Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/EQErsYEn34VQuEWAGFb3PKqYnG4.roa
File: EQErsYEn34VQuEWAGFb3PKqYnG4.roa (raw, json)
Hash identifier: V0vxhgyH062g70S7uriTR1kZL9lSGypJMHFC0eqjGm8=
Subject key identifier: 11:01:2B:B1:81:27:DF:85:50:B8:45:80:18:56:F7:3C:AA:98:9C:6E
Certificate issuer: /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Certificate serial: 019586593009333BB51DA8608AA40B07E0D1
Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/EQErsYEn34VQuEWAGFb3PKqYnG4.roa
Signing time: Tue 11 Mar 2025 17:55:46 +0000
ROA not before: Tue 11 Mar 2025 17:55:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 5.42.202.0/24 maxlen: 24
91.142.130.0/24 maxlen: 24
194.31.59.0/24 maxlen: 24
194.31.64.0/24 maxlen: 24
194.31.79.0/24 maxlen: 24
194.31.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:86:59:30:09:33:3b:b5:1d:a8:60:8a:a4:0b:07:e0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Validity
Not Before: Mar 11 17:55:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11012bb18127df8550b845801856f73caa989c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:c8:11:40:b4:f8:02:8f:e5:83:b8:f5:23:
d0:0a:4e:20:e0:2c:bf:4a:05:1c:7a:dc:6b:bf:93:
37:ab:30:cb:6f:40:ee:a6:3c:94:c5:d7:8f:91:f9:
60:fb:14:7e:c8:75:11:28:51:e4:9d:99:d0:df:a9:
ef:b3:4b:4a:9a:99:04:45:bf:33:46:18:a3:1a:5e:
a2:be:8b:ca:40:b1:b6:6a:5c:36:16:6b:45:0b:57:
f7:ce:dc:0c:fc:75:d7:03:8e:e8:ce:e9:51:f9:30:
0c:19:fd:07:7d:ee:5e:7e:f2:d9:4f:cc:1e:a7:44:
7e:58:f4:19:3c:2d:bf:77:df:49:34:4c:d4:63:ef:
3b:32:11:aa:61:85:3b:15:5b:d0:3c:e3:ef:e0:3e:
81:d2:a5:39:cb:62:a5:23:8c:21:3c:12:4c:3f:35:
ff:63:2d:8d:e8:63:68:2d:27:bb:62:7d:94:62:8b:
9d:33:c7:e4:19:29:62:6e:64:08:9d:47:8f:46:59:
97:3e:f4:c9:d0:51:91:7c:f6:b9:45:42:6d:2e:a7:
fa:a6:3c:3d:12:c7:ed:15:76:af:96:13:43:9f:45:
b3:64:de:aa:a9:68:aa:66:a6:9c:c3:73:49:12:01:
84:a5:7a:b8:f0:88:73:d6:da:96:ae:86:7d:c8:ef:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:01:2B:B1:81:27:DF:85:50:B8:45:80:18:56:F7:3C:AA:98:9C:6E
X509v3 Authority Key Identifier:
keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/EQErsYEn34VQuEWAGFb3PKqYnG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.202.0/24
91.142.130.0/24
194.31.59.0/24
194.31.64.0/24
194.31.79.0/24
194.31.87.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:74:3c:83:59:a5:58:51:97:ac:4a:5e:2c:81:26:3d:0d:d9:
63:42:46:74:7a:1d:9a:35:eb:f3:66:30:72:ab:1c:7c:d4:36:
5d:08:e1:de:76:25:3c:17:9e:c9:7e:fb:df:ca:d5:26:a7:90:
ff:8e:71:57:bc:1b:84:3b:63:45:54:23:87:8f:61:52:50:0b:
85:9d:f7:85:82:90:03:1a:24:2a:ac:09:8a:8d:7f:3c:46:be:
ee:f4:5e:6b:d7:7e:f1:73:8a:e8:dd:91:9d:7e:38:28:43:8a:
52:48:82:1d:de:8b:dd:83:da:bc:3a:85:d0:53:38:37:b4:51:
89:e8:00:d6:f9:24:d6:38:88:dc:92:0b:f3:fb:ee:9b:14:00:
a9:c5:1e:46:19:b6:1e:75:f0:84:b4:b8:c6:81:18:fc:f7:43:
ce:02:ef:65:31:11:55:86:21:6f:41:e1:77:f1:6b:5f:00:ff:
34:d3:f1:33:3a:e8:44:af:b1:ec:25:18:4b:f2:11:ba:fa:5c:
dd:4c:4c:f1:59:9b:d4:46:3a:50:64:aa:8e:06:96:8c:8a:d6:
30:c3:da:46:03:28:9f:e4:08:75:0f:bf:c0:c4:2a:dd:b3:d7:
8d:73:d6:eb:0d:5d:f5:3c:05:72:45:4f:e3:0d:79:46:c0:7e:
f8:43:fb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:50:15 2025 by rpki-client