Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EuixT9ldcg3ONH8jn1jySyMuzMQ.roa
File: EuixT9ldcg3ONH8jn1jySyMuzMQ.roa (raw, json)
Hash identifier: cCyIArIo/MtmkGH2yVvTDKe4dI4Gj4OILXluoYwb1cs=
Subject key identifier: 12:E8:B1:4F:D9:5D:72:0D:CE:34:7F:23:9F:58:F2:4B:23:2E:CC:C4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0195D4603553C74609482983C0377A5C4FDB
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EuixT9ldcg3ONH8jn1jySyMuzMQ.roa
Signing time: Wed 26 Mar 2025 21:33:49 +0000
ROA not before: Wed 26 Mar 2025 21:33:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 217.79.104.0/22 maxlen: 24
217.79.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d4:60:35:53:c7:46:09:48:29:83:c0:37:7a:5c:4f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 26 21:33:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12e8b14fd95d720dce347f239f58f24b232eccc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:c6:a9:b0:52:a3:96:09:c9:89:5a:e5:12:
e0:e2:0e:fb:39:e2:f2:9e:03:f5:c6:7b:b9:91:bf:
9f:2e:e1:8f:1b:cb:79:63:79:1c:fd:c6:54:2f:9f:
96:6c:9c:6d:eb:09:ee:55:28:c9:c1:91:4f:8b:84:
e5:db:52:87:ee:f3:5b:26:e7:d9:35:18:d7:81:47:
c8:92:dd:f7:ca:76:12:81:54:77:f5:fa:6b:ff:a0:
c2:1b:16:83:22:12:03:6a:c4:e1:ad:ff:78:b8:e2:
db:99:20:cb:84:fe:6c:99:34:fc:ec:7e:70:ec:55:
5e:72:13:46:a5:cc:5b:3b:f5:d3:8f:dc:0c:79:3a:
91:92:e9:cf:d5:ea:e5:e7:44:60:52:6e:7d:7c:56:
2d:c7:29:0b:e1:5b:fc:89:d6:4f:0a:64:e1:95:67:
b0:43:5d:ce:a1:65:4d:e1:4b:07:f3:3c:93:81:59:
ee:81:ee:84:63:5d:29:62:c7:9d:3e:8d:85:b0:00:
26:04:64:35:8f:ff:f0:07:08:f4:ca:cd:0f:d2:1f:
c9:72:f4:0f:68:10:ae:6d:60:fb:4e:50:05:ad:06:
d0:67:46:85:bc:0e:de:f6:7c:10:14:d4:45:23:b5:
eb:f7:4e:45:da:ea:80:37:f3:dd:e7:47:74:ef:28:
8f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E8:B1:4F:D9:5D:72:0D:CE:34:7F:23:9F:58:F2:4B:23:2E:CC:C4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EuixT9ldcg3ONH8jn1jySyMuzMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.104.0/22
217.79.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:60:3a:ee:63:e9:30:d0:ca:77:e5:90:3a:91:b2:26:67:72:
39:05:04:2a:a4:ea:e0:7a:c5:62:53:67:0d:55:d5:84:4f:69:
b8:b1:64:bd:0f:94:c5:c4:77:5a:25:0e:aa:64:e4:c5:b3:0e:
b6:47:ce:fa:33:25:b4:0b:cd:d7:03:a1:67:8f:bb:08:db:2c:
86:dc:84:19:4a:bd:92:ad:cb:70:a5:76:a9:c6:f0:e5:91:8e:
eb:85:9d:ee:4d:13:e7:ba:91:af:dc:dc:56:c9:85:1f:b7:13:
7f:df:1c:4d:d8:68:c1:de:8b:c5:ac:fd:53:01:b7:89:61:68:
ef:60:d3:ac:68:30:df:0c:bb:04:36:e8:af:31:6a:a8:fc:ca:
f9:4c:d1:9d:56:98:36:e4:9b:6d:99:a8:26:64:40:14:7a:1e:
5f:a5:c4:aa:8f:cc:32:5a:b1:07:52:aa:1e:d4:b6:c9:4b:3d:
bd:a4:bb:5c:95:fa:38:81:f7:19:ac:f1:b6:06:05:bc:4e:dd:
5e:14:fb:f4:3c:55:a0:d0:c4:10:b3:c3:9d:c5:92:de:48:89:
f7:3b:f7:58:f3:e1:26:f3:1d:fe:88:a7:73:ce:c0:3e:ce:a1:
63:20:3d:ee:f4:38:7b:2e:d6:df:c5:b4:c0:3f:20:7e:05:c5:
05:be:eb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:46:48 2025 by rpki-client