Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/EfOKnev-T8pVCGZyCfNBWA87JUw.roa
File: EfOKnev-T8pVCGZyCfNBWA87JUw.roa (raw, json)
Hash identifier: xzVosmm4AwZdGobFhonZsULFGio+a3e4aEz2bPkaVjc=
Subject key identifier: 11:F3:8A:9D:EB:FE:4F:CA:55:08:66:72:09:F3:41:58:0F:3B:25:4C
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 019428238BE6774C0D917534155C3A6CA8BA
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/EfOKnev-T8pVCGZyCfNBWA87JUw.roa
Signing time: Thu 02 Jan 2025 17:50:05 +0000
ROA not before: Thu 02 Jan 2025 17:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 188.209.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:8b:e6:77:4c:0d:91:75:34:15:5c:3a:6c:a8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 2 17:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11f38a9debfe4fca5508667209f341580f3b254c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:09:14:a9:5f:7d:f9:e3:d5:11:0c:0a:fb:0e:
62:79:56:64:48:50:bc:e3:89:fe:67:bc:80:2f:08:
14:30:fd:7e:2d:ff:c8:69:96:37:f9:f2:0b:f0:ea:
90:c0:82:be:4b:cc:05:77:4c:18:0f:20:40:af:4f:
2e:23:2c:63:6b:5c:71:de:92:19:9b:f0:ab:a9:5a:
f9:46:68:21:ab:fe:ca:89:57:48:3c:73:76:40:a3:
23:e1:82:6c:58:07:a5:24:d7:cc:1a:5c:7f:60:a4:
af:0c:db:2c:ad:60:25:d9:5d:ac:5b:78:42:ec:3e:
ed:e4:0e:58:fc:81:e2:72:91:a3:43:cd:bd:f3:99:
e8:d4:71:bc:71:66:c8:86:7f:49:59:41:aa:1a:22:
2a:65:d7:aa:6d:18:ea:45:77:d0:d4:a3:56:16:4d:
ac:b4:12:d2:ae:4e:09:d0:21:36:ee:72:c2:78:2f:
6e:a3:aa:aa:22:82:79:bd:40:17:14:12:6c:e6:b7:
c4:74:44:67:4c:78:a0:45:6c:0d:18:c7:19:08:ca:
f4:79:c7:b7:73:25:f7:57:34:b6:4f:e8:b4:48:9b:
fe:1c:8a:16:0e:9b:d1:54:a0:c6:b7:0d:a3:d3:cd:
1e:2c:a6:31:6f:f5:a1:c4:72:5b:6a:34:f6:3f:be:
a9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F3:8A:9D:EB:FE:4F:CA:55:08:66:72:09:F3:41:58:0F:3B:25:4C
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/EfOKnev-T8pVCGZyCfNBWA87JUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:3f:bc:f3:0b:18:ff:5e:18:58:d5:19:88:30:54:ed:72:af:
24:4e:da:22:32:7a:26:25:2d:1d:d5:80:26:f8:5d:53:f7:aa:
32:51:34:42:48:a4:89:d8:fb:22:43:66:1c:ca:5b:03:21:40:
22:a5:c4:1a:c0:b9:39:d1:cc:6e:d6:25:25:f9:bb:ba:25:df:
69:d1:28:d6:51:08:31:52:f0:1b:bd:9f:d1:8b:1e:d0:ad:3d:
b5:c9:de:0b:4a:a6:42:63:ae:e3:a0:40:2d:40:75:d7:55:52:
3b:81:7c:5a:d6:71:61:86:0c:ad:d9:e3:9c:de:e1:b5:b4:b3:
ef:7e:4e:37:cc:0a:b1:f7:99:4b:26:06:19:c5:05:87:e5:51:
22:bf:f5:8d:f7:89:6b:b3:43:98:ee:b9:68:b2:87:a7:c2:ad:
ed:05:89:25:ec:3e:57:b0:1a:3b:92:96:92:b3:2b:f2:80:c6:
00:d5:ea:32:1f:3a:7a:77:3e:7e:fb:af:a2:73:d6:69:5e:c0:
34:dc:2b:a8:c8:03:e4:4b:89:1a:d1:b8:b0:4a:13:6e:93:83:
6a:84:64:dd:56:5d:d9:34:5c:e9:cf:f3:e4:d6:d4:1a:51:8e:
c3:04:a0:05:de:25:4c:51:2b:e7:a1:ef:d4:2e:d3:4f:0c:60:
d5:d6:e8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:35:40 2025 by rpki-client