Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EEPmZuOD9kAMP-6JuFMPvY7afbQ.roa
File: EEPmZuOD9kAMP-6JuFMPvY7afbQ.roa (raw, json)
Hash identifier: +R2XNs02YayWF3WQkQWnqRdNK3nWkxORVOV0TkOHNHQ=
Subject key identifier: 10:43:E6:66:E3:83:F6:40:0C:3F:EE:89:B8:53:0F:BD:8E:DA:7D:B4
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01942827B61492E1B595B0F80B6697443FEE
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EEPmZuOD9kAMP-6JuFMPvY7afbQ.roa
Signing time: Thu 02 Jan 2025 17:54:38 +0000
ROA not before: Thu 02 Jan 2025 17:54:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 87.229.31.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
87.229.50.0/24 maxlen: 24
87.229.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:b6:14:92:e1:b5:95:b0:f8:0b:66:97:44:3f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 2 17:54:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1043e666e383f6400c3fee89b8530fbd8eda7db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:af:f8:a0:89:3f:a4:80:3c:d1:fd:7f:dd:
4a:5a:57:99:dd:c0:a2:de:68:0d:28:b7:93:de:bc:
1f:78:24:db:ea:5d:8c:38:f7:9f:3f:ab:9b:5c:b8:
da:de:7f:56:dc:6f:cf:de:78:1c:30:70:98:19:75:
e9:91:d5:cf:bd:8a:08:c0:24:49:b3:30:4c:26:4b:
da:0a:dd:60:3f:52:54:f5:88:cf:bd:1e:53:6c:2c:
47:2b:17:1b:7c:07:bd:78:03:08:dd:09:b4:30:d2:
17:e6:be:1c:56:55:17:55:ac:0f:b2:48:56:fb:05:
2b:3c:3c:c7:dc:b0:52:fa:7b:65:46:b6:78:2c:a3:
ab:80:04:15:a9:84:d2:ed:b0:0e:10:c6:5a:37:6a:
fe:9b:9e:f3:34:fc:06:19:e7:fd:60:d9:d2:ce:91:
f5:d3:47:be:db:c5:2f:18:ee:56:99:28:27:b4:ce:
ea:28:58:05:7b:67:6b:e2:eb:4f:0c:c5:3b:af:f8:
f7:d6:da:2a:d6:dd:89:16:3c:87:ff:5e:e9:39:e5:
89:17:24:7c:af:fe:4e:f3:04:98:d1:56:eb:58:d8:
c6:70:10:f1:2e:90:f1:e0:00:4e:99:51:90:22:9b:
a0:49:7e:4a:60:f7:cc:69:6b:37:29:03:bc:b6:bb:
2b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:43:E6:66:E3:83:F6:40:0C:3F:EE:89:B8:53:0F:BD:8E:DA:7D:B4
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/EEPmZuOD9kAMP-6JuFMPvY7afbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.31.0/24
87.229.48.0/24
87.229.50.0/24
87.229.97.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a5:e7:ce:3c:50:92:d8:fb:92:ac:a9:37:c0:9d:d2:2b:1f:
ca:4d:44:2b:ae:b0:7e:a2:00:fb:3c:13:73:48:c3:7a:c3:96:
42:4d:74:71:99:d6:62:ff:2f:57:85:58:1b:f7:e0:b8:18:76:
70:d8:41:39:9c:d9:35:a0:85:8f:16:38:78:80:99:d3:bc:9a:
9b:69:93:69:40:be:90:42:26:9a:af:eb:e8:36:bd:3d:81:12:
99:76:6b:00:79:07:6d:b8:29:b3:2b:9d:3a:4f:20:79:25:82:
72:77:1f:ee:98:bb:81:86:a0:be:b5:d7:78:02:cd:45:24:38:
4d:76:db:d0:4a:4f:cb:8b:87:7e:0f:36:c0:1a:78:44:2b:ef:
2d:d6:06:57:48:4d:7c:51:ac:54:a8:fb:fb:85:e7:c1:12:b2:
bf:79:1f:dd:30:3f:7e:2f:04:29:ca:fd:9e:f6:32:95:82:55:
4b:56:fd:9b:3b:fa:a8:7e:c3:e1:ef:c2:74:69:98:92:a8:04:
1e:0b:e4:20:ae:7a:37:89:96:33:e8:81:94:a1:b4:be:6c:83:
ab:c1:f3:ed:cb:b8:76:86:54:8e:5b:42:18:5d:f6:00:a8:ba:
8f:79:76:7d:b5:c6:4b:7f:5c:9f:64:ea:d8:e6:59:90:63:aa:
99:80:c3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:35 2025 by rpki-client