Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/eG6hHlrMZ5LIXTfGfgot4IiG4ek.roa
File: eG6hHlrMZ5LIXTfGfgot4IiG4ek.roa (raw, json)
Hash identifier: yIhVuzNldSheNj9t68+efRcjN+q//cUeoESSltGdZEM=
Subject key identifier: 78:6E:A1:1E:5A:CC:67:92:C8:5D:37:C6:7E:0A:2D:E0:88:86:E1:E9
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 019427B54F2E1BE7E92065E2FF1A7EA8A197
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/eG6hHlrMZ5LIXTfGfgot4IiG4ek.roa
Signing time: Thu 02 Jan 2025 15:49:41 +0000
ROA not before: Thu 02 Jan 2025 15:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25421
IP address blocks: 193.35.248.0/22 maxlen: 22
193.35.248.0/24 maxlen: 24
193.35.249.0/24 maxlen: 24
193.35.250.0/24 maxlen: 24
193.35.252.0/22 maxlen: 22
193.35.252.0/24 maxlen: 24
193.35.253.0/24 maxlen: 24
193.35.254.0/24 maxlen: 24
193.35.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:4f:2e:1b:e7:e9:20:65:e2:ff:1a:7e:a8:a1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Jan 2 15:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=786ea11e5acc6792c85d37c67e0a2de08886e1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:1f:de:37:d0:fc:ac:d8:e2:58:48:54:c4:
23:5c:46:09:f9:1e:fa:f2:17:6b:75:f7:9a:a9:f3:
ac:92:e9:a6:34:96:43:10:47:4a:28:f4:27:4c:fa:
98:ee:61:ba:26:ce:a6:d2:3e:57:78:82:80:1c:a1:
6c:a6:11:ea:be:2f:cc:9c:32:09:0b:d7:76:c4:28:
15:f2:89:5c:33:76:68:3f:4d:4c:58:1b:8d:21:c7:
49:5d:44:ae:a3:4c:79:62:f3:df:1a:8c:d8:be:71:
f4:61:8d:f2:c0:fd:ce:a2:04:62:db:71:43:b0:00:
85:5d:d9:be:9e:2a:47:44:ea:6c:a9:2e:90:c9:45:
0b:fb:c3:0d:95:a2:2a:6a:86:4e:a7:ca:02:ae:78:
de:11:97:55:e1:06:14:13:c0:ad:77:8c:81:af:24:
07:9d:4f:38:90:72:a0:dd:19:02:75:1b:d0:ea:5c:
eb:02:fe:f6:3e:76:d6:17:b4:26:eb:30:50:30:06:
25:9f:f6:28:ad:f1:9e:81:37:7a:95:5a:1b:34:1b:
75:a0:c5:ce:58:4a:a3:17:8b:f9:61:a9:0a:92:18:
7f:84:c8:51:6c:3e:ff:28:43:e5:78:48:a2:5f:43:
6b:a6:89:c3:8d:da:a2:fa:20:c3:86:f2:5e:27:ab:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6E:A1:1E:5A:CC:67:92:C8:5D:37:C6:7E:0A:2D:E0:88:86:E1:E9
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/eG6hHlrMZ5LIXTfGfgot4IiG4ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.248.0/21
Signature Algorithm: sha256WithRSAEncryption
35:fa:b7:c6:ec:5d:44:bb:8c:2e:1e:33:ae:e8:15:00:7e:cd:
14:5e:37:4b:0a:76:d8:c9:41:99:ff:6c:bb:1d:f9:01:47:ec:
c8:6b:1b:c7:fa:1a:2f:4f:e3:e7:5a:96:53:ce:bd:dd:38:c9:
6d:d7:01:3f:a5:b9:76:07:8f:7f:ba:44:c1:94:e7:c5:b8:3f:
09:7f:79:0f:ae:73:95:f3:d1:ce:b0:f6:68:eb:65:12:7e:41:
be:3d:eb:82:f0:5e:70:8c:d8:a4:20:d0:11:9a:bf:26:50:a6:
ea:d2:fd:ea:c6:0e:1b:04:7a:db:af:f1:ce:e6:4a:5b:10:0e:
f4:18:13:04:f9:a2:d4:5f:43:6b:b5:b5:ab:e4:20:2e:68:c1:
35:10:43:8d:87:12:b9:e1:a4:a5:2b:c0:19:1c:62:e6:a5:40:
80:36:b0:d0:fd:2c:8d:34:63:ae:2a:21:6f:c7:32:50:ed:b3:
9a:99:b8:fc:be:d4:e0:78:04:1c:e5:35:35:b2:5a:dc:00:c7:
29:1f:21:a6:11:a0:da:64:8f:a4:23:26:dd:e0:d5:b8:d7:8d:
ff:fe:d0:6b:3e:85:b1:82:c6:49:50:d9:7c:25:e4:05:2b:2a:
c1:c7:9e:cc:b0:b8:e0:d8:d1:f2:35:3c:71:4e:8e:2b:80:3b:
ae:93:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:03:49 2025 by rpki-client