Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/eUsTXbqb5FxmHGZJ66DkgaC_YRA.roa
File: eUsTXbqb5FxmHGZJ66DkgaC_YRA.roa (raw, json)
Hash identifier: nf4uiKKbIAHL3trEpJ2kw0yv+URJfeei9oX5hcaexZU=
Subject key identifier: 79:4B:13:5D:BA:9B:E4:5C:66:1C:66:49:EB:A0:E4:81:A0:BF:61:10
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01954A1AB893D0CA9341B5B2340A9327F813
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/eUsTXbqb5FxmHGZJ66DkgaC_YRA.roa
Signing time: Fri 28 Feb 2025 01:10:19 +0000
ROA not before: Fri 28 Feb 2025 01:10:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 178.22.26.0/24 maxlen: 24
188.95.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4a:1a:b8:93:d0:ca:93:41:b5:b2:34:0a:93:27:f8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Feb 28 01:10:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=794b135dba9be45c661c6649eba0e481a0bf6110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:b8:0f:64:54:3d:df:e3:54:74:d2:15:e4:
ce:59:a4:e8:ba:29:66:c8:6c:e6:8f:4d:b3:d6:71:
7d:d8:c7:31:32:15:b6:c4:8a:5f:fe:b6:66:91:60:
04:f9:77:b6:aa:82:b4:c1:bc:85:1a:a5:ef:dc:46:
5c:79:19:3a:3a:8d:c1:30:8e:f5:aa:2d:d3:7c:48:
b9:89:39:e0:6e:47:32:81:2c:e1:86:b0:94:22:fc:
66:d9:7f:ad:36:db:e3:99:ec:5b:e3:26:b8:47:a6:
23:f1:9c:eb:68:b6:2d:50:7c:93:f7:d9:e6:ef:26:
6d:d2:59:63:f0:91:4f:6c:c8:2a:eb:d1:86:99:13:
25:f7:fa:6d:fd:34:6f:f4:5e:c6:6d:09:4e:a9:3b:
af:a2:3a:dc:87:0e:99:69:ef:81:c8:f8:e4:d0:bf:
95:43:7f:00:6b:5b:c3:bb:52:5f:9a:49:b0:66:7c:
c5:79:c2:4d:f9:86:33:34:12:33:b7:6a:5f:9c:ad:
d4:dd:3a:31:f5:17:a4:cc:4f:d2:cc:a8:36:09:ec:
9a:3d:30:f9:f8:8e:d5:f5:96:f9:f5:a7:90:47:c3:
67:7d:d1:9c:6f:cc:18:27:29:7c:7d:53:42:2a:c2:
cc:ab:3c:15:bf:09:44:95:2b:da:7d:f8:7f:b7:97:
39:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4B:13:5D:BA:9B:E4:5C:66:1C:66:49:EB:A0:E4:81:A0:BF:61:10
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/eUsTXbqb5FxmHGZJ66DkgaC_YRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.26.0/24
188.95.70.0/24
Signature Algorithm: sha256WithRSAEncryption
37:df:ef:3c:aa:f9:02:d9:1d:32:b4:5d:29:a2:20:df:63:a7:
fb:89:d4:38:78:06:c4:4e:b2:61:3b:93:2f:78:3d:dc:d5:bf:
54:4f:91:49:a9:a0:d6:30:23:35:76:9c:df:af:02:55:2e:c0:
0e:42:8d:3c:7c:fe:ac:ef:16:3b:76:ed:83:64:36:72:dc:6e:
34:e7:df:ca:82:15:42:06:e1:29:9c:e4:33:4a:f9:4a:c2:0e:
aa:5e:24:65:29:2e:1a:e4:3e:6b:af:9a:66:f5:46:95:1c:af:
65:e6:a9:f3:30:e8:b7:f4:27:d6:76:3c:1e:4d:a7:29:47:46:
f5:cf:96:ee:7f:eb:e1:99:fd:35:d8:55:26:d1:8a:9e:f8:94:
90:51:c5:7d:a6:2a:4d:75:dd:70:77:06:9e:2d:19:d9:64:6a:
e7:48:24:d3:9f:7b:f0:90:cb:24:ff:b0:42:bf:b7:6b:a7:18:
d4:ee:1f:95:59:be:56:b2:1e:86:e8:e2:58:ec:f3:e4:c5:87:
81:2c:74:0b:5d:48:05:2a:42:cd:e7:67:3b:fc:3b:73:3b:a2:
3e:7a:9b:bb:e1:f0:65:44:fe:09:27:11:bd:8e:a6:7d:5b:73:
78:62:26:e5:9c:d0:ab:b2:63:5d:1b:5b:ec:2c:39:7d:dd:4a:
84:5f:8e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:56:04 2025 by rpki-client