Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa
File: EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa (raw, json)
Hash identifier: xYPqHPCAO/XyHDtjaojjFFvTaUnv2cV0xvZkEmEN/Lc=
Subject key identifier: 10:A6:43:08:11:52:CD:39:D4:67:ED:44:66:0F:67:F0:46:7C:A2:A7
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 019421B18C29EB230BBC92E4B069CED72498
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa
Signing time: Wed 01 Jan 2025 11:47:51 +0000
ROA not before: Wed 01 Jan 2025 11:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39205
IP address blocks: 84.247.127.0/24 maxlen: 24
188.240.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:8c:29:eb:23:0b:bc:92:e4:b0:69:ce:d7:24:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jan 1 11:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10a643081152cd39d467ed44660f67f0467ca2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:38:63:cf:c2:33:a7:f2:39:37:fd:b5:51:
4e:e8:8b:44:9a:3f:97:29:4d:55:c1:14:8f:59:94:
4e:f3:1e:fc:9a:c4:f7:c2:52:0d:01:72:4e:af:84:
32:08:9d:03:3f:83:0f:a9:f9:3f:ff:83:a5:54:0e:
8a:90:74:d7:96:5d:14:76:9c:5a:d5:4c:ab:58:18:
78:ae:c3:e9:5e:96:1c:13:85:62:55:71:ee:63:ec:
e6:fe:1f:49:46:e6:09:1d:99:78:67:c6:2f:9d:3d:
1e:78:fc:f6:48:a1:12:24:3a:b9:15:35:aa:7e:67:
d9:5b:19:6c:c7:eb:69:5c:d3:47:87:e2:d1:7c:33:
f0:a1:ba:d3:79:d6:a9:ac:f5:08:8a:3a:02:26:f1:
b4:76:9a:dd:73:c2:4e:09:34:d4:4e:30:56:9e:50:
12:26:22:c8:61:78:23:1f:e1:c3:f6:0d:b3:e9:d5:
36:08:a8:21:c4:ba:06:a9:3d:7f:d5:48:c0:33:47:
a1:69:46:a9:f8:d2:10:eb:fc:ce:f2:a5:7d:4a:fe:
58:42:e6:ef:c6:66:08:10:3f:e8:3d:ea:9a:51:ce:
e9:41:93:9d:25:58:78:80:d6:44:36:b9:01:10:1c:
e9:d5:4b:c7:8c:ea:7b:61:b1:55:da:09:6f:2c:0d:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A6:43:08:11:52:CD:39:D4:67:ED:44:66:0F:67:F0:46:7C:A2:A7
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.127.0/24
188.240.8.0/23
Signature Algorithm: sha256WithRSAEncryption
54:6f:e7:91:b9:8a:18:9d:93:4a:c7:7f:ed:e2:0f:3b:59:db:
d6:16:28:01:13:f8:bb:9a:32:7c:a8:dc:02:0e:f6:4f:29:11:
29:00:d9:2e:0f:36:cf:d4:bf:e2:3b:c6:1b:2c:83:bf:7d:d2:
80:71:b7:98:10:eb:e6:e3:d0:90:3a:12:1d:46:72:31:e2:4a:
af:a3:31:73:71:8e:17:77:0d:3a:f0:77:56:6f:46:f0:92:a5:
34:c4:9c:e8:51:e2:dc:81:2b:49:ce:a7:43:a7:e1:55:b9:63:
17:46:3b:76:21:5e:01:ec:a5:13:1e:52:b2:e7:26:41:5b:f5:
e1:ff:00:6c:ad:38:e1:67:36:1d:6e:f0:f8:d6:30:1a:99:55:
b4:c4:19:22:59:53:e3:c8:a3:c4:69:f8:bf:a3:d7:77:e1:5d:
77:4f:45:16:4f:08:c5:c2:10:d2:4d:a8:93:56:09:00:51:da:
61:02:d2:6c:04:75:be:17:f1:f3:1d:e9:ec:33:ea:e1:a6:11:
7e:82:d3:29:55:96:c5:3c:5c:05:ed:ac:52:81:d1:8a:80:88:
3c:62:41:dc:0c:55:e2:7b:aa:1f:22:c0:11:7f:15:f6:6d:9f:
a6:54:4f:cf:bd:84:d1:da:2e:ab:58:33:a7:ed:1b:47:bd:fc:
a6:ee:9b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:31:48 2025 by rpki-client