Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/CEi11oDah-Xj3CSyKJ8iomoOYoM.roa
File: CEi11oDah-Xj3CSyKJ8iomoOYoM.roa (raw, json)
Hash identifier: ez/wVHjqJzETmetoc7ih07UD25PAbuMs0U3dxKCFOXE=
Subject key identifier: 08:48:B5:D6:80:DA:87:E5:E3:DC:24:B2:28:9F:22:A2:6A:0E:62:83
Certificate issuer: /CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Certificate serial: 019426D8A7E923E52220276A03DD0D073476
Authority key identifier: E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/CEi11oDah-Xj3CSyKJ8iomoOYoM.roa
Signing time: Thu 02 Jan 2025 11:48:40 +0000
ROA not before: Thu 02 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49588
IP address blocks: 176.101.192.0/19 maxlen: 19
193.169.134.0/24 maxlen: 24
193.169.135.0/24 maxlen: 24
2001:67c:2c44::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:a7:e9:23:e5:22:20:27:6a:03:dd:0d:07:34:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Validity
Not Before: Jan 2 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0848b5d680da87e5e3dc24b2289f22a26a0e6283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:47:cc:f0:6e:97:4a:05:df:d3:8b:6b:41:
9e:44:5c:54:19:e2:27:c6:d4:97:3f:4d:12:18:37:
d2:4a:ac:bb:8a:07:c7:60:a4:1d:59:b7:7a:41:1f:
43:12:86:00:2e:83:e2:05:10:87:7e:82:b3:4c:7a:
bb:ff:3f:52:94:e3:fa:90:89:3b:1b:a6:e1:10:41:
9e:a4:5a:01:84:73:a9:48:f1:2a:c9:e4:df:7b:7b:
38:a8:75:f4:7a:d7:64:be:42:f2:c0:d7:22:71:83:
f2:6d:6b:b6:45:a4:69:b9:f3:23:53:c4:22:f9:23:
57:58:9c:27:b9:45:8b:e7:9e:36:1d:ec:55:87:e7:
14:c4:3e:63:b6:0c:a2:d1:1c:f8:84:af:28:76:e0:
a2:02:c6:18:9d:53:3f:91:8d:e6:54:22:8f:de:bd:
09:87:29:69:10:31:c1:cb:b5:0b:6a:59:39:e9:53:
17:8f:c6:dd:ec:6b:d9:14:cd:af:5f:a1:54:7a:2b:
44:42:56:bd:2a:3a:0e:08:f4:72:e6:dd:f7:17:b0:
5a:58:72:97:96:1e:16:3d:bf:3d:91:3c:a6:7e:1e:
cb:ce:f8:cd:23:22:00:ad:87:d4:62:c3:6e:11:cf:
f4:f6:86:70:b6:be:14:80:9e:ae:45:ec:36:f3:55:
de:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:48:B5:D6:80:DA:87:E5:E3:DC:24:B2:28:9F:22:A2:6A:0E:62:83
X509v3 Authority Key Identifier:
keyid:E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/CEi11oDah-Xj3CSyKJ8iomoOYoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.192.0/19
193.169.134.0/23
IPv6:
2001:67c:2c44::/48
Signature Algorithm: sha256WithRSAEncryption
80:71:26:0a:47:9a:06:19:9f:d5:bd:2b:bd:78:d3:4f:df:c1:
a9:f7:a1:24:1a:89:f8:20:bf:99:2e:31:f4:05:5e:e6:81:cd:
e8:6e:80:44:a5:b9:e2:2b:ab:97:4a:49:db:af:df:30:ae:5b:
bc:cc:13:4f:17:17:df:02:ef:1d:57:fb:ac:66:96:92:33:bf:
29:9b:4c:79:51:16:30:48:9c:e1:9d:cb:26:d4:9c:0a:9a:ca:
ac:91:67:df:66:44:f9:53:45:1a:15:d5:6b:62:61:2b:fd:21:
99:97:b1:14:dd:0d:00:e7:a6:56:a6:50:bd:0d:6b:78:29:10:
ba:bd:78:66:a5:87:84:6e:a0:02:a5:7c:88:9e:32:df:bc:b1:
fb:c7:d2:8f:04:5f:64:b8:4f:e4:d8:07:a7:dc:55:53:b1:c4:
48:4f:85:f6:f2:58:07:9d:3e:97:d0:7d:60:a9:a9:b3:3a:a4:
1d:e9:e5:04:d6:c8:83:74:09:56:b5:ec:b0:20:72:31:4d:bd:
22:42:84:fe:a7:b4:f3:87:a7:82:84:9f:99:c5:b4:3f:d3:82:
fc:81:c3:34:fe:d4:4b:59:43:1b:4f:f5:c0:cf:bf:1c:9e:06:
d5:68:37:45:d0:15:b8:d9:bd:4e:05:be:e3:7c:82:59:da:bb:
f9:b8:7a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:31 2025 by rpki-client