Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/yI68EDujIxOFyqOuX8blvw1t73M.roa
File: yI68EDujIxOFyqOuX8blvw1t73M.roa (raw, json)
Hash identifier: fdlyJaD/f/aaUHncLHBs3NVNO9yt7YjoT200iG0hbj4=
Subject key identifier: C8:8E:BC:10:3B:A3:23:13:85:CA:A3:AE:5F:C6:E5:BF:0D:6D:EF:73
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0193D3AB3BCF80C8329CA2DE4861F9056BAE
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/yI68EDujIxOFyqOuX8blvw1t73M.roa
Signing time: Tue 17 Dec 2024 08:10:34 +0000
ROA not before: Tue 17 Dec 2024 08:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58172
IP address blocks: 185.210.139.0/24 maxlen: 24
193.148.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:ab:3b:cf:80:c8:32:9c:a2:de:48:61:f9:05:6b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Dec 17 08:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c88ebc103ba3231385caa3ae5fc6e5bf0d6def73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7d:71:78:1d:0d:8d:e2:10:cf:13:28:85:d9:
9a:a9:e4:ca:f7:9f:28:50:eb:e8:21:f4:37:3b:90:
5d:85:e9:44:72:80:aa:36:70:12:a9:fa:bd:d0:06:
01:da:88:41:73:20:4b:c4:09:82:09:e0:1c:c4:f3:
da:0a:e4:b1:9e:1b:80:cf:10:6a:24:e9:a2:65:c3:
7b:c5:b6:3a:50:02:4f:ee:d2:61:eb:90:03:94:b9:
7a:e9:e6:1e:af:63:a0:fc:cc:77:0e:96:71:12:36:
b6:e5:43:da:26:d9:4f:ab:aa:c5:24:8f:e9:67:e3:
21:c4:78:a6:7b:06:ca:36:13:81:00:18:94:46:de:
ef:27:8e:81:c6:a4:74:89:98:2c:70:9f:67:97:ea:
8e:08:2f:fe:85:12:c9:b2:0e:8b:4b:73:e1:42:d2:
ce:d5:81:cc:19:37:18:80:b8:d6:b8:91:64:40:8d:
d9:21:e0:11:58:ee:cf:73:95:d7:fd:84:14:8e:62:
b8:f4:ba:37:16:85:c0:ef:36:f3:1e:cb:92:a2:06:
e7:fc:f2:da:83:b5:60:8a:9f:ab:3f:e9:10:35:1c:
01:a8:d6:93:fd:3e:ac:45:82:9b:cc:d6:71:3c:79:
70:ac:41:a4:be:9b:93:fb:ef:70:5b:f3:25:29:d6:
00:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8E:BC:10:3B:A3:23:13:85:CA:A3:AE:5F:C6:E5:BF:0D:6D:EF:73
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/yI68EDujIxOFyqOuX8blvw1t73M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.139.0/24
193.148.60.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ea:d2:77:ae:5e:de:ed:ec:6c:b8:d0:61:cb:88:cd:48:31:
bc:00:2f:e3:c2:c7:2d:80:c8:9f:13:a1:b6:bc:c7:1f:41:a8:
23:e7:d2:95:ac:a0:46:b9:5a:30:7a:72:c9:4c:f3:5c:ff:9b:
f7:6b:7c:d1:e0:1b:5c:5d:00:a5:25:1a:1b:0d:00:79:3d:f0:
66:d1:fb:3d:f9:9c:76:3d:93:3a:ad:a4:62:59:d5:86:07:9e:
47:a1:a8:5e:b4:22:18:d3:4c:c0:61:d1:19:11:6d:73:b6:a1:
a0:bc:39:9f:b8:2c:32:59:09:38:ab:ee:bd:d4:24:c8:b3:d3:
14:6f:89:ff:db:39:3c:0b:5f:40:bb:43:0d:89:1e:fd:67:6a:
83:2d:8c:55:66:ab:5d:37:a1:3b:da:ff:66:84:76:86:8a:af:
86:7a:18:4c:32:04:a1:25:e5:81:38:a1:5d:03:03:70:74:14:
0a:5d:b6:51:09:3a:f8:75:78:ab:e6:9b:de:e3:ad:3e:11:94:
49:c9:03:9f:c1:c8:05:af:48:cd:d0:ff:3b:bb:6d:12:15:d6:
82:ca:92:97:8b:fb:c2:fd:5e:b6:9d:68:4b:d6:c2:97:1f:1f:
6d:29:0d:91:26:d8:11:31:40:e7:d8:98:cd:cf:62:92:82:13:
e2:dc:8d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:46 2025 by rpki-client