Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/eb5BeKaiz_AtECO-Tt6qY8ygMAQ.roa
File: eb5BeKaiz_AtECO-Tt6qY8ygMAQ.roa (raw, json)
Hash identifier: KHNrh7WH41ssOQgJhQOj9DmxhM8Vb3gfkSMyllLGJMQ=
Subject key identifier: 79:BE:41:78:A6:A2:CF:F0:2D:10:23:BE:4E:DE:AA:63:CC:A0:30:04
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 0194E3906BE911280DCF8BDC678EB0740B89
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/eb5BeKaiz_AtECO-Tt6qY8ygMAQ.roa
Signing time: Sat 08 Feb 2025 03:18:00 +0000
ROA not before: Sat 08 Feb 2025 03:18:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213702
IP address blocks: 193.150.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e3:90:6b:e9:11:28:0d:cf:8b:dc:67:8e:b0:74:0b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Feb 8 03:18:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79be4178a6a2cff02d1023be4edeaa63cca03004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:2d:70:5a:dc:92:f1:ee:7e:23:3b:92:0c:
ff:03:e0:48:6b:94:d3:c4:54:fa:81:3f:28:ad:e1:
0e:c3:d1:c1:37:8d:f3:b1:ca:50:47:45:67:c3:ef:
71:87:dc:76:99:56:de:7d:cc:7f:2d:b7:f7:43:94:
12:6b:30:87:6a:37:d8:45:d0:e8:ac:35:50:90:3a:
35:67:8d:e5:ed:ee:fa:e5:2c:d2:ec:cd:e6:ef:2a:
20:5c:52:0e:62:f9:4a:5f:6a:58:6a:8f:44:d1:33:
c3:a9:55:44:b2:e8:c0:0b:e4:5a:69:05:f6:af:e5:
da:d1:38:0d:f9:99:11:68:68:dd:96:81:be:a0:01:
9b:6d:59:bd:96:59:12:29:9f:f5:23:b9:1e:af:a1:
0f:c9:31:b2:2a:ca:e5:11:a5:6d:86:3d:32:99:b9:
97:e8:21:4c:c9:15:ed:1f:9a:8a:92:19:06:1c:cf:
0d:b6:a5:a1:a3:57:c4:1b:fb:e0:06:57:2e:37:c9:
a3:14:11:cd:61:62:1c:da:a0:9d:8f:72:e4:5e:97:
9e:47:bf:26:a8:9d:fd:5c:5e:3f:0d:4e:4d:0f:d1:
03:30:bf:62:ce:a8:25:29:3a:d0:5f:ba:77:14:6c:
37:e7:91:91:76:ee:12:84:31:d4:53:d3:09:11:c6:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BE:41:78:A6:A2:CF:F0:2D:10:23:BE:4E:DE:AA:63:CC:A0:30:04
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/eb5BeKaiz_AtECO-Tt6qY8ygMAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.70.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b7:55:81:8f:46:84:ce:d4:8f:59:e0:51:8c:d4:95:d8:b5:
ea:c5:06:70:4f:70:e6:c7:51:05:aa:57:07:2f:aa:62:7c:bf:
12:be:27:3e:9a:bc:5d:f1:21:35:eb:61:07:bd:fe:5f:de:15:
2d:50:19:41:cc:5e:ca:ce:ef:8f:95:65:3f:f2:a8:c3:ec:1f:
c3:0a:4e:8b:a4:ef:ee:06:0a:f6:c7:24:0e:37:f4:1e:f8:8c:
c4:42:a7:0d:71:97:44:c7:13:e3:a0:f5:86:62:33:cf:11:02:
9c:90:20:1d:8c:a3:3d:9d:20:f5:1c:d7:9a:16:9f:d9:d4:ad:
26:90:ab:98:13:4e:81:a3:a5:e8:74:b3:9d:97:cb:f3:b0:10:
26:87:64:99:a6:db:78:e2:ff:a8:63:e4:88:2a:46:7b:01:33:
32:5b:67:27:a2:55:ce:85:49:62:a4:73:d3:56:68:97:57:7d:
b9:fc:ba:d2:9c:c8:91:38:23:d5:eb:ea:60:76:ea:cf:20:88:
41:15:79:a3:ce:e6:50:f2:3f:b7:03:9e:52:47:68:80:78:34:
fb:fd:1c:45:9b:e3:07:8f:93:7b:b9:40:d6:73:db:ce:ee:d9:
22:b9:3a:4b:c0:0d:e8:e7:b6:3c:ea:36:62:73:d3:95:5d:43:
50:53:98:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:54:07 2025 by rpki-client