Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ejMCCeC2MDhcNB2cVYC221LlZf0.roa
File: ejMCCeC2MDhcNB2cVYC221LlZf0.roa (raw, json)
Hash identifier: KH+fBxO9uWEjS3q9OKeQXfnZoTvKao3+H/qtLjbPkOk=
Subject key identifier: 7A:33:02:09:E0:B6:30:38:5C:34:1D:9C:55:80:B6:DB:52:E5:65:FD
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 0194D67D5A04FCF68030D37F88DC63AC7378
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ejMCCeC2MDhcNB2cVYC221LlZf0.roa
Signing time: Wed 05 Feb 2025 14:22:06 +0000
ROA not before: Wed 05 Feb 2025 14:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 193.34.48.0/24 maxlen: 24
193.34.51.0/24 maxlen: 24
195.13.62.0/24 maxlen: 24
195.13.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d6:7d:5a:04:fc:f6:80:30:d3:7f:88:dc:63:ac:73:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Feb 5 14:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a330209e0b630385c341d9c5580b6db52e565fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:60:cf:34:aa:d0:e4:37:85:6a:cd:9b:90:
a9:b2:6c:a4:08:13:52:f2:8c:f4:db:c2:6e:c4:13:
98:9c:02:de:91:f0:58:5a:30:c4:c5:ea:ab:8c:e0:
8a:79:7f:14:2d:16:8f:a4:e2:2d:20:33:10:98:0a:
f5:c2:d3:1c:8e:26:3c:48:ee:05:70:21:7e:3a:f0:
56:e4:c5:4e:84:64:3f:a4:c3:82:ff:6c:9e:a5:65:
ba:6a:4b:c3:f5:1c:f7:30:81:56:c8:71:f7:0b:04:
2e:eb:fd:9f:e6:a1:8a:78:1c:28:d2:5c:94:42:3e:
ef:d3:13:78:c5:d7:ff:0e:a5:f9:b2:4d:57:6e:e0:
fa:1c:53:e6:db:c4:45:21:25:9c:14:94:a0:a2:7a:
62:40:36:ad:e1:72:99:7d:1a:48:d7:be:23:03:66:
59:5d:3d:42:33:b8:a3:99:e2:9a:9c:a2:b3:9c:e9:
6c:0e:b9:85:b2:af:49:98:67:de:3b:fd:fb:7e:5a:
c4:8b:a9:fe:b1:9c:a0:27:9c:15:86:d2:81:85:7e:
52:47:6b:d5:22:5c:2d:4f:b2:b4:77:9e:3d:bc:6e:
fd:ef:cd:92:a2:e3:50:71:e5:64:33:38:20:7c:e5:
28:f1:11:4b:63:d2:f1:85:07:4e:ca:c6:4e:f3:b5:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:33:02:09:E0:B6:30:38:5C:34:1D:9C:55:80:B6:DB:52:E5:65:FD
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/ejMCCeC2MDhcNB2cVYC221LlZf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.48.0/24
193.34.51.0/24
195.13.62.0/23
Signature Algorithm: sha256WithRSAEncryption
57:d4:90:5c:c3:2f:a4:be:39:fd:99:a8:6c:fb:d9:df:55:d8:
97:13:67:85:b6:a0:db:7f:91:2c:76:f1:15:bf:49:a1:bf:e8:
8a:43:d7:6f:7e:8b:fc:19:01:15:f2:bf:a0:ca:60:fa:a9:1d:
c7:dc:b1:f9:fd:75:e8:12:e3:24:40:b0:7a:0d:b4:43:7c:c1:
45:ae:0e:16:92:84:39:55:e5:b8:e7:6b:34:07:6f:3c:9f:e2:
fd:ce:82:26:de:33:5d:ea:86:61:40:ca:13:1d:11:b9:c5:98:
6b:ff:f9:bc:c8:9d:69:28:cc:b9:8a:27:9d:4a:15:6b:f0:c5:
90:c1:3e:27:69:6b:1b:42:5b:63:9f:71:24:01:0a:45:ee:78:
2b:a2:67:9c:70:6a:a3:f6:98:b5:d7:2f:cc:74:af:37:ce:f1:
ce:03:b6:23:22:66:06:ba:7c:c6:1f:4f:49:39:28:bc:b0:d6:
b2:cd:cb:d6:c8:0f:05:ee:fc:8d:ca:f2:f2:21:b0:5c:e7:06:
ec:1c:b3:31:a9:06:bd:4b:0e:b0:94:72:14:8b:70:91:2b:25:
44:ff:ef:c0:1d:b5:6d:f2:00:26:ad:17:aa:2e:73:1c:4c:ac:
9e:9e:e0:88:f6:5d:11:ca:68:1b:dc:85:83:6d:90:0e:33:62:
cb:89:97:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:29:44 2025 by rpki-client