Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/EvIams58N-rB4tt5ISsfv4AbZ0g.roa
File: EvIams58N-rB4tt5ISsfv4AbZ0g.roa (raw, json)
Hash identifier: b6Jo4FgUx8daz9uEdrCOlbffboncteRslnFd/ngbijU=
Subject key identifier: 12:F2:1A:9A:CE:7C:37:EA:C1:E2:DB:79:21:2B:1F:BF:80:1B:67:48
Certificate issuer: /CN=7a6735b7a553a1680c11add3e48c3635b53979ca
Certificate serial: 018CC9BC9AE1CE9B1FE5E57913E39F12CA5E
Authority key identifier: 7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/EvIams58N-rB4tt5ISsfv4AbZ0g.roa
Signing time: Tue 02 Jan 2024 10:33:49 +0000
ROA not before: Tue 02 Jan 2024 10:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49604
IP address blocks: 185.31.240.0/22 maxlen: 24
85.234.246.0/23 maxlen: 24
85.234.242.0/23 maxlen: 23
85.234.244.0/23 maxlen: 23
217.146.64.0/20 maxlen: 24
85.222.232.0/22 maxlen: 24
2a02:29ea:1e::/48 maxlen: 48
2a02:29ea:a::/48 maxlen: 48
2a02:29ea:14::/48 maxlen: 48
2a02:29e8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:9a:e1:ce:9b:1f:e5:e5:79:13:e3:9f:12:ca:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a6735b7a553a1680c11add3e48c3635b53979ca
Validity
Not Before: Jan 2 10:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12f21a9ace7c37eac1e2db79212b1fbf801b6748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9c:1a:a4:19:d1:a1:e3:6b:2a:9c:0c:7b:40:
05:4a:17:c2:25:20:12:46:f7:f5:13:24:24:e0:ce:
65:56:11:6b:ee:06:27:0e:ab:c2:5a:b0:7b:10:1e:
6c:4b:c1:78:63:88:d4:21:0b:bb:7f:87:bf:12:24:
73:05:9e:20:9b:5b:f2:7f:53:0a:0c:a8:63:35:77:
fc:c9:b1:20:df:3c:36:74:27:ff:ed:7a:a3:fa:34:
b2:dd:fa:0d:0e:f5:fc:ea:64:a0:de:f3:41:72:e4:
c2:31:50:dd:54:5e:61:9f:41:0b:ed:26:cf:34:d8:
65:9c:d7:09:04:6a:ad:32:a6:65:0a:0c:25:2b:a6:
ba:e0:d6:f5:2a:a6:78:c3:d1:89:ee:db:bb:37:87:
ad:37:92:b6:03:cd:dd:cf:0a:44:38:ef:f0:29:77:
6f:69:d1:d9:02:a3:b0:1c:96:82:17:57:a5:90:23:
1d:58:80:36:46:19:5c:ef:62:6d:b4:55:7b:10:c5:
ae:0b:6d:51:c4:40:cf:4b:92:eb:f9:ee:a6:af:d6:
c2:1c:a3:2b:f0:64:1b:fc:2f:e9:1d:69:92:00:35:
d7:22:8b:c9:3b:28:69:43:1c:0f:12:70:cb:95:77:
a7:89:a6:36:63:68:82:93:71:48:ef:92:2c:3e:9d:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F2:1A:9A:CE:7C:37:EA:C1:E2:DB:79:21:2B:1F:BF:80:1B:67:48
X509v3 Authority Key Identifier:
keyid:7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/EvIams58N-rB4tt5ISsfv4AbZ0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.222.232.0/22
85.234.242.0-85.234.247.255
185.31.240.0/22
217.146.64.0/20
IPv6:
2a02:29e8::/32
2a02:29ea:a::/48
2a02:29ea:14::/48
2a02:29ea:1e::/48
Signature Algorithm: sha256WithRSAEncryption
1d:9c:f7:7a:14:dd:cb:46:77:1f:c8:28:a8:b6:99:64:2c:2e:
3d:8e:c9:b3:1b:4f:c0:bb:e9:94:fb:6f:eb:fc:1f:9f:d6:4a:
8a:2a:1e:f3:b3:01:21:00:88:2d:fc:9d:95:8a:29:5c:9f:21:
e6:f1:3c:ad:e0:5e:fc:10:87:4b:67:66:e1:c2:99:ea:99:66:
bb:a6:d7:ff:b8:b7:29:14:be:b3:4d:f5:7e:60:d9:e6:0c:e0:
b9:cb:16:80:8d:29:9e:a1:bf:94:b7:65:5c:d9:df:fa:95:af:
94:55:71:0f:23:6a:72:38:cd:58:12:09:1e:2e:0f:cf:60:3a:
42:9f:b8:90:80:ce:ee:d9:bd:76:37:39:cc:ef:0d:b2:e2:98:
0b:f9:2b:39:0e:94:f9:12:a2:2e:7a:6f:2e:18:ae:4c:c7:c6:
20:7a:a1:5e:66:83:35:ee:37:8a:ae:f0:d0:7d:cc:07:92:f8:
82:65:93:d7:13:be:df:32:5e:f4:25:89:d1:06:8c:6f:33:b5:
bd:06:f0:87:bf:4f:ce:9a:7d:5b:50:d9:0f:fc:23:85:e2:40:
fc:bf:6e:d8:b9:03:01:93:d1:d3:77:7e:03:25:55:07:a1:2b:
a1:a4:a8:e4:ce:e5:8d:b6:cb:7b:5d:e3:3c:17:3b:f1:e9:e2:
92:dd:af:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:34:54 2025 by rpki-client