Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/EovVJfg3z9mSoPRLqdQrySDONz0.roa
File: EovVJfg3z9mSoPRLqdQrySDONz0.roa (raw, json)
Hash identifier: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=
Subject key identifier: 12:8B:D5:25:F8:37:CF:D9:92:A0:F4:4B:A9:D4:2B:C9:20:CE:37:3D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 019426D86EF4C4EBA1CB860381FA19E0CBBB
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/EovVJfg3z9mSoPRLqdQrySDONz0.roa
Signing time: Thu 02 Jan 2025 11:48:25 +0000
ROA not before: Thu 02 Jan 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8070
IP address blocks: 195.134.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:6e:f4:c4:eb:a1:cb:86:03:81:fa:19:e0:cb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Jan 2 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=128bd525f837cfd992a0f44ba9d42bc920ce373d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:dd:2b:47:91:43:88:d9:7e:cd:e5:8c:84:
24:a2:7f:dc:33:98:d5:de:f8:c0:df:f3:b7:29:56:
9c:d3:90:ac:3c:9c:06:41:ff:e8:6f:8e:5c:a1:8d:
b0:f3:8e:47:53:8b:bc:87:a0:47:62:90:ab:cd:af:
23:12:27:17:9d:3a:3e:7f:e9:e0:25:48:78:5d:11:
3f:74:d8:74:dc:4a:b8:24:9a:d8:4e:43:d3:ff:73:
cb:6b:28:c4:a8:1b:11:34:fc:b3:35:99:c9:2a:93:
1d:0b:a3:51:2e:86:f0:f7:75:68:85:80:bc:1d:00:
b3:48:8d:9e:fa:56:29:59:f3:1a:f7:60:94:4c:32:
7f:c9:8e:21:a9:1d:e5:c0:a4:f0:34:cd:ba:ce:f3:
11:2e:4c:36:77:77:64:7d:ca:70:e1:10:a4:1b:bc:
5f:60:42:ab:2f:05:58:0d:06:9b:29:9b:a4:79:44:
69:2a:16:f4:1e:c3:7b:e7:ea:a3:28:e8:2b:8a:a9:
95:6a:d6:b3:43:38:3b:ab:99:8f:9f:f1:8f:e2:1f:
95:fa:ae:7a:77:dc:dc:ed:65:6a:86:ba:07:d7:64:
74:7b:eb:82:c7:6e:76:9e:2f:27:ea:fc:63:ee:da:
ab:7f:18:1b:57:77:e3:2e:9e:06:20:c3:31:4c:6a:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8B:D5:25:F8:37:CF:D9:92:A0:F4:4B:A9:D4:2B:C9:20:CE:37:3D
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/EovVJfg3z9mSoPRLqdQrySDONz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.134.224.0/19
Signature Algorithm: sha256WithRSAEncryption
54:80:8e:52:d5:f6:36:52:47:59:6a:55:31:9f:68:1f:7f:8b:
ba:3b:62:84:f5:12:b7:ce:25:4a:e5:12:8f:bc:0a:4c:4a:97:
16:df:b5:f8:30:7d:0c:fe:be:ba:f1:c9:ee:89:92:68:6c:45:
a8:cc:5f:22:bd:d8:bc:2a:ae:9b:98:5e:14:c1:9f:2c:e5:8d:
a7:7a:6c:22:c8:20:81:6b:37:a1:46:e0:8c:c8:2e:e8:a7:d0:
ed:e4:03:7c:6d:29:28:34:e3:34:eb:41:b5:16:2b:6f:b1:79:
f7:a7:35:84:31:6d:04:5e:b1:0e:d3:b2:bc:05:6a:65:7f:00:
c2:e7:4a:1a:9f:bb:b2:ad:2d:50:31:c8:4f:71:6c:51:6a:29:
93:37:22:64:f5:63:f2:b1:4a:40:17:da:ff:f8:b6:20:98:48:
60:c8:75:04:f6:3d:02:b1:8e:77:6e:e7:d2:0f:2c:9f:b2:38:
ed:e6:66:88:b5:d0:bf:08:b3:bc:51:1d:a7:d7:c0:8c:2c:b4:
b4:5d:1a:21:27:04:87:58:93:d4:f0:c1:11:bf:01:0a:35:67:
eb:fa:23:6b:5d:57:2e:7e:cb:c5:e7:b3:82:24:9b:df:c7:26:
5e:a9:8b:60:4c:1d:28:c7:b7:6b:a9:25:ce:95:73:ef:9c:97:
de:8e:d1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:52 2025 by rpki-client