Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/eUTTBluUxLpLmBVSiYINYc1D8TA.roa
File: eUTTBluUxLpLmBVSiYINYc1D8TA.roa (raw, json)
Hash identifier: 2/Wbsq0QnuET3HB81P0My3qX/yo8/LKbxfDvP3jYmcI=
Subject key identifier: 79:44:D3:06:5B:94:C4:BA:4B:98:15:52:89:82:0D:61:CD:43:F1:30
Certificate issuer: /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Certificate serial: 0194214443F984A8F4DCCB4DE61D4D16CAEF
Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/eUTTBluUxLpLmBVSiYINYc1D8TA.roa
Signing time: Wed 01 Jan 2025 09:48:29 +0000
ROA not before: Wed 01 Jan 2025 09:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13135
IP address blocks: 192.76.124.0/24 maxlen: 24
194.55.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:43:f9:84:a8:f4:dc:cb:4d:e6:1d:4d:16:ca:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7944d3065b94c4ba4b98155289820d61cd43f130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:9c:fd:25:9d:2e:87:7a:47:14:4a:cc:26:
31:e5:b6:bf:a2:88:44:85:6b:bd:a3:22:4d:93:f9:
3e:81:22:89:6e:4c:e8:54:72:09:eb:7a:3e:c0:07:
ce:c1:99:78:52:35:6a:36:aa:98:8c:8d:2c:1d:7b:
9f:3c:13:ef:81:47:cd:66:e2:94:24:05:ab:57:22:
24:28:7f:6d:27:f4:ff:7b:1d:37:c7:d2:19:0a:a1:
94:14:80:c3:0f:c0:c3:66:d6:2f:f7:ae:e4:0d:49:
3e:cd:44:a7:8d:0a:31:3f:c3:26:bf:ba:ce:48:8f:
13:79:cd:0e:99:f1:d8:8f:71:33:01:48:e6:ea:79:
9b:7a:09:56:88:38:11:f5:68:a4:74:61:81:16:27:
57:ca:f6:cb:10:4a:92:e8:f0:78:84:45:ad:27:94:
e4:03:90:fb:61:b6:22:80:c7:e9:58:cb:df:8e:57:
d7:84:cc:66:88:b3:d4:43:6b:23:48:91:5b:c8:30:
a4:bd:b1:be:28:23:32:5a:09:66:29:76:e4:10:e1:
10:ee:4d:bb:01:b3:14:3a:57:6c:46:7a:f9:be:09:
70:90:7f:ae:24:c9:c3:f3:b9:d7:e1:96:a3:d8:bc:
ba:33:2f:c4:ba:f2:7f:52:8d:c3:1e:85:bc:0b:fe:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:44:D3:06:5B:94:C4:BA:4B:98:15:52:89:82:0D:61:CD:43:F1:30
X509v3 Authority Key Identifier:
keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/eUTTBluUxLpLmBVSiYINYc1D8TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.76.124.0/24
194.55.156.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:08:8e:8d:b3:bd:f7:48:9b:e8:79:c7:73:8b:6b:7a:f7:5b:
a3:f8:4d:40:6d:1a:1b:c8:3f:10:c5:2a:ff:b2:f8:83:d9:aa:
88:62:66:b0:de:47:1d:7e:0d:d3:1b:f2:48:33:19:db:33:5d:
c8:1f:fb:07:3b:45:4c:00:dd:18:37:5e:30:21:b3:83:dc:13:
b3:e4:97:67:83:f2:e7:85:4d:d0:98:4e:0a:fa:d4:91:66:39:
36:10:57:06:8a:ed:43:dd:11:50:16:fe:ec:63:fe:dc:a5:ce:
3e:62:5e:8a:3d:40:51:b8:c9:fa:f4:db:84:8e:91:41:07:d0:
c0:11:63:1b:33:60:fd:21:b2:d0:b8:87:86:b9:41:c9:51:af:
5c:fe:4c:94:de:0a:e3:47:42:94:08:63:71:c6:5f:20:7e:15:
a0:38:03:7c:36:fb:bd:46:50:42:2e:8b:88:53:2b:0c:e0:93:
1d:68:51:8d:10:15:5f:9f:dd:fe:8b:a1:80:1b:88:7c:db:86:
9e:43:ad:c9:b6:30:4c:b9:b5:a1:99:ee:c1:2c:3d:e3:6b:d1:
da:d6:e9:92:cb:a7:8a:e6:6b:5b:14:dc:6c:cc:cf:b6:b5:db:
54:af:58:3e:c2:3f:c0:a8:c4:38:b0:0d:27:3b:ad:eb:c0:6f:
5d:c1:4c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:52 2025 by rpki-client