Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/e-VeG7nyUEzNV5sAt3JU-7pUXPM.roa
File: e-VeG7nyUEzNV5sAt3JU-7pUXPM.roa (raw, json)
Hash identifier: +VPNQ16MVhJiwbxpGaUiyY+7EYW+EvR2+xy1H+6qMTo=
Subject key identifier: 7B:E5:5E:1B:B9:F2:50:4C:CD:57:9B:00:B7:72:54:FB:BA:54:5C:F3
Certificate issuer: /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial: 019427485E20D871D2CE688032F03FFFFB0A
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/e-VeG7nyUEzNV5sAt3JU-7pUXPM.roa
Signing time: Thu 02 Jan 2025 13:50:41 +0000
ROA not before: Thu 02 Jan 2025 13:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 178.250.16.0/24 maxlen: 24
178.250.18.0/24 maxlen: 24
185.24.240.0/24 maxlen: 24
2a00:fc80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5e:20:d8:71:d2:ce:68:80:32:f0:3f:ff:fb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
Validity
Not Before: Jan 2 13:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7be55e1bb9f2504ccd579b00b77254fbba545cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:95:1e:01:a7:22:71:01:cb:79:d4:80:78:
36:fc:53:36:03:bd:48:5c:6d:80:db:b3:ec:b5:da:
79:dc:0e:53:65:7d:b5:3c:bd:bc:f4:6e:ae:98:db:
a9:51:6b:5c:49:29:55:bd:b1:1c:c2:fa:e6:52:e3:
f7:76:f5:b6:bd:1e:1f:ab:f3:40:c9:36:ff:ef:37:
e1:39:e6:79:4f:4c:16:fb:84:dd:75:7f:bb:8d:88:
a3:87:ca:34:59:0d:1b:ce:28:73:4f:f9:ed:0b:d7:
6b:a4:7f:2d:f4:11:9f:c0:97:60:02:fd:25:29:b0:
61:11:71:bc:97:14:4f:2e:33:5a:9e:da:6f:18:52:
01:25:c1:7d:ac:61:1a:7e:e6:ee:6b:04:e0:72:d1:
ae:49:3c:fa:71:ae:81:74:1e:b7:4b:1e:ac:d1:c9:
c8:cb:d4:df:23:db:ec:1a:55:9d:0a:f4:b6:97:ba:
c8:af:54:9d:55:c6:93:9b:12:aa:e0:4c:bc:c4:a3:
0b:f2:45:d5:6d:55:90:41:56:48:df:1e:09:4f:b8:
2f:39:7b:37:10:09:e8:43:c2:29:5d:c3:0c:98:2a:
88:1e:9f:f6:f5:e4:19:ea:73:03:74:ef:87:b3:d7:
10:fe:96:04:fb:83:e8:6a:3d:15:8f:4b:4b:ec:71:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E5:5E:1B:B9:F2:50:4C:CD:57:9B:00:B7:72:54:FB:BA:54:5C:F3
X509v3 Authority Key Identifier:
keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/e-VeG7nyUEzNV5sAt3JU-7pUXPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.16.0/24
178.250.18.0/24
185.24.240.0/24
IPv6:
2a00:fc80::/48
Signature Algorithm: sha256WithRSAEncryption
2e:2f:c1:24:ce:a0:9b:8d:ac:6e:c1:a1:93:a9:5d:70:26:d9:
14:13:89:0a:5b:f5:d0:0b:30:63:99:dc:fa:3c:25:0e:ba:f7:
9b:6c:2b:03:b0:08:d3:e9:2a:72:ba:0e:05:03:4f:76:c7:61:
29:96:1f:c5:86:9d:f4:98:7a:54:2a:3f:ba:a4:01:e5:1b:84:
dd:46:08:74:5a:db:7e:4d:5d:d6:d9:e0:84:0a:ec:95:81:6f:
42:bb:0f:ef:df:7a:29:bd:47:7d:4e:f3:46:9c:34:3e:e6:82:
9e:0a:fb:f6:a9:24:f0:c7:71:08:5b:a9:10:2d:1d:a5:36:25:
df:5e:2f:61:93:50:af:6a:85:48:2e:cc:04:fc:f4:9f:9d:ce:
c3:f5:3d:cd:9f:f3:df:39:00:79:18:37:30:18:4a:f3:63:ce:
c4:15:e6:a8:bd:98:35:11:4d:a8:10:aa:47:a9:b1:78:1e:f7:
b8:c5:19:5e:af:ab:5e:0e:87:ef:54:c3:7d:e8:54:08:04:ab:
8b:60:53:66:23:76:5b:91:19:e7:8a:11:3e:f6:07:f2:8f:06:
24:49:8c:7f:2b:d6:d5:69:45:31:73:5e:0d:b3:46:34:ef:6a:
d9:bd:87:b3:b1:f9:e8:36:83:78:57:85:1d:88:d3:fd:6b:3f:
bc:63:94:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:40 2025 by rpki-client