Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/72473f-a179-4ca9-b662-df7f7661ccd0/1/eeIH7JGeZBaR-3VIeSdJrxlmcvA.roa
File: eeIH7JGeZBaR-3VIeSdJrxlmcvA.roa (raw, json)
Hash identifier: IDo55aXvLZpD9iczwXRWfsCjEyRcy4SyVvilIzYp19A=
Subject key identifier: 79:E2:07:EC:91:9E:64:16:91:FB:75:48:79:27:49:AF:19:66:72:F0
Certificate issuer: /CN=8e26abbc575f2ef648946156290842e5eb8711da
Certificate serial: 0649C173
Authority key identifier: 8E:26:AB:BC:57:5F:2E:F6:48:94:61:56:29:08:42:E5:EB:87:11:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jiarvFdfLvZIlGFWKQhC5euHEdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/72473f-a179-4ca9-b662-df7f7661ccd0/1/eeIH7JGeZBaR-3VIeSdJrxlmcvA.roa
Signing time: Sat 01 Jan 2022 16:06:10 +0000
ROA not before: Sat 01 Jan 2022 16:06:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200851
IP address blocks: 185.93.244.0/22 maxlen: 24
2a04:23c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105496947 (0x649c173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e26abbc575f2ef648946156290842e5eb8711da
Validity
Not Before: Jan 1 16:06:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79e207ec919e641691fb7548792749af196672f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5f:08:88:4f:1d:ac:7f:5a:d9:3b:d6:60:55:
a4:9e:7e:9f:13:93:c7:87:cd:8c:8a:93:0c:19:15:
34:36:2a:66:a8:0b:cf:52:13:d8:2c:81:81:6b:92:
c0:39:d9:78:30:81:df:e4:d4:72:0f:4d:f9:da:19:
41:75:8d:a2:09:da:73:d6:4c:a7:c4:bd:1b:6b:c1:
c9:04:0b:b6:66:7d:b0:2f:5c:a5:ca:c5:ba:c2:a6:
6a:c4:17:19:01:59:28:17:a8:c0:c0:b5:e1:b6:0d:
aa:9e:51:93:92:b3:20:9a:bb:05:53:a6:b0:43:d2:
d1:6d:4d:78:3e:23:21:09:aa:cd:e9:51:a8:fe:90:
94:e3:35:08:a9:9a:38:bb:af:fb:6c:f6:83:0f:04:
2e:a7:c7:c0:44:f2:4b:f1:55:5e:54:ac:dd:66:53:
a7:36:ec:28:69:f2:01:7f:80:41:72:0d:33:48:2b:
98:9b:7a:3c:96:3b:cc:31:46:bc:a5:27:b0:08:72:
74:d3:0b:c4:31:93:ab:b2:41:a4:2f:83:2e:bd:93:
0d:3e:40:84:05:ca:6a:0b:41:2d:63:c9:48:28:ea:
c3:94:93:74:1a:cb:14:f0:36:3a:58:78:4e:cf:20:
b8:a1:34:8e:e9:63:fc:21:41:a3:a0:db:c8:75:88:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E2:07:EC:91:9E:64:16:91:FB:75:48:79:27:49:AF:19:66:72:F0
X509v3 Authority Key Identifier:
keyid:8E:26:AB:BC:57:5F:2E:F6:48:94:61:56:29:08:42:E5:EB:87:11:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jiarvFdfLvZIlGFWKQhC5euHEdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/72473f-a179-4ca9-b662-df7f7661ccd0/1/eeIH7JGeZBaR-3VIeSdJrxlmcvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/72473f-a179-4ca9-b662-df7f7661ccd0/1/jiarvFdfLvZIlGFWKQhC5euHEdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.244.0/22
IPv6:
2a04:23c0::/29
Signature Algorithm: sha256WithRSAEncryption
40:fd:bd:71:ae:2c:5e:2d:d8:62:8d:1a:80:bf:b0:5e:f1:fd:
06:91:84:67:ed:a4:2e:64:4d:08:3d:52:57:f0:6a:d7:80:cc:
a3:ef:0d:cb:d7:e1:0b:f5:c0:cf:da:df:85:9d:1e:80:47:a8:
39:b1:dc:f6:3d:ff:53:80:71:b4:24:da:d8:73:ff:22:52:c4:
3e:03:2a:29:ce:23:6f:f1:14:6f:b1:b3:56:45:aa:02:c3:65:
4f:98:fa:f3:35:de:7b:a9:53:4e:f2:c5:b4:bd:e9:79:3b:ab:
32:8b:8a:85:58:8a:f4:47:6e:88:8e:7c:91:6e:85:f4:4c:fc:
a3:cc:36:4d:c7:06:5e:e5:98:b3:0d:a5:fa:b3:24:2d:24:75:
36:f0:81:61:bf:10:9a:d4:8d:63:42:65:41:ff:87:4e:4a:e2:
51:1b:69:f7:76:85:38:9c:54:b3:d6:68:56:5c:d2:55:93:fe:
53:b3:62:3f:60:99:a4:ea:f8:fb:8a:a5:fe:ba:65:85:13:b2:
96:3a:6c:f7:54:a8:7b:14:08:57:6c:02:44:f9:f9:81:4d:08:
36:14:b4:4b:19:60:94:80:31:6d:42:f1:99:ba:ef:f6:27:30:
d6:4d:56:3a:23:99:71:cc:96:c9:81:0f:de:24:fc:48:4a:e3:
a6:62:4c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:31 2025 by rpki-client