Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1egEAWTQi1OcNU0W_rjr_CRLdbs.roa
File: 1egEAWTQi1OcNU0W_rjr_CRLdbs.roa (raw, json)
Hash identifier: LHe616pBcv+bCNyg1cs6z4IxwstMXXlrnpuBdg2aZbs=
Subject key identifier: D5:E8:04:01:64:D0:8B:53:9C:35:4D:16:FE:B8:EB:FC:24:4B:75:BB
Certificate issuer: /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial: 019425222389E3BEF2FF2B712FA617289F14
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1egEAWTQi1OcNU0W_rjr_CRLdbs.roa
Signing time: Thu 02 Jan 2025 03:49:41 +0000
ROA not before: Thu 02 Jan 2025 03:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60853
IP address blocks: 79.132.255.0/24 maxlen: 24
213.211.190.0/24 maxlen: 24
213.211.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:23:89:e3:be:f2:ff:2b:71:2f:a6:17:28:9f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
Validity
Not Before: Jan 2 03:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5e8040164d08b539c354d16feb8ebfc244b75bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:58:80:1c:f6:64:62:24:67:68:60:29:9b:
1c:d6:29:6e:37:78:e8:03:d2:48:ce:65:12:24:63:
61:78:a0:83:d3:26:e0:8b:c2:3e:03:da:b3:d4:50:
c0:12:c4:1a:b3:0d:47:0b:16:f2:9b:46:33:89:8c:
9e:00:42:68:bc:d9:c3:ec:cf:da:59:e9:6c:81:2e:
f5:ea:e7:ee:c9:c5:97:49:c1:3e:36:bb:d5:95:21:
f0:47:4c:f7:61:bb:4b:ca:f0:7a:0a:bf:00:7b:61:
37:47:04:62:7c:6e:1e:b2:3f:6b:13:07:f4:3a:43:
d0:94:cc:e1:51:e4:ba:93:da:de:9e:3e:47:4b:55:
e2:c7:43:9e:36:ec:74:db:53:19:10:31:4b:2f:2a:
56:9e:4d:e7:01:b7:4b:10:fd:5b:97:ae:6c:4d:6d:
27:5c:87:3f:42:f6:1b:3c:b6:56:69:b5:00:f4:22:
f4:81:0d:ff:6a:8b:ca:7e:f5:07:6f:1f:48:0f:e3:
1e:7b:6d:79:21:d2:f0:ac:b8:07:c4:4b:b2:90:2d:
09:94:12:ea:8c:42:e6:1f:3b:af:de:45:a8:dc:9d:
18:f2:88:69:50:25:be:4a:46:05:59:c8:c5:80:05:
1f:6a:fd:6a:4f:f9:0e:42:19:f1:ed:d1:5e:04:5f:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E8:04:01:64:D0:8B:53:9C:35:4D:16:FE:B8:EB:FC:24:4B:75:BB
X509v3 Authority Key Identifier:
keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1egEAWTQi1OcNU0W_rjr_CRLdbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.255.0/24
213.211.190.0/23
Signature Algorithm: sha256WithRSAEncryption
04:ed:da:9b:c1:7b:5e:f0:9e:e7:f2:15:16:f0:78:00:6f:fd:
c4:cc:3e:b1:41:02:fc:11:8c:1e:ad:b5:d3:6f:49:44:37:8a:
d3:e7:8c:43:56:cb:31:c7:3e:f2:5d:c3:1a:01:0d:4c:26:d3:
b2:aa:14:ff:9b:d4:56:65:98:b0:0f:bc:46:8d:89:c9:c5:66:
32:be:e7:74:54:e4:af:e7:14:60:6c:92:3c:50:cc:a1:6d:9d:
34:bd:0f:e6:e4:ca:e0:be:99:03:a8:80:67:2f:a2:7d:5d:d7:
70:f6:51:ab:90:48:5b:fa:c6:5b:73:38:96:be:3a:ba:6c:83:
36:83:89:00:95:be:98:6b:cf:de:cd:2e:04:21:92:6c:73:d2:
5c:dd:a7:e2:04:a3:6e:c5:69:66:8a:39:7f:95:01:b4:4c:5a:
81:74:85:9f:48:37:ac:f1:a9:58:58:7c:92:26:fa:24:fa:ff:
29:f3:c8:c9:87:2c:b6:bd:56:92:24:10:49:f2:0c:0f:06:e2:
9a:6e:57:5d:91:33:a4:30:af:4d:1e:49:85:a4:85:55:f6:47:
64:4d:51:6d:b9:9c:35:4d:64:79:0c:40:69:0c:76:46:b1:3e:
c1:04:15:46:7e:35:41:0d:a8:f2:0a:60:69:be:22:1c:a5:d5:
0f:d1:af:61
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIiOJ477y/ytxL6YXKJ8UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODU1MWUyNjE2OWIzYjNlMTI0ZjY5NjRlMjcwMmU5NTc2
ODI1M2UwHhcNMjUwMTAyMDM0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWU4MDQwMTY0ZDA4YjUzOWMzNTRkMTZmZWI4ZWJmYzI0NGI3NWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NJYgBz2ZGIkZ2hgKZsc1iluN3jo
A9JIzmUSJGNheKCD0ybgi8I+A9qz1FDAEsQasw1HCxbym0YziYyeAEJovNnD7M/a
WelsgS716ufuycWXScE+NrvVlSHwR0z3YbtLyvB6Cr8Ae2E3RwRifG4esj9rEwf0
OkPQlMzhUeS6k9renj5HS1Xix0OeNux021MZEDFLLypWnk3nAbdLEP1bl65sTW0n
XIc/QvYbPLZWabUA9CL0gQ3/aovKfvUHbx9ID+Mee215IdLwrLgHxEuykC0JlBLq
jELmHzuv3kWo3J0Y8ohpUCW+SkYFWcjFgAUfav1qT/kOQhnx7dFeBF8x5QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNXoBAFk0ItTnDVNFv646/wkS3W7MB8GA1UdIwQY
MBaAFNSFUeJhabOz4ST2lk4nAulXaCU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlWUjRtRnBzN1BoSlBhV1RpY0M2VmRvSlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lYWQyNzctODRjOS00YjhlLTg3OWUt
NWY3MzI2NzEwMmE2LzEvMWVnRUFXVFFpMU9jTlUwV19yanJfQ1JMZGJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lYWQyNzctODRjOS00YjhlLTg3OWUtNWY3MzI2NzEwMmE2
LzEvMUlWUjRtRnBzN1BoSlBhV1RpY0M2VmRvSlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT4T/AwQB
1dO+MA0GCSqGSIb3DQEBCwUAA4IBAQAE7dqbwXte8J7n8hUW8HgAb/3EzD6xQQL8
EYwerbXTb0lEN4rT54xDVssxxz7yXcMaAQ1MJtOyqhT/m9RWZZiwD7xGjYnJxWYy
vud0VOSv5xRgbJI8UMyhbZ00vQ/m5MrgvpkDqIBnL6J9Xddw9lGrkEhb+sZbcziW
vjq6bIM2g4kAlb6Ya8/ezS4EIZJsc9Jc3afiBKNuxWlmijl/lQG0TFqBdIWfSDes
8alYWHySJvok+v8p88jJhyy2vVaSJBBJ8gwPBuKablddkTOkMK9NHkmFpIVV9kdk
TVFtuZw1TWR5DEBpDHZGsT7BBBVGfjVBDajyCmBpviIcpdUP0a9h
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:50:17 2025 by rpki-client