Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/EBKkLbAWIgUN_1ExAM_3PwhqLzk.roa
File: EBKkLbAWIgUN_1ExAM_3PwhqLzk.roa (raw, json)
Hash identifier: sabysmysP8b4aNHHqq6eNU7v0c6260EktWAc+FuDTDI=
Subject key identifier: 10:12:A4:2D:B0:16:22:05:0D:FF:51:31:00:CF:F7:3F:08:6A:2F:39
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 019570D2377D7EF636C1FDBDB5211CFAE946
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/EBKkLbAWIgUN_1ExAM_3PwhqLzk.roa
Signing time: Fri 07 Mar 2025 13:36:19 +0000
ROA not before: Fri 07 Mar 2025 13:36:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49175
IP address blocks: 217.195.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:70:d2:37:7d:7e:f6:36:c1:fd:bd:b5:21:1c:fa:e9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Mar 7 13:36:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1012a42db01622050dff513100cff73f086a2f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:be:eb:ca:eb:2a:a4:03:62:b6:0a:9d:d0:
67:c5:cc:df:12:3f:21:a5:cf:ea:b4:4f:28:b4:fb:
8e:41:19:28:4f:96:a6:a6:c5:06:eb:f9:1d:68:60:
38:06:a9:67:11:91:aa:97:51:96:00:31:7e:54:08:
0e:54:ef:fd:f4:e9:32:55:99:46:58:7d:ba:86:ed:
b2:42:c3:09:ea:49:b6:fa:71:86:2b:77:8d:2d:10:
33:fa:0e:9a:30:39:16:7f:32:34:59:70:be:ff:6b:
9f:5b:26:7d:34:1e:f5:86:9e:96:01:25:6a:ed:bc:
46:93:ef:22:12:2b:89:2e:b4:0a:60:3f:c6:9f:ab:
7d:21:7f:76:3d:a1:eb:b7:c4:d7:b5:6d:03:26:ba:
0f:56:39:fb:77:f1:f2:42:b8:f9:40:80:3b:42:3d:
aa:44:d3:0e:e2:53:63:63:db:05:1e:a6:da:0b:1e:
44:14:c5:f2:5e:c2:b3:14:01:bb:ed:cd:92:8b:a3:
5a:44:89:d5:66:8b:0f:a8:09:31:cc:b5:cb:3b:83:
cf:a1:47:89:1c:1d:86:e7:7a:0a:24:87:8c:44:1b:
78:22:c4:a9:60:c2:c3:8c:f0:2b:ed:7b:24:07:6d:
be:24:df:a1:7a:25:85:ee:ea:75:7d:fc:36:33:12:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:12:A4:2D:B0:16:22:05:0D:FF:51:31:00:CF:F7:3F:08:6A:2F:39
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/EBKkLbAWIgUN_1ExAM_3PwhqLzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.195.197.0/24
Signature Algorithm: sha256WithRSAEncryption
52:2b:77:e8:8d:c6:76:22:55:09:12:50:6c:a7:d2:3d:61:2a:
0d:2c:09:44:3a:f0:8f:86:19:53:54:b7:de:cb:79:ce:20:dd:
08:fc:b8:67:76:b8:58:fa:5f:cb:d5:76:a6:7f:02:74:dd:49:
56:b8:13:97:a6:57:14:26:89:9d:75:a4:94:cb:77:a9:fb:42:
8a:b5:e4:5b:18:a4:c4:0d:04:36:a9:12:a8:14:16:ce:51:ef:
6d:8c:e9:55:68:cf:77:1e:c6:78:b4:c6:6d:1e:64:6e:34:f2:
62:24:7a:b4:0a:0b:8c:b8:51:0c:1f:e1:e4:26:25:2d:2b:ab:
e4:cf:36:10:d8:9b:a5:00:c8:37:27:f2:47:c3:ec:b0:98:8b:
e1:4d:10:45:84:d6:6d:61:14:0c:91:4f:09:4b:f6:cb:b9:47:
bd:b3:21:f3:a1:d3:4c:bc:21:d0:9c:18:dc:6f:6d:a9:11:16:
2c:ee:41:58:28:1c:5f:21:86:92:cb:f9:59:83:47:60:86:7a:
51:28:2d:77:fa:49:97:b8:e7:2d:45:de:aa:7a:ed:c1:e2:fa:
4b:3a:fa:d6:ab:aa:84:21:56:fd:e6:60:57:ff:3a:9f:0e:7b:
4c:43:a0:e5:23:84:3f:ab:81:e5:07:94:f6:81:88:a9:55:01:
b1:e4:57:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVw0jd9fvY2wf29tSEc+ulGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MjBlYWRiMmUxNTYyYjRlMmU0ZjQ4MDc3MmMzNjg4N2E3
NzdmMjQwHhcNMjUwMzA3MTMzNjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDEyYTQyZGIwMTYyMjA1MGRmZjUxMzEwMGNmZjczZjA4NmEyZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcG+68rrKqQDYrYKndBnxczfEj8h
pc/qtE8otPuOQRkoT5ampsUG6/kdaGA4BqlnEZGql1GWADF+VAgOVO/99OkyVZlG
WH26hu2yQsMJ6km2+nGGK3eNLRAz+g6aMDkWfzI0WXC+/2ufWyZ9NB71hp6WASVq
7bxGk+8iEiuJLrQKYD/Gn6t9IX92PaHrt8TXtW0DJroPVjn7d/HyQrj5QIA7Qj2q
RNMO4lNjY9sFHqbaCx5EFMXyXsKzFAG77c2Si6NaRInVZosPqAkxzLXLO4PPoUeJ
HB2G53oKJIeMRBt4IsSpYMLDjPAr7XskB22+JN+heiWF7up1ffw2MxIGRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBASpC2wFiIFDf9RMQDP9z8Iai85MB8GA1UdIwQY
MBaAFAYg6tsuFWK04uT0gHcsNoh6d38kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQt
YTVmZGI1NzBmZTlhLzEvRUJLa0xiQVdJZ1VOXzFFeEFNXzNQd2hxTHprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQtYTVmZGI1NzBmZTlh
LzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2cPFMA0G
CSqGSIb3DQEBCwUAA4IBAQBSK3fojcZ2IlUJElBsp9I9YSoNLAlEOvCPhhlTVLfe
y3nOIN0I/LhndrhY+l/L1XamfwJ03UlWuBOXplcUJomddaSUy3ep+0KKteRbGKTE
DQQ2qRKoFBbOUe9tjOlVaM93HsZ4tMZtHmRuNPJiJHq0CguMuFEMH+HkJiUtK6vk
zzYQ2JulAMg3J/JHw+ywmIvhTRBFhNZtYRQMkU8JS/bLuUe9syHzodNMvCHQnBjc
b22pERYs7kFYKBxfIYaSy/lZg0dghnpRKC13+kmXuOctRd6qeu3B4vpLOvrWq6qE
IVb95mBX/zqfDntMQ6DlI4Q/q4HlB5T2gYipVQGx5FcK
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:10:34 2025 by rpki-client