Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/EEEX0e66KOWTKOERpFoaxtXp3uI.roa
File: EEEX0e66KOWTKOERpFoaxtXp3uI.roa (raw, json)
Hash identifier: JFPlKxMz0/Nj8vpjBsVBD96v5DpLlvYLrr+f6kqewt8=
Subject key identifier: 10:41:17:D1:EE:BA:28:E5:93:28:E1:11:A4:5A:1A:C6:D5:E9:DE:E2
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01942521E543890D916DFBCDE55983ED3BD9
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/EEEX0e66KOWTKOERpFoaxtXp3uI.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206271
IP address blocks: 195.93.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e5:43:89:0d:91:6d:fb:cd:e5:59:83:ed:3b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=104117d1eeba28e59328e111a45a1ac6d5e9dee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3d:75:d1:88:a6:32:4e:87:c0:a2:9b:e1:d0:
25:bb:00:fe:4e:5a:b4:fc:49:d2:33:a8:0a:69:d5:
e3:b7:8c:b3:69:f8:a3:10:c8:33:c4:18:89:3e:bf:
06:68:b3:84:09:b4:99:14:d7:05:63:16:39:20:4a:
17:57:88:8c:6e:46:72:97:e9:95:f8:7e:0d:20:1d:
c1:a5:c1:ab:69:e3:a6:1e:27:37:02:1d:50:4a:78:
11:4b:bb:31:6d:31:af:86:a3:f9:c4:f1:80:26:ef:
d8:dd:9d:83:a3:cc:c6:1f:cb:f5:0c:df:9b:58:f0:
9b:3d:a9:4a:ba:62:28:b0:13:ca:b0:c8:69:7b:38:
0f:32:91:1a:c3:2c:a8:dc:c0:4b:65:27:bd:79:f0:
56:7b:39:eb:b2:e9:2a:5f:72:5f:cf:65:aa:86:de:
96:ef:d1:27:37:ef:ef:4a:22:a5:dd:8f:a7:b5:b2:
d8:ef:30:64:45:91:3c:da:c4:c8:9b:a2:cb:ad:6e:
60:fb:1a:2b:63:6d:93:89:50:da:15:c7:52:2b:bb:
31:58:51:7c:64:ab:5e:b7:d3:c3:d4:88:43:30:9c:
d1:5b:cc:e4:f3:6c:5b:ae:75:eb:6a:86:c3:5c:d6:
da:82:60:8c:3a:d2:a4:e8:47:09:b7:24:67:8b:66:
2f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:41:17:D1:EE:BA:28:E5:93:28:E1:11:A4:5A:1A:C6:D5:E9:DE:E2
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/EEEX0e66KOWTKOERpFoaxtXp3uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.226.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e5:0b:36:a0:71:a4:29:cd:c3:36:2e:7d:57:0e:3d:3d:75:
a1:c2:56:ac:21:72:47:54:9a:1c:cb:b7:77:59:bb:01:08:05:
c2:eb:f5:1e:db:a5:cf:71:79:8b:dd:aa:92:f4:36:e4:01:8c:
20:d9:03:65:79:a0:48:7b:47:b7:e8:b6:b1:2f:69:52:81:a0:
ac:a3:fe:be:29:76:16:f4:e1:dd:bd:fb:2b:26:40:1e:59:5e:
c4:cd:80:21:36:6a:e1:17:fa:4b:fe:79:ec:a5:47:6d:30:5e:
f4:eb:17:75:de:5a:b0:e6:5f:97:d9:6a:86:ec:07:7e:73:f8:
f5:1f:1e:ff:02:1b:79:b0:97:e1:61:3f:b7:f1:88:08:ae:e1:
96:c7:e2:80:bc:7e:c2:02:0e:e5:2c:8d:bc:07:2e:df:b8:51:
8f:1a:ee:7d:6e:ec:8f:44:31:7a:bd:a5:b8:94:b4:14:a7:46:
6c:67:47:e4:a6:c4:a9:01:9b:ff:e6:de:ea:d9:46:64:2e:66:
dd:1c:cf:f2:9e:bb:8e:6a:45:65:20:12:3e:0c:17:2b:f0:4b:
56:c7:b0:fd:7a:e3:32:ad:43:12:66:39:76:10:9c:65:e3:97:
16:23:a1:5c:7b:93:82:6a:78:70:c3:6b:07:f2:49:24:26:1c:
4a:53:f4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:17 2025 by rpki-client