Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ET5ktSLYx20FiZvcfV7WlxLAP90.roa
File: ET5ktSLYx20FiZvcfV7WlxLAP90.roa (raw, json)
Hash identifier: LeGC8Ch7ger4+lrPmWB9y7tizVscPnaCfIghH0zaa+8=
Subject key identifier: 11:3E:64:B5:22:D8:C7:6D:05:89:9B:DC:7D:5E:D6:97:12:C0:3F:DD
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823D19C4EE41B7173FF8FD74001D778
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ET5ktSLYx20FiZvcfV7WlxLAP90.roa
Signing time: Thu 02 Jan 2025 17:50:23 +0000
ROA not before: Thu 02 Jan 2025 17:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42117
IP address blocks: 77.233.96.0/19 maxlen: 19
95.175.160.0/19 maxlen: 19
159.20.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:d1:9c:4e:e4:1b:71:73:ff:8f:d7:40:01:d7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=113e64b522d8c76d05899bdc7d5ed69712c03fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:7d:8f:1b:b9:93:04:0d:a2:b5:3a:00:ae:
83:d2:29:ee:14:7e:f2:fc:fe:0e:ad:34:fe:c0:dd:
5b:28:fd:ba:76:f1:a9:ad:98:d0:87:ce:85:cf:82:
4e:fa:e6:bc:4b:f5:37:59:3e:ec:34:40:7a:30:5d:
15:f7:ef:6e:a4:d6:06:14:e4:6b:8a:0d:56:21:98:
aa:26:dd:25:66:b1:54:50:46:4e:3c:f6:d3:61:9e:
4e:bb:22:e9:3e:d0:01:51:ed:d7:d8:51:3f:63:97:
35:71:1a:30:89:0c:f5:f2:fa:f2:61:98:f3:81:81:
ed:9b:ea:af:7c:20:b2:b5:03:2b:82:be:4d:2f:83:
c6:95:34:df:fa:a3:63:9f:c3:2e:02:27:9a:ee:59:
ab:1e:50:09:c4:91:18:99:bf:63:37:bf:3d:f6:76:
5e:54:5b:85:60:03:91:4e:fa:28:df:cf:1c:f4:f1:
2c:a3:11:80:18:3b:d6:65:14:72:c1:76:5c:7b:90:
78:6f:50:c5:70:e2:92:27:bf:c2:f0:2c:03:a0:ac:
68:2f:2c:c0:92:8d:da:c5:6e:8d:f7:e9:de:a1:02:
3a:b6:0b:c0:9c:d4:5c:c0:6b:62:98:0e:f1:2f:b7:
b3:a9:53:1d:a1:80:8f:75:e6:9c:12:84:a5:0f:92:
c9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3E:64:B5:22:D8:C7:6D:05:89:9B:DC:7D:5E:D6:97:12:C0:3F:DD
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ET5ktSLYx20FiZvcfV7WlxLAP90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.233.96.0/19
95.175.160.0/19
159.20.8.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:b4:1e:35:21:cd:04:70:62:af:1c:ad:70:33:0f:4c:66:b2:
bf:70:37:46:0b:1e:63:3f:46:e2:da:51:7a:04:df:e9:c3:d7:
97:2a:27:db:42:32:9a:57:61:3a:8a:45:5c:bc:bf:5e:73:82:
70:de:dc:63:45:91:98:10:53:f9:65:4c:a5:4e:1b:d7:ef:37:
a4:94:e6:4e:6f:a9:45:39:36:c6:da:dd:a5:e8:c0:a6:b9:c7:
cb:af:55:36:fa:eb:ec:db:d0:7d:f5:7b:06:34:32:f6:0f:6b:
c1:2f:e9:24:f8:96:4a:80:00:02:c3:15:6b:d5:3b:11:13:78:
d2:ce:4c:b8:dc:c1:a7:b5:5c:4b:a1:64:ea:f9:81:08:9a:75:
a4:08:a5:cb:9a:bd:9c:84:90:f2:1f:0c:08:d3:65:05:85:d6:
87:27:a3:8d:db:c2:a4:25:b0:7e:b4:e2:c5:70:82:9d:67:f9:
02:3c:06:53:56:8a:14:c7:0b:f4:56:4d:76:0a:81:e5:aa:35:
b7:f6:c4:2a:05:d1:0a:7c:fc:28:a8:d6:05:61:e9:2b:a4:3e:
2f:1d:32:e6:2e:fc:b4:db:9b:ef:c6:74:19:c2:d1:51:ef:c2:
0c:07:37:f8:0c:36:c1:d8:8a:5a:2b:fb:9b:12:55:4f:10:6a:
9d:93:1e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:55:28 2025 by rpki-client