Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/0EefvGTe-CgGPi3LClLG8zkw2Bs.roa
File: 0EefvGTe-CgGPi3LClLG8zkw2Bs.roa (raw, json)
Hash identifier: pQ8xUeInwth0hYwUoerBSXG2avCvXMU1nbOP1RalcsE=
Subject key identifier: D0:47:9F:BC:64:DE:F8:28:06:3E:2D:CB:0A:52:C6:F3:39:30:D8:1B
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0194266B7F6D46A0E5D352DBFA8BE6C29CB7
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/0EefvGTe-CgGPi3LClLG8zkw2Bs.roa
Signing time: Thu 02 Jan 2025 09:49:26 +0000
ROA not before: Thu 02 Jan 2025 09:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48870
IP address blocks: 62.122.16.0/21 maxlen: 21
194.213.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:7f:6d:46:a0:e5:d3:52:db:fa:8b:e6:c2:9c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 09:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0479fbc64def828063e2dcb0a52c6f33930d81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:b5:fa:1e:61:35:8e:45:6e:68:6b:ce:37:
94:e5:30:1e:85:1b:63:7d:16:df:b4:a8:a3:6d:51:
da:10:dd:4c:d4:5c:78:d2:d6:27:f8:8c:9c:92:2a:
7c:92:e1:a4:4b:b4:2f:0d:4d:b3:7b:d4:b9:51:3f:
56:dd:a9:7f:74:44:e0:04:f1:47:20:99:4b:a2:bd:
75:68:80:41:72:4c:e7:1a:ea:da:e4:c6:6b:07:a1:
e9:0c:f8:87:b5:14:84:af:6b:9c:2c:74:67:34:2a:
b7:4f:e7:9a:d4:0f:c8:e9:8c:1a:97:33:48:40:da:
26:a7:1c:17:6b:37:8f:b9:ca:60:e4:8c:c3:ca:20:
95:f5:5a:a4:09:24:36:8d:66:e2:dd:e0:bb:94:16:
7c:0e:53:6c:4d:fa:85:eb:82:93:37:ed:31:f1:44:
4c:e3:d2:e1:a7:f7:1e:be:00:2d:e0:c4:56:b9:74:
2c:46:ec:d6:54:ba:ba:5a:e5:72:d7:a3:0a:ec:e0:
07:3e:18:e9:73:b3:ce:e2:78:d6:7e:0d:43:01:44:
e6:35:f8:ed:5e:45:c3:81:19:68:bd:05:0d:20:cd:
be:6a:9b:72:2f:35:2c:b4:2e:68:4a:7f:89:45:f3:
2c:70:51:3b:c9:ef:b7:4c:03:5c:f5:29:ee:01:ce:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:47:9F:BC:64:DE:F8:28:06:3E:2D:CB:0A:52:C6:F3:39:30:D8:1B
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/0EefvGTe-CgGPi3LClLG8zkw2Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.16.0/21
194.213.100.0/23
Signature Algorithm: sha256WithRSAEncryption
67:ad:c3:8b:a7:e2:b9:ea:41:58:8c:a2:3a:f5:c7:68:52:27:
c6:75:83:0f:21:e6:eb:cc:a8:b9:fd:0f:56:c7:8c:da:dc:64:
a1:6f:42:42:98:dc:f8:fb:bf:6e:a6:b8:0a:82:4a:8a:46:2e:
1e:ba:a4:90:88:99:22:dc:b5:83:f2:f2:f2:91:de:40:ae:c0:
03:60:3e:be:3a:c9:36:e1:14:42:0a:79:c8:07:16:70:2a:e8:
f7:2e:99:31:b3:10:00:76:09:8c:a9:32:4f:04:41:4c:39:1b:
ea:da:77:2c:2b:56:65:72:d4:94:bc:da:96:b0:43:6a:7e:36:
6e:16:0b:87:f0:1f:17:98:20:af:73:97:ea:f3:7d:b4:24:12:
5b:2f:a3:08:9b:67:38:41:93:45:d0:e7:2d:3a:e4:d3:f4:bf:
64:33:e4:63:e8:20:97:8e:3a:d9:b3:fa:c2:1b:8d:b6:b9:79:
71:12:4a:c3:55:cb:c6:84:87:4b:a5:e5:5a:53:b4:8b:0b:63:
ed:a8:4a:38:c6:1a:25:79:1b:11:75:16:aa:7d:8d:1b:42:cf:
48:45:d5:75:e5:8a:bc:11:95:06:f2:46:91:ed:48:39:ad:92:
b2:9e:a3:d2:c8:5b:7f:0e:29:3c:ca:3a:68:7a:33:2c:ee:53:
6d:09:50:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:58:28 2025 by rpki-client