Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/2Eku4G4QcFntTeBnPdjQt16QDE8.roa
File: 2Eku4G4QcFntTeBnPdjQt16QDE8.roa (raw, json)
Hash identifier: /h0JlWzojsWTrZMYWqaSRG6HTNQqdKotAsOYfDdHfIU=
Subject key identifier: D8:49:2E:E0:6E:10:70:59:ED:4D:E0:67:3D:D8:D0:B7:5E:90:0C:4F
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 019424B4073E39F902326C2D487A96BE7C29
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/2Eku4G4QcFntTeBnPdjQt16QDE8.roa
Signing time: Thu 02 Jan 2025 01:49:25 +0000
ROA not before: Thu 02 Jan 2025 01:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33387
IP address blocks: 147.189.142.0/24 maxlen: 24
185.127.93.0/24 maxlen: 24
185.127.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:07:3e:39:f9:02:32:6c:2d:48:7a:96:be:7c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 2 01:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8492ee06e107059ed4de0673dd8d0b75e900c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:49:f8:c8:27:03:6d:b9:f3:38:cf:23:30:85:
98:23:78:08:b4:60:71:9f:60:ed:44:12:56:6c:d9:
e4:11:65:e8:40:f6:7a:68:e2:6b:71:8d:c6:39:88:
b1:14:ec:aa:46:90:11:99:1f:79:a4:10:f4:44:6d:
bc:6c:5a:e0:41:2a:91:d2:3b:0c:40:70:21:8e:33:
16:d2:3b:f9:d4:6f:be:16:00:49:15:dd:2c:1c:37:
0f:ed:76:72:fd:b2:7e:2e:9a:d5:e6:a3:8a:2d:42:
8e:25:c4:83:c4:79:8f:63:db:ee:9c:68:90:aa:71:
6d:19:02:35:2d:ca:55:66:6a:56:61:7b:38:82:81:
b2:c9:b9:ea:73:ff:e1:5e:c7:8d:ef:c0:ab:3c:ac:
34:cb:5f:2c:9f:df:a2:6d:3c:3c:4d:92:81:4a:6c:
03:41:3a:36:bd:b3:8e:7d:ce:e9:63:64:8b:98:c1:
4d:d5:94:20:c1:3c:42:ee:5f:11:31:ab:4d:c8:e8:
9f:04:1b:42:93:f3:db:ad:e7:a7:1d:52:61:f3:37:
4f:ce:ca:5c:c7:4e:0c:f6:06:f9:26:e3:62:82:33:
b5:d3:fe:b5:2a:93:10:a6:aa:ff:5e:d1:9e:b7:fa:
d8:e0:17:bc:b2:65:e1:25:d9:a2:73:61:7f:fa:d2:
e4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:49:2E:E0:6E:10:70:59:ED:4D:E0:67:3D:D8:D0:B7:5E:90:0C:4F
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/2Eku4G4QcFntTeBnPdjQt16QDE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.142.0/24
185.127.93.0-185.127.94.255
Signature Algorithm: sha256WithRSAEncryption
71:c0:56:97:17:31:9b:29:82:bc:61:d1:6e:f6:58:f4:0e:d5:
bb:0c:2e:5b:1a:62:d6:e3:c9:0d:ff:05:97:ea:5c:09:7c:4f:
33:75:bf:02:7f:b0:4f:72:5a:e7:ca:23:90:30:56:48:bc:33:
d1:2b:2d:73:e9:c9:cb:07:34:ad:86:1b:71:26:7f:3d:a7:bc:
c7:57:a8:68:a6:c3:c8:37:57:88:61:2e:c7:1a:4c:07:7c:1c:
70:24:97:49:6e:d7:d3:bd:f8:35:cc:ea:24:f9:1c:3b:ed:b0:
05:b3:d1:7a:7a:93:b4:a1:27:fb:6c:31:ef:b5:23:ae:4b:f4:
31:61:57:23:3d:98:47:0d:cc:d0:98:14:1f:4f:90:a3:77:f6:
d7:eb:84:54:ff:98:e6:35:a2:cb:23:9c:f8:cd:03:c2:43:e6:
af:55:6e:bf:1b:87:14:23:d2:5c:cc:93:64:aa:3f:b9:db:68:
bd:96:1b:16:25:d1:f2:d5:e5:d6:53:3d:d7:9c:e8:f9:a6:42:
7d:82:eb:de:d4:4d:b9:a7:2c:f4:11:d0:92:5d:d6:14:32:06:
c0:ae:5e:a2:21:3d:97:eb:a1:4d:70:3d:7e:c0:b9:a3:df:23:
8b:e4:e0:31:55:03:05:77:1b:0d:e1:f3:e8:11:d7:56:68:04:
5a:f9:94:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:04:24 2025 by rpki-client