Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/eEAcVM4h3e_6uLTwXzH2smck964.roa
File: eEAcVM4h3e_6uLTwXzH2smck964.roa (raw, json)
Hash identifier: 2dyqSC4Nr999y8UdL9+8BtI2W3QPoxUvEaAKvO9sMtg=
Subject key identifier: 78:40:1C:54:CE:21:DD:EF:FA:B8:B4:F0:5F:31:F6:B2:67:24:F7:AE
Certificate issuer: /CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Certificate serial: 019425FDD09274C3C802F70364E62FD21BA7
Authority key identifier: D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/eEAcVM4h3e_6uLTwXzH2smck964.roa
Signing time: Thu 02 Jan 2025 07:49:38 +0000
ROA not before: Thu 02 Jan 2025 07:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13154
IP address blocks: 193.105.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d0:92:74:c3:c8:02:f7:03:64:e6:2f:d2:1b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Validity
Not Before: Jan 2 07:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78401c54ce21ddeffab8b4f05f31f6b26724f7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:bf:9c:52:14:a0:bc:f9:8b:8f:2e:0e:45:
ff:00:9f:d5:f5:81:9c:f6:50:51:42:cd:a1:c1:7b:
79:78:c0:fa:7b:6b:c0:01:bf:85:a3:bd:54:f2:ff:
d8:08:06:9e:9b:13:b9:0b:f1:64:1d:ee:49:9a:a8:
57:12:1b:eb:a3:93:84:4f:c6:c1:f5:d5:0c:c9:1c:
01:88:ee:e5:b5:c9:24:d6:08:ab:a7:eb:21:bb:ae:
8e:82:a5:c9:b7:27:1a:e0:e7:9d:8f:a8:48:56:de:
51:ec:3d:50:94:f5:41:79:27:0c:4c:45:cd:7f:39:
17:b5:19:e4:f0:24:a2:f4:78:76:26:62:5a:21:93:
95:dc:3b:2c:bf:21:c0:6e:dc:79:53:00:4d:9b:38:
03:7b:26:4b:6d:b4:58:51:e4:27:c6:e8:2b:d4:00:
84:47:8c:08:5f:d0:1d:93:2c:5f:34:7b:f8:9a:7d:
79:64:5d:26:d4:b1:ce:93:b2:1c:19:2b:ec:9d:0a:
60:f0:14:4f:8d:7d:83:4a:4e:23:a5:6a:73:91:0f:
03:6e:1a:c4:a4:58:52:a0:ed:2a:6d:38:5e:d7:a1:
a6:1b:14:4b:b8:2e:5d:9a:5d:f0:3b:db:70:05:3f:
31:2b:76:b5:c7:d0:d2:de:04:f3:c0:76:b3:74:fd:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:40:1C:54:CE:21:DD:EF:FA:B8:B4:F0:5F:31:F6:B2:67:24:F7:AE
X509v3 Authority Key Identifier:
keyid:D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/eEAcVM4h3e_6uLTwXzH2smck964.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.161.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:fa:f8:36:b9:4f:2a:8d:2f:b5:e8:0a:45:0b:b7:44:10:3a:
09:be:56:24:2d:8b:8c:b3:bd:19:5e:b4:dc:0d:e0:0f:c4:32:
1e:d5:e3:ca:79:0f:53:1c:63:31:c3:bd:25:5d:f3:43:6b:38:
94:55:eb:31:4e:0c:15:f4:ff:27:f0:66:56:6d:1a:88:2e:cd:
c2:a9:44:57:6d:24:08:2b:b7:bf:a5:71:a3:26:c8:68:f0:b4:
cc:48:e5:4b:2f:91:d5:2b:b3:be:84:3d:30:5a:ef:23:e5:45:
17:09:be:0b:fb:7e:c4:70:e4:d0:76:c6:a7:ab:09:d8:30:7c:
61:81:bd:bf:03:da:0f:72:c7:ba:75:91:61:79:f1:42:49:98:
3e:62:f6:3b:6c:cc:b0:26:53:6f:07:50:e7:ef:2d:97:5a:29:
71:66:3d:ed:a1:16:c2:fe:93:a6:4a:52:b4:5d:64:b2:a4:bd:
fd:9b:61:05:2e:c2:6b:fb:a9:85:08:ed:55:54:07:de:e5:b8:
e5:48:dd:a8:54:16:61:fc:9b:6b:00:5e:63:32:53:3c:5f:f0:
db:e8:72:a9:82:e7:58:82:ec:50:98:ee:3b:f0:35:de:89:c3:
5c:e4:3a:07:a2:1d:58:24:06:05:6a:85:8c:70:c4:4a:6d:25:
ad:dc:e0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:42:46 2025 by rpki-client