Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/0eGkt49N_vn59pWMEQQOkQaM580.roa
File: 0eGkt49N_vn59pWMEQQOkQaM580.roa (raw, json)
Hash identifier: uauCuvRP4436BT1gI3Nyw0cdRL2ieHZ9YfaNo5sIdPA=
Subject key identifier: D1:E1:A4:B7:8F:4D:FE:F9:F9:F6:95:8C:11:04:0E:91:06:8C:E7:CD
Certificate issuer: /CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Certificate serial: 019421B21E7DB33A4DCE054ED06BA4F7D8ED
Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/0eGkt49N_vn59pWMEQQOkQaM580.roa
Signing time: Wed 01 Jan 2025 11:48:28 +0000
ROA not before: Wed 01 Jan 2025 11:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 94.247.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1e:7d:b3:3a:4d:ce:05:4e:d0:6b:a4:f7:d8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1e1a4b78f4dfef9f9f6958c11040e91068ce7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:5a:b5:1c:56:ab:aa:27:68:0b:2c:b2:6b:
e7:3c:d8:33:5d:26:8b:10:13:9c:b0:8b:c2:95:47:
70:c1:85:80:19:d4:fe:6e:0e:3b:c6:28:c3:45:5f:
3c:37:ed:cc:e5:a1:bd:77:90:49:87:79:4c:88:93:
68:dd:31:fb:bf:f6:08:e5:7e:0d:45:08:6f:52:31:
08:79:dd:86:46:f1:e3:73:f4:eb:99:ae:b7:b8:be:
ec:19:c2:cb:07:73:b0:ae:1b:16:ee:5a:31:0d:af:
ce:22:09:23:1d:81:36:21:dc:22:f9:f9:c7:03:01:
0f:5e:85:2d:31:5a:9d:b2:a9:57:36:8f:f4:55:0a:
6a:3e:42:63:2b:e3:65:ff:da:9c:48:5e:4f:ce:a6:
fa:48:64:f2:74:3d:f6:79:d4:a6:ee:ad:ff:3b:ce:
0c:70:76:34:07:c7:0c:12:d4:23:a5:bc:63:44:a2:
0c:13:bc:40:9b:52:0b:43:e7:8b:ae:4f:32:34:16:
46:0f:9c:06:b7:3b:9c:1b:1e:c5:6e:44:1d:a8:fd:
9f:40:ac:9f:ed:03:d7:72:3a:96:ec:a8:fc:50:f4:
36:00:6c:6b:39:16:49:75:7a:55:73:28:c7:72:a1:
8f:3f:3d:9f:05:1a:82:88:88:11:cb:4e:51:bf:a3:
bc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E1:A4:B7:8F:4D:FE:F9:F9:F6:95:8C:11:04:0E:91:06:8C:E7:CD
X509v3 Authority Key Identifier:
keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/0eGkt49N_vn59pWMEQQOkQaM580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.141.0/24
Signature Algorithm: sha256WithRSAEncryption
26:96:96:34:8a:da:6c:fe:65:77:02:a9:86:f1:a7:07:7f:7d:
8c:22:a9:4d:c0:85:0b:b0:e1:9b:8a:1a:3d:1c:4d:aa:11:f7:
91:7a:33:12:da:66:f8:08:7f:35:be:ef:77:9c:14:bc:0b:21:
7e:c9:c7:96:5c:f9:65:f3:59:f3:51:91:2f:fa:6c:68:10:93:
f0:84:6c:a7:34:7c:86:cb:f0:8a:d5:11:35:74:08:e1:92:5a:
fd:33:ba:e0:43:85:39:13:a9:97:9b:46:b0:1c:1f:dd:90:75:
ed:4f:33:72:0c:c0:56:ee:c2:07:3c:72:6e:63:81:92:e6:bf:
51:4b:4a:4c:2a:d9:aa:d1:d2:bf:c4:f1:56:25:c1:6c:67:3a:
26:5f:07:e3:60:84:72:77:73:c3:e9:6e:91:df:69:09:e5:aa:
93:bc:1c:44:8f:4b:c3:f0:72:b1:c2:b3:06:a8:f2:9c:31:d7:
fd:63:09:e7:c0:5e:47:96:09:45:8f:58:18:32:f0:9f:f4:54:
ec:01:69:49:e0:d2:6e:57:21:3b:b8:59:bb:45:62:b7:7b:91:
2f:d3:51:06:d4:97:35:93:aa:db:45:27:a8:7c:f6:d7:8a:20:
f8:53:95:fe:fd:40:a2:e2:40:e8:3b:f0:26:cf:0f:91:01:42:
24:d1:48:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:52 2025 by rpki-client