:a2:d2:9a:8b:9f:03:35:43:49:4b:
d8:36:d9:3e:5b:16:99:a6:21:03:b5:31:7f:3e:dc:
5c:75:b7:3b:d6:38:aa:c3:c9:ee:80:4d:69:49:9e:
e0:9b:1d:cb:89:68:8a:4d:2e:68:56:06:5b:9c:c0:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E1:44:F3:4D:E8:2F:EC:7E:D9:4B:56:F2:15:B8:87:FA:06:48:E4
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/0eFE803oL-x-2UtW8hW4h_oGSOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.39.128.0/17
185.115.216.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:89:31:42:01:76:27:96:3d:9c:8f:b5:d8:33:0d:26:88:c5:
61:c3:f1:25:f0:51:18:a0:39:39:77:79:74:a4:d4:48:6e:de:
50:c9:45:27:f3:56:13:fa:88:af:71:18:69:57:7b:84:9f:95:
d8:a3:d0:bf:55:bb:be:83:e1:df:b2:11:c8:6a:10:32:f3:ae:
73:8e:26:cf:40:29:56:fd:2f:da:f5:73:70:05:12:b9:cb:c7:
1e:0a:99:dd:e7:46:f8:80:9f:54:09:0d:52:ee:78:80:62:4d:
60:54:60:2b:b5:bb:16:87:6b:55:c2:35:4f:ce:42:51:73:69:
34:ea:30:07:27:54:32:06:a9:40:b8:ed:86:32:73:ef:c9:fe:
ae:7e:17:f8:88:05:9d:46:62:48:95:79:77:93:01:56:5c:a3:
42:74:04:23:60:1e:8a:c1:2e:57:b4:7c:48:9c:40:29:ea:5a:
41:ab:1e:1b:eb:3a:13:c5:ef:ef:12:2e:e9:2a:f6:64:6f:a3:
15:a2:84:16:95:db:88:96:d0:7a:a4:21:f9:0b:44:5e:1f:da:
42:36:cd:2b:c8:ce:64:00:4f:1c:d3:30:c1:b2:63:e3:21:d0:
d7:a9:94:43:e4:8d:bd:89:9d:85:b2:d9:53:03:57:b7:40:53:
bf:0c:0e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:54:55 2025 by rpki-client