Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa
File: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (raw, json)
Hash identifier: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=
Subject key identifier: 7B:26:FA:7A:AA:69:2C:B3:F1:31:BA:C2:01:23:39:1D:0D:D0:73:3D
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 019421B2520686B54E103B6BD18ED23FDE68
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203412
IP address blocks: 194.55.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:52:06:86:b5:4e:10:3b:6b:d1:8e:d2:3f:de:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b26fa7aaa692cb3f131bac20123391d0dd0733d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:6b:f1:08:02:d7:10:f3:3d:78:ef:9e:aa:
c5:c9:50:0c:c5:5b:76:87:a2:6e:3c:5d:e7:a5:73:
b4:08:ac:46:11:ec:f0:49:37:fa:81:60:0c:f5:c1:
76:7e:8b:cf:6a:65:4c:bc:ee:17:74:5d:58:e7:72:
e2:23:4e:71:8a:f4:86:b2:dc:35:be:c3:83:03:32:
56:a2:82:4f:21:8e:94:ec:23:23:d9:26:39:d5:86:
2f:52:a0:37:2b:d7:ea:e2:41:18:b3:94:38:26:79:
e2:65:81:ed:2d:8d:47:0f:f2:14:af:8b:95:e1:eb:
31:ba:91:c2:b4:46:f7:38:d3:40:87:d5:cf:42:d5:
7a:8e:9d:de:a1:69:c9:90:82:62:f5:07:7a:21:3e:
43:ef:c5:5f:0c:75:6f:09:2e:ec:3d:e6:34:f7:f0:
f4:c4:fd:b7:94:41:5d:1b:f0:6e:f9:85:3d:7c:c9:
f8:a1:c1:e1:bc:a9:4d:99:e6:73:15:da:52:58:e5:
04:e1:25:10:b1:32:8a:74:af:85:fb:87:10:c6:15:
a1:40:37:03:58:f3:93:b6:05:61:95:1a:9c:86:07:
d7:33:8a:a3:d6:c2:0a:f1:14:6c:8d:7a:89:c1:f7:
63:b9:c6:53:ed:6a:8d:ca:41:3c:82:c8:96:f0:1f:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:26:FA:7A:AA:69:2C:B3:F1:31:BA:C2:01:23:39:1D:0D:D0:73:3D
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.162.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:39:95:f4:c6:28:d5:be:52:6b:10:7f:ad:27:84:01:0b:9b:
8d:b3:2c:d0:4d:40:f0:10:16:16:fb:27:28:b9:6b:9e:ac:6e:
a6:98:b5:cb:4c:ac:fb:f6:dc:2c:87:6a:89:64:d3:91:6b:ce:
0d:0c:62:98:11:54:92:65:b2:a5:3c:e7:7f:5f:a7:cd:b3:67:
98:df:e3:15:68:67:80:d8:1b:e8:c3:ea:9f:fb:e4:af:fb:98:
a6:ac:ff:c7:d9:58:27:fe:d6:4e:22:98:ed:16:34:91:7c:55:
e2:22:74:ef:4a:74:2f:4b:09:5e:f5:16:22:ce:84:76:d0:45:
b5:c0:76:a7:34:3c:36:ca:25:ac:bb:33:7d:07:d7:dd:34:d0:
e4:66:cc:56:00:ba:53:41:fd:29:2a:81:d6:52:7a:4d:91:a5:
55:84:20:1e:33:af:5f:10:08:40:26:e5:72:6b:b6:b3:08:6d:
8d:3f:31:f7:c1:f7:05:92:0c:ef:b0:98:d5:6d:10:e2:02:57:
a5:ac:21:a9:78:21:4b:6e:45:0e:6a:66:85:11:dd:da:14:d4:
3f:53:1f:15:bb:94:fa:4f:1a:46:6e:92:ea:67:ce:3c:87:bd:
25:9e:9f:82:2a:e8:53:b8:e9:27:b4:f2:55:14:d8:4f:8c:13:
9d:27:5f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:50 2025 by rpki-client