Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/ecLZxlk5uOKtie8YZypau_dP7Nk.roa
File: ecLZxlk5uOKtie8YZypau_dP7Nk.roa (raw, json)
Hash identifier: qDzztQzT4j41tAiYOJhicLZgVePR5Gy6YYwn9Gm7Kj0=
Subject key identifier: 79:C2:D9:C6:59:39:B8:E2:AD:89:EF:18:67:2A:5A:BB:F7:4F:EC:D9
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 01942521814B924EE5F2AF1CAE581E0BF5D8
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/ecLZxlk5uOKtie8YZypau_dP7Nk.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 92.246.140.0/22 maxlen: 32
93.185.157.0/24 maxlen: 32
94.141.100.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:81:4b:92:4e:e5:f2:af:1c:ae:58:1e:0b:f5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79c2d9c65939b8e2ad89ef18672a5abbf74fecd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e9:cc:93:a8:ed:41:75:75:1a:a8:46:2b:ea:
bb:8f:52:13:c7:d5:86:01:e6:98:56:a5:83:d1:0f:
d6:8d:c0:9e:f4:5c:25:65:df:ab:9e:02:df:c5:b7:
6d:13:cb:1f:e2:d4:c9:48:f0:d1:15:ee:cd:45:a5:
45:d2:fd:c8:1b:55:af:fd:62:6f:3a:74:9f:90:b2:
b8:70:b8:9d:6d:ec:d5:99:5d:b7:1a:46:96:0c:95:
c6:2b:2a:97:fb:00:ef:d7:87:fd:7b:c2:50:07:d6:
8a:25:0e:c3:db:63:29:c4:2f:c6:7d:85:0b:04:a5:
42:70:83:04:25:75:af:1b:6d:88:ab:4a:11:cf:4c:
d8:94:a4:1c:4f:24:c7:a6:ed:ef:f9:5d:84:de:4a:
73:22:fb:05:d0:d3:d3:a3:1e:36:b0:16:73:9e:e9:
ae:bd:6f:4b:25:0c:06:92:8d:b7:9c:1c:4b:9b:b3:
da:16:d8:4a:2a:9c:0b:c5:3e:18:3f:87:a3:e7:fa:
bd:80:e0:fb:cc:4e:9e:e9:88:75:1f:9f:27:c9:5c:
a9:d0:ec:34:01:d7:2c:95:54:5c:98:ac:53:c9:83:
7f:a3:21:38:91:46:6f:a1:f1:20:81:8b:95:54:34:
7a:54:67:3c:1b:ae:a8:18:da:0e:39:de:50:69:26:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C2:D9:C6:59:39:B8:E2:AD:89:EF:18:67:2A:5A:BB:F7:4F:EC:D9
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/ecLZxlk5uOKtie8YZypau_dP7Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.246.140.0/22
93.185.157.0/24
94.141.100.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:6c:c7:63:ab:7b:05:f5:f9:21:b4:d5:e4:2b:3d:1e:84:e4:
95:61:38:4c:d1:31:18:9d:ad:67:cf:2e:d3:49:f1:41:61:b4:
c4:1a:39:ac:aa:a5:d2:20:c2:fe:95:fd:cb:0f:c7:27:01:74:
fe:21:5f:e8:a4:73:b1:d6:05:95:02:ee:35:5b:6c:98:aa:bd:
c4:a1:8e:aa:ad:8e:66:90:f0:c6:dd:d9:cd:09:cb:c4:9d:9b:
2a:88:22:3f:3a:65:8d:77:d7:6f:94:ef:25:53:8c:c3:e8:3b:
ab:f5:17:11:37:57:ea:06:60:01:55:8f:5b:de:99:16:6b:f8:
d8:4a:56:85:56:92:d8:5a:83:14:82:64:29:78:48:51:c5:73:
3f:1e:16:95:7f:f7:6f:01:55:40:3f:92:e7:65:e4:1c:93:df:
db:37:50:4f:f1:49:09:75:e4:2e:a1:41:07:f8:77:f8:ad:04:
e9:79:64:0c:02:be:a8:b6:0b:d5:fc:c9:95:77:d5:06:9e:5d:
26:eb:13:71:ba:66:44:31:9c:84:30:68:98:36:b0:82:d0:5d:
be:57:83:94:27:c7:f9:7a:4b:94:87:54:11:14:2a:3f:f4:3e:
0d:3f:42:56:33:d5:1a:77:f8:1d:ed:7a:97:d4:c3:86:5a:d8:
9c:25:5a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:31 2025 by rpki-client