Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/cnEEcGLvR_2Aq8VpuBpZTx9kU6E.roa
File: cnEEcGLvR_2Aq8VpuBpZTx9kU6E.roa (raw, json)
Hash identifier: 881SyJrTyGqfbqUTNOmejK/mEUBUWzl98I4Gk2XXIK8=
Subject key identifier: 72:71:04:70:62:EF:47:FD:80:AB:C5:69:B8:1A:59:4F:1F:64:53:A1
Certificate issuer: /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial: 01942747732035610D601308E26CA01B540A
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/cnEEcGLvR_2Aq8VpuBpZTx9kU6E.roa
Signing time: Thu 02 Jan 2025 13:49:41 +0000
ROA not before: Thu 02 Jan 2025 13:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1741
IP address blocks: 86.50.0.0/16 maxlen: 16
128.214.0.0/16 maxlen: 16
185.229.128.0/22 maxlen: 22
193.166.0.0/15 maxlen: 15
193.166.4.0/24 maxlen: 24
195.148.0.0/16 maxlen: 16
2001:708::/32 maxlen: 32
2001:708:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:73:20:35:61:0d:60:13:08:e2:6c:a0:1b:54:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Validity
Not Before: Jan 2 13:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7271047062ef47fd80abc569b81a594f1f6453a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:1b:e0:9b:5b:00:51:75:ff:ff:64:b3:dc:
04:2a:17:d3:d4:35:35:41:48:f4:db:40:fb:94:77:
45:87:43:1a:f8:b4:7a:b3:ce:88:79:2f:d8:88:cd:
9e:aa:81:d0:91:41:ee:8b:02:f1:c1:56:77:25:49:
8c:a9:b7:41:36:09:e2:bc:04:95:b3:02:39:bf:e6:
b9:ed:5e:5c:81:b1:23:6b:f0:93:f2:4b:f0:79:1f:
1f:10:f5:01:6a:c9:de:93:31:a5:6d:29:5f:72:40:
d4:78:fc:26:56:96:1c:03:81:08:54:3a:ad:46:dc:
11:5d:10:68:57:f6:1e:e7:c5:50:4c:3d:69:c8:f4:
61:86:97:85:ba:d1:6e:e2:ba:b1:d0:a3:26:90:ba:
0b:b9:20:e4:72:f1:6a:25:4a:99:11:72:f8:e9:0e:
27:a6:6b:93:e2:a7:e4:bf:7f:30:02:54:8e:e6:7d:
a5:99:e4:36:0b:d5:ce:d7:b7:10:eb:60:2d:e5:d1:
8c:43:39:d3:ea:5c:e7:5e:f1:03:bf:76:59:f4:9f:
9f:72:81:20:ca:09:32:19:d1:7c:55:58:72:0b:95:
eb:d4:a1:da:bb:c2:11:f7:59:ed:9e:70:b4:40:5a:
8b:5c:07:0b:4f:7e:dc:56:d4:b5:47:b9:a7:78:71:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:71:04:70:62:EF:47:FD:80:AB:C5:69:B8:1A:59:4F:1F:64:53:A1
X509v3 Authority Key Identifier:
keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/cnEEcGLvR_2Aq8VpuBpZTx9kU6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.50.0.0/16
128.214.0.0/16
185.229.128.0/22
193.166.0.0/15
195.148.0.0/16
IPv6:
2001:708::/32
Signature Algorithm: sha256WithRSAEncryption
1e:55:49:cf:b6:57:30:dd:26:dd:36:a6:d3:4b:91:50:94:4b:
d4:61:0e:50:20:9b:a5:5e:3c:9c:49:64:08:44:e1:57:5f:65:
92:4d:a9:0f:4b:30:70:b7:cb:f7:02:90:74:69:34:88:66:16:
ea:fa:7d:30:d7:44:f9:d1:4c:e3:4c:91:06:12:89:2e:c5:38:
35:cc:17:1e:91:38:45:0a:c9:ac:22:a0:42:18:9f:6d:36:28:
78:97:85:81:2e:37:03:d2:7c:ba:7a:2b:e8:61:33:6b:ed:cf:
29:b7:26:fa:67:b2:78:89:2d:19:d8:1c:df:80:a8:22:be:49:
4f:08:6d:bb:1b:2e:79:d2:83:8c:35:ad:87:7e:45:c2:1b:de:
a8:8f:67:b1:e2:a4:a6:ce:18:ef:e3:07:78:f5:fa:e5:8e:ca:
ea:cd:44:8b:37:ac:bb:06:e0:25:92:2f:00:2e:98:be:4b:28:
0a:37:0c:06:f5:66:1b:92:ba:1a:30:ac:f5:1b:af:03:94:c6:
f8:06:e2:7f:90:94:4a:32:b2:b6:fe:85:19:bf:0f:79:a0:49:
5d:4a:97:db:d2:95:7d:08:1f:f7:68:bf:80:83:fd:d4:c6:01:
c5:ed:4c:aa:3b:ab:b0:2c:28:af:c9:b3:0f:2f:f6:ce:7d:27:
b8:82:3b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:50 2025 by rpki-client