Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/eIWl2Bd0Pxxav1dcA-Dk0QUjtNc.roa
File: eIWl2Bd0Pxxav1dcA-Dk0QUjtNc.roa (raw, json)
Hash identifier: f6dFjIxe85SSBI4ksBvgrlGBQej8v716YPchJXO7nUc=
Subject key identifier: 78:85:A5:D8:17:74:3F:1C:5A:BF:57:5C:03:E0:E4:D1:05:23:B4:D7
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 0194A243E75C3DBB0CF6DBDA87BC5A11FE6E
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/eIWl2Bd0Pxxav1dcA-Dk0QUjtNc.roa
Signing time: Sun 26 Jan 2025 10:59:06 +0000
ROA not before: Sun 26 Jan 2025 10:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 62.171.230.0/24 maxlen: 24
194.238.79.0/24 maxlen: 24
213.18.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a2:43:e7:5c:3d:bb:0c:f6:db:da:87:bc:5a:11:fe:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 26 10:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7885a5d817743f1c5abf575c03e0e4d10523b4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:46:88:c4:9c:5c:9e:16:80:4e:48:d3:cf:
1a:dd:28:2c:88:7d:14:ab:6f:80:f7:02:33:27:4f:
8e:23:79:72:15:ac:0b:51:dd:d7:c7:c1:c7:b3:e3:
dc:5c:c9:14:d9:8b:23:8e:b9:e0:23:ba:0d:87:99:
f2:21:84:05:ae:de:4f:70:29:6e:fe:ca:15:fe:a3:
8e:8c:42:3e:c8:f1:27:57:57:96:b9:39:d1:52:8b:
00:23:b8:8b:46:ef:0b:80:bc:e7:92:f1:84:d1:38:
d6:05:09:79:1e:a3:e8:04:f7:f6:11:2f:5e:2f:11:
59:e3:e2:0c:91:84:11:a3:7a:c3:8c:15:be:f2:7c:
ce:1c:53:c5:c0:94:3e:3c:30:16:bd:af:dd:a0:9e:
04:bb:d1:01:49:2d:f4:68:f4:b4:52:80:07:b7:70:
7b:f6:17:87:e7:6b:1f:5e:4f:e7:96:cc:a2:45:bf:
8f:d9:15:48:53:dc:98:7c:9c:d1:84:24:1b:93:97:
2f:d3:a4:23:d1:53:dc:5b:ef:c8:c7:cf:38:8b:6e:
73:fe:3a:70:85:52:a7:e7:e6:42:78:c5:be:c7:94:
47:dd:52:0d:a9:74:1d:c7:19:09:88:27:01:d5:7c:
1f:c5:32:00:26:04:c7:b5:c0:b2:11:65:50:b9:62:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:85:A5:D8:17:74:3F:1C:5A:BF:57:5C:03:E0:E4:D1:05:23:B4:D7
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/eIWl2Bd0Pxxav1dcA-Dk0QUjtNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.230.0/24
194.238.79.0/24
213.18.245.0/24
Signature Algorithm: sha256WithRSAEncryption
38:43:d3:a5:a3:d8:8b:d7:ea:1c:ac:4d:9c:24:56:76:31:19:
7a:10:14:a9:72:63:45:ed:45:48:93:ab:24:5e:71:2b:f1:12:
62:de:4b:8d:9d:0e:e0:e9:b1:f3:93:89:e6:b0:af:78:cb:e5:
72:5a:81:c8:ce:16:a3:d4:c3:ec:42:c1:bc:13:57:41:43:63:
02:5f:a9:53:ba:45:69:bf:69:5a:c0:35:2f:c4:a3:71:db:b9:
81:03:97:37:97:0f:66:dc:d2:fa:79:86:81:7d:e1:86:f0:d2:
58:5e:68:a3:8a:56:f1:3e:d7:49:fc:e2:94:43:47:72:db:b0:
96:eb:80:1e:33:b8:47:1a:8c:ee:f1:43:a0:08:3e:c5:41:87:
67:37:e6:e1:b2:c2:00:e1:08:c7:58:ee:a3:74:c7:53:4e:ba:
1b:da:de:8b:e6:3d:b7:9a:16:13:83:ee:b6:8e:77:e6:f9:a9:
2f:16:25:48:bb:46:94:d2:15:77:35:6e:eb:28:8b:65:1f:eb:
19:5e:32:ab:00:96:bf:7b:ba:7e:b2:0e:37:74:a9:cc:49:b3:
99:de:dc:3c:09:2e:af:19:98:78:39:dd:7e:63:6a:77:3b:5e:
f2:47:fb:c4:df:2f:df:41:58:0b:52:28:e0:fb:f4:ec:aa:9a:
28:7e:72:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:06 2025 by rpki-client