Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/EGHE8mHjGVObxzVhlLsbqxuIFaE.roa
File: EGHE8mHjGVObxzVhlLsbqxuIFaE.roa (raw, json)
Hash identifier: g8QL/OjyGBw2KnLbgHtF/B7984D0evEQPaL4gj/TGvY=
Subject key identifier: 10:61:C4:F2:61:E3:19:53:9B:C7:35:61:94:BB:1B:AB:1B:88:15:A1
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 019570D1AE745FCBB2FC308B38FB4514ECAC
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/EGHE8mHjGVObxzVhlLsbqxuIFaE.roa
Signing time: Fri 07 Mar 2025 13:35:44 +0000
ROA not before: Fri 07 Mar 2025 13:35:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 80.93.220.0/24 maxlen: 24
217.195.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:70:d1:ae:74:5f:cb:b2:fc:30:8b:38:fb:45:14:ec:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Mar 7 13:35:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1061c4f261e319539bc7356194bb1bab1b8815a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:5d:81:42:2c:26:fc:5d:4a:dd:59:d7:ed:
31:ee:bc:5d:4f:36:55:b8:26:cf:6d:83:7b:17:b4:
a6:94:0f:9d:39:63:82:67:75:a8:4f:6b:7e:ab:4c:
2f:0b:8d:87:57:c3:86:fd:22:55:aa:17:e4:ae:1d:
44:77:82:de:00:e5:87:0c:66:64:18:bf:3e:b9:89:
a5:3f:69:a8:b3:9a:bf:1b:6c:25:90:2d:37:96:da:
8c:b5:61:c8:e5:53:2d:8e:6c:81:9b:67:08:6e:8f:
bb:ae:b0:a2:8b:8c:19:91:f9:9b:47:8c:cf:0e:2d:
18:0e:4e:c3:38:6e:e8:9b:18:d8:3b:49:d9:c4:c4:
9a:86:ae:5a:74:f1:c9:3b:4d:87:2c:8d:ff:5c:a4:
a1:5b:b0:6e:15:4f:11:15:a9:d6:2c:7e:bc:eb:66:
f4:a2:0b:fb:7f:ef:a2:e1:bc:aa:47:44:62:ff:6e:
72:06:9d:01:03:39:e6:a3:ab:b2:3b:9a:6d:c7:a5:
34:9d:02:41:03:cb:53:9c:59:f3:01:b5:3f:37:45:
7d:ae:5d:2b:d5:7e:db:71:dc:34:0e:75:2f:84:89:
39:78:9e:6e:89:c3:18:ae:68:25:b2:b7:cb:62:ae:
73:3b:1f:9e:e3:13:3d:08:ba:e5:96:7b:2e:50:90:
4f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:61:C4:F2:61:E3:19:53:9B:C7:35:61:94:BB:1B:AB:1B:88:15:A1
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/EGHE8mHjGVObxzVhlLsbqxuIFaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.220.0/24
217.195.195.0/24
Signature Algorithm: sha256WithRSAEncryption
05:96:4b:1a:d5:5a:81:77:5c:e9:cd:87:a8:2a:00:1a:ab:9f:
d6:fc:09:d0:07:86:7b:3b:4e:5a:b4:94:64:00:cd:e2:d6:81:
05:3b:ec:6e:a4:73:0a:39:43:89:49:f1:f9:33:69:47:ad:94:
26:63:40:17:ee:ab:00:dc:2d:84:7a:8d:4e:1c:17:c8:14:66:
8f:51:8b:43:79:32:92:71:89:fc:82:71:97:2e:77:1c:1f:f9:
dc:0b:51:bd:bd:0f:91:06:f1:69:9c:36:76:ee:07:9e:72:89:
9a:a9:62:99:66:a2:67:00:01:db:14:23:90:8b:c9:94:2d:5d:
69:11:40:75:58:10:8e:70:cf:49:52:04:66:e9:5c:ad:b1:20:
33:2a:a9:3a:d1:d2:77:df:10:22:29:6c:7c:89:9a:d6:ad:9b:
f8:9e:a5:34:66:17:5d:d3:db:b6:c9:24:2b:f4:40:6a:f7:29:
ca:c4:df:48:dc:16:60:56:d9:8d:d1:2c:47:7b:08:46:b8:f3:
2e:49:79:10:2a:41:4b:0d:a5:6b:d4:bc:10:00:35:20:b3:59:
3b:f4:e9:69:2c:e5:a0:d6:4c:ea:34:d6:5a:5b:aa:3f:f2:5f:
07:18:69:dc:d8:c7:22:96:45:93:46:1d:5b:14:03:58:fd:8a:
6e:9d:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:23:05 2025 by rpki-client