Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/EAh3dWPr289o6WyhzUOp_EpUTdg.roa
File: EAh3dWPr289o6WyhzUOp_EpUTdg.roa (raw, json)
Hash identifier: S3TcKfhPfL287wmxiB3jCkaKknNXhPzw/nzUaFFvi28=
Subject key identifier: 10:08:77:75:63:EB:DB:CF:68:E9:6C:A1:CD:43:A9:FC:4A:54:4D:D8
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0194266B5F4B399E776EB09597069CEA1C4F
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/EAh3dWPr289o6WyhzUOp_EpUTdg.roa
Signing time: Thu 02 Jan 2025 09:49:18 +0000
ROA not before: Thu 02 Jan 2025 09:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 93.152.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5f:4b:39:9e:77:6e:b0:95:97:06:9c:ea:1c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 09:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1008777563ebdbcf68e96ca1cd43a9fc4a544dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:e4:5a:90:61:23:fe:49:0a:1d:d9:be:9e:
95:95:22:0b:8f:70:38:e2:7d:dd:d8:5a:f3:c8:27:
30:79:9b:92:ae:8e:ab:af:a3:4c:19:1e:71:ac:d7:
27:26:bb:26:3a:1c:e8:14:cb:92:dc:73:5c:d0:11:
3a:9f:e5:bc:0f:34:57:aa:85:4a:ec:5e:e9:a5:18:
0b:51:4b:ae:5c:a3:8e:4e:93:68:73:ad:bd:98:be:
82:ad:d1:f0:b3:97:f8:97:f0:15:e4:d9:8d:4d:a9:
87:cf:bc:13:f1:cd:72:55:f6:4b:2e:3f:b7:eb:4d:
1d:fe:a4:00:6d:6d:03:47:87:d8:38:5d:02:bc:bc:
ce:c9:3f:5e:ab:07:a6:ed:ee:6d:cb:10:60:97:cf:
38:01:25:8c:2f:20:e1:cf:a0:a6:7d:32:91:bd:0d:
0d:68:70:7c:03:0b:ee:77:9a:03:53:14:fc:23:23:
8e:ba:db:00:f0:78:e8:cd:e9:93:a1:18:9a:7a:83:
91:83:2e:55:bd:b6:86:f6:a0:b8:63:c9:5a:7f:92:
55:a7:f6:5c:88:a1:fd:02:45:6f:64:90:32:e0:2d:
de:2c:23:cc:51:09:ce:b4:64:8e:1d:d4:82:0b:a9:
d1:4e:48:36:09:cb:ea:f4:33:13:4c:c9:36:9f:2a:
75:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:08:77:75:63:EB:DB:CF:68:E9:6C:A1:CD:43:A9:FC:4A:54:4D:D8
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/EAh3dWPr289o6WyhzUOp_EpUTdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.234.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:07:64:c3:7b:06:ec:6c:23:5f:0c:48:51:a8:f9:9e:b8:52:
67:e3:b2:2c:27:77:c5:3a:eb:5a:fa:6b:01:e4:e2:76:98:01:
88:91:5f:a1:3c:76:46:19:34:f8:03:00:30:bd:22:61:98:e1:
b5:b3:bd:aa:f9:51:72:79:cc:84:45:bc:04:c5:80:af:20:ae:
a3:0a:88:2f:e3:5c:9f:d5:5a:87:77:60:23:91:8f:4b:2d:7e:
6b:3e:89:cb:e3:fc:02:bd:ed:a0:0c:a9:29:5a:5e:aa:a5:47:
e2:2e:52:d9:9f:98:c9:27:08:f6:b6:64:9f:18:95:f2:ad:c8:
17:0d:47:23:27:16:05:f6:19:2c:64:fc:c2:76:c5:c5:a2:f2:
73:05:37:a0:a0:4f:0d:10:2c:86:ae:e3:f5:cc:18:9e:70:20:
65:fd:27:df:e6:ac:98:ea:20:e2:13:73:5d:b7:73:0f:e5:cb:
9e:e2:15:19:e9:80:5b:50:36:97:55:6e:98:cd:43:ca:5f:00:
95:f2:69:ee:c2:d8:55:8c:db:38:6f:8a:3b:0c:45:48:70:33:
f4:e7:02:0c:7e:86:e9:0b:32:cd:2f:09:b9:f3:38:10:0a:dc:
c6:60:a6:a2:76:11:5d:a6:59:85:65:81:7f:60:25:73:0d:85:
ec:7e:28:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma19LOZ53brCVlwac6hxPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0
MzQwYjMwHhcNMjUwMTAyMDk0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDA4Nzc3NTYzZWJkYmNmNjhlOTZjYTFjZDQzYTlmYzRhNTQ0ZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2HkWpBhI/5JCh3Zvp6VlSILj3A4
4n3d2FrzyCcweZuSro6rr6NMGR5xrNcnJrsmOhzoFMuS3HNc0BE6n+W8DzRXqoVK
7F7ppRgLUUuuXKOOTpNoc629mL6CrdHws5f4l/AV5NmNTamHz7wT8c1yVfZLLj+3
600d/qQAbW0DR4fYOF0CvLzOyT9eqwem7e5tyxBgl884ASWMLyDhz6CmfTKRvQ0N
aHB8Awvud5oDUxT8IyOOutsA8HjozemToRiaeoORgy5VvbaG9qC4Y8laf5JVp/Zc
iKH9AkVvZJAy4C3eLCPMUQnOtGSOHdSCC6nRTkg2Ccvq9DMTTMk2nyp1qwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBAId3Vj69vPaOlsoc1DqfxKVE3YMB8GA1UdIwQY
MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt
NGE2Zjg2ODMyNjVjLzEvRUFoM2RXUHIyODlvNld5aHpVT3BfRXBVVGRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj
LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZjqMA0G
CSqGSIb3DQEBCwUAA4IBAQB9B2TDewbsbCNfDEhRqPmeuFJn47IsJ3fFOuta+msB
5OJ2mAGIkV+hPHZGGTT4AwAwvSJhmOG1s72q+VFyecyERbwExYCvIK6jCogv41yf
1VqHd2AjkY9LLX5rPonL4/wCve2gDKkpWl6qpUfiLlLZn5jJJwj2tmSfGJXyrcgX
DUcjJxYF9hksZPzCdsXFovJzBTegoE8NECyGruP1zBiecCBl/Sff5qyY6iDiE3Nd
t3MP5cue4hUZ6YBbUDaXVW6YzUPKXwCV8mnuwthVjNs4b4o7DEVIcDP05wIMfobp
CzLNLwm58zgQCtzGYKaidhFdplmFZYF/YCVzDYXsfiiO
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:00:50 2025 by rpki-client