Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa
File: eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa (raw, json)
Hash identifier: NL/nj7PiRruzzNoJXPrVqMifeH+fC4R4vqg0qPtnqLg=
Subject key identifier: 79:5B:0F:47:F6:F9:CF:68:DA:D6:7B:E0:59:96:85:00:9B:31:CD:5F
Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Certificate serial: 019424B3B938D09E64165A5001DA3AF67B63
Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa
Signing time: Thu 02 Jan 2025 01:49:05 +0000
ROA not before: Thu 02 Jan 2025 01:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203400
IP address blocks: 185.72.88.0/24 maxlen: 24
185.72.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b9:38:d0:9e:64:16:5a:50:01:da:3a:f6:7b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=795b0f47f6f9cf68dad67be0599685009b31cd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ea:ae:d1:1d:c5:26:96:54:97:d5:e7:65:bf:
bb:3b:12:5a:91:bd:0c:99:cf:2f:85:7e:51:67:ea:
db:2e:a3:fa:f7:85:9f:5a:72:6d:75:03:2e:2b:29:
d4:69:1a:6f:f2:18:8c:c1:0a:ed:de:1e:19:0e:e5:
52:f5:e1:53:6a:08:97:d8:f7:08:48:2d:04:58:80:
58:90:96:9a:23:16:14:30:a9:02:5d:c6:5b:c1:51:
fb:af:bc:e8:3b:c4:b7:3e:bc:8f:2b:0f:2b:bf:8b:
1d:9c:c7:7f:59:fc:2e:28:3b:e2:dc:98:f0:22:47:
3b:1e:6d:5c:ff:6d:5d:10:b2:c5:d4:df:8b:33:b8:
af:45:38:64:c1:fb:95:2c:83:25:ff:42:6c:ce:9b:
79:2e:5a:f3:49:d8:d2:83:88:93:06:0f:bf:6d:70:
4d:86:de:d5:0a:ed:d0:cb:35:10:15:9f:00:2d:86:
e9:05:39:59:33:56:28:1b:f7:d1:0c:89:cd:2f:7a:
ba:76:6c:1a:27:54:2b:ed:82:28:27:a5:0c:4c:13:
75:36:e9:95:61:bd:9d:97:dc:e6:20:3a:fd:9c:5b:
ff:be:7e:3f:e3:83:69:46:88:14:e2:56:25:d9:53:
d1:37:5f:e3:fd:ad:3c:dd:24:44:23:1d:09:74:a7:
5f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5B:0F:47:F6:F9:CF:68:DA:D6:7B:E0:59:96:85:00:9B:31:CD:5F
X509v3 Authority Key Identifier:
keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.88.0/23
Signature Algorithm: sha256WithRSAEncryption
55:67:57:73:24:67:3b:57:d6:57:dc:bb:c8:47:d9:fa:e5:f0:
c0:e8:f6:ab:32:12:83:b9:e9:4d:b1:4c:c5:37:81:f7:e7:41:
fb:e6:2a:17:2c:ed:ad:49:48:21:28:49:63:13:33:7b:5c:c6:
d2:c0:44:2d:f4:26:cc:46:8f:0a:bb:7a:da:51:ed:a3:33:d0:
7b:9f:d5:2e:11:62:ee:cc:fe:d8:2b:4c:fc:bf:61:bf:db:93:
46:41:4f:d8:3d:e7:0a:d5:f1:6c:67:8f:28:61:50:cb:b1:6d:
7c:ee:09:65:88:1d:4d:f5:07:90:f6:86:63:4d:f6:d2:24:22:
90:ba:f7:ff:2b:62:05:78:13:2f:98:79:34:78:fa:84:05:f8:
8c:f6:e1:55:a2:db:5e:e8:07:ba:5b:de:14:8a:0b:44:f8:1e:
5c:b8:02:6b:15:92:dc:b4:8c:4a:cd:c7:31:48:0c:74:47:c2:
23:aa:e8:dd:5f:1c:1e:2e:8a:61:d7:2e:a8:40:38:e3:eb:64:
0d:af:51:51:56:1e:d4:b5:b0:d2:62:a5:c5:a9:af:b4:0d:ea:
02:9c:d2:94:e4:1d:fe:63:f2:26:e7:55:f2:a4:7e:67:70:d8:
a1:73:40:be:01:04:02:f9:7b:f3:73:d4:4c:00:2d:2b:d3:78:
4d:54:60:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:55:19 2025 by rpki-client