Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/EBjZlhPdImN_fmswrc4n1qFbaJc.roa
File: EBjZlhPdImN_fmswrc4n1qFbaJc.roa (raw, json)
Hash identifier: tUvTqcEJd5jRcaH6HCXAi4EQUm+eSxMyHWyd2ocWiV8=
Subject key identifier: 10:18:D9:96:13:DD:22:63:7F:7E:6B:30:AD:CE:27:D6:A1:5B:68:97
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 019426D8A47310BE3A526CE8E8EE432F236F
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/EBjZlhPdImN_fmswrc4n1qFbaJc.roa
Signing time: Thu 02 Jan 2025 11:48:39 +0000
ROA not before: Thu 02 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204708
IP address blocks: 80.67.184.0/24 maxlen: 24
2001:913:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:a4:73:10:be:3a:52:6c:e8:e8:ee:43:2f:23:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1018d99613dd22637f7e6b30adce27d6a15b6897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:8e:ba:de:a3:cf:0d:3d:c1:00:78:01:2c:
12:39:73:67:1d:0a:9f:46:2b:bc:fa:de:b0:ec:c7:
9d:c1:42:c3:40:1c:a4:45:5c:07:4d:c2:0f:a2:95:
05:76:94:c1:eb:34:6e:50:fc:fd:d8:d7:7d:9a:57:
4f:2b:58:4d:f7:05:2e:6c:62:61:92:18:75:f9:a7:
72:de:9e:d5:48:6d:80:e6:bc:57:6e:7b:b2:94:32:
f2:24:d5:39:07:57:19:0d:f7:02:18:ed:bd:a4:97:
67:01:ab:57:47:3d:17:e2:e7:2f:bd:14:87:90:b3:
80:aa:42:ad:78:dd:96:4b:46:ec:0d:23:a5:75:e4:
5f:6f:67:23:60:5a:21:4c:4d:e1:a8:ef:aa:c0:ab:
91:f6:fe:3e:b8:cb:6f:3f:f3:3d:5e:46:4f:a3:95:
cf:bb:2c:e8:d8:4d:79:03:59:c7:df:4e:ff:7b:37:
70:a5:75:33:f6:de:b1:a2:5f:f9:d8:84:21:c5:42:
2c:0e:38:ed:45:f9:4d:78:ad:50:b3:cc:69:ba:da:
25:8f:18:53:66:b6:89:58:d2:af:0b:7d:50:2d:5c:
b0:39:6b:08:79:4d:e5:9f:c1:e9:39:c3:15:fd:f3:
78:09:fb:a3:60:86:83:ae:00:09:d2:b8:30:73:c9:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:18:D9:96:13:DD:22:63:7F:7E:6B:30:AD:CE:27:D6:A1:5B:68:97
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/EBjZlhPdImN_fmswrc4n1qFbaJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.184.0/24
IPv6:
2001:913:3000::/36
Signature Algorithm: sha256WithRSAEncryption
ae:6e:ce:f6:a2:2b:5c:dc:9c:70:38:0f:2f:fe:8e:e4:0d:b4:
38:b9:13:7b:81:21:a8:02:cc:27:3e:37:95:2b:f2:17:37:98:
cb:ef:e9:da:15:0c:00:65:51:c1:44:6c:23:8e:45:98:16:1b:
89:5b:8a:a0:74:19:63:1e:5e:b8:ba:11:a4:42:23:3a:01:6b:
cc:d4:9b:9a:31:82:24:e8:5e:89:c2:eb:c5:8e:86:75:f8:a2:
30:2a:b7:73:cc:e1:9b:5f:28:62:06:a5:a7:7f:5f:7f:5f:3b:
01:25:e1:e9:a7:8e:6d:c4:ba:96:7f:d5:6b:54:ed:1d:a2:52:
d8:2c:82:82:ef:75:5c:67:95:b6:a6:e3:51:dd:a3:c4:0a:fe:
43:d2:7a:c4:bc:f1:ba:16:78:5c:99:e8:d2:4e:f3:d7:2f:8c:
1a:12:fb:38:4d:37:02:1b:0d:23:5c:9f:c8:99:0e:1d:f9:f5:
56:82:19:02:65:b6:d9:df:cf:8d:9d:1d:6b:96:e6:d2:c8:db:
9c:40:4b:0b:36:91:3d:d7:3f:fa:53:1e:5b:51:bf:6b:47:6a:
e6:2d:63:9d:c7:0a:25:a4:4e:26:d4:9e:43:24:78:ed:e7:8c:
12:ac:b6:a7:c8:1e:30:1f:8a:cc:cc:2d:3d:65:57:b8:14:50:
28:bd:a0:48
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQm2KRzEL46Umzo6O5DLyNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl
ZjRmZWEwHhcNMjUwMTAyMTE0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDE4ZDk5NjEzZGQyMjYzN2Y3ZTZiMzBhZGNlMjdkNmExNWI2ODk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/yOut6jzw09wQB4ASwSOXNnHQqf
Riu8+t6w7MedwULDQBykRVwHTcIPopUFdpTB6zRuUPz92Nd9mldPK1hN9wUubGJh
khh1+ady3p7VSG2A5rxXbnuylDLyJNU5B1cZDfcCGO29pJdnAatXRz0X4ucvvRSH
kLOAqkKteN2WS0bsDSOldeRfb2cjYFohTE3hqO+qwKuR9v4+uMtvP/M9XkZPo5XP
uyzo2E15A1nH307/ezdwpXUz9t6xol/52IQhxUIsDjjtRflNeK1Qs8xputoljxhT
ZraJWNKvC31QLVywOWsIeU3ln8HpOcMV/fN4CfujYIaDrgAJ0rgwc8mmXQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFBAY2ZYT3SJjf35rMK3OJ9ahW2iXMB8GA1UdIwQY
MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt
YTY1MjMzYjNlOTc1LzEvRUJqWmxoUGRJbU5fZm1zd3JjNG4xcUZiYUpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1
LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAUEO4MA4E
AgACMAgDBgQgAQkTMDANBgkqhkiG9w0BAQsFAAOCAQEArm7O9qIrXNyccDgPL/6O
5A20OLkTe4EhqALMJz43lSvyFzeYy+/p2hUMAGVRwURsI45FmBYbiVuKoHQZYx5e
uLoRpEIjOgFrzNSbmjGCJOheicLrxY6GdfiiMCq3c8zhm18oYgalp39ff187ASXh
6aeObcS6ln/Va1TtHaJS2CyCgu91XGeVtqbjUd2jxAr+Q9J6xLzxuhZ4XJno0k7z
1y+MGhL7OE03AhsNI1yfyJkOHfn1VoIZAmW22d/PjZ0da5bm0sjbnEBLCzaRPdc/
+lMeW1G/a0dq5i1jnccKJaROJtSeQyR47eeMEqy2p8geMB+KzMwtPWVXuBRQKL2g
SA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:31 2025 by rpki-client