Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/s27ESPJopt_N9W4hvPHWl2wqbyQ.roa
File: s27ESPJopt_N9W4hvPHWl2wqbyQ.roa (raw, json)
Hash identifier: apumiTd/x0yPmg9RAzVm+wQkBoO/X0o+cBTzpE4TMB8=
Subject key identifier: B3:6E:C4:48:F2:68:A6:DF:CD:F5:6E:21:BC:F1:D6:97:6C:2A:6F:24
Certificate issuer: /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Certificate serial: 019427B5E2A7D8248B5DB03DA6C22BC57DB0
Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/s27ESPJopt_N9W4hvPHWl2wqbyQ.roa
Signing time: Thu 02 Jan 2025 15:50:18 +0000
ROA not before: Thu 02 Jan 2025 15:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47692
IP address blocks: 194.146.184.0/24 maxlen: 24
194.146.185.0/24 maxlen: 24
194.146.186.0/24 maxlen: 24
194.146.187.0/24 maxlen: 24
2001:67c:2af4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:e2:a7:d8:24:8b:5d:b0:3d:a6:c2:2b:c5:7d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Validity
Not Before: Jan 2 15:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b36ec448f268a6dfcdf56e21bcf1d6976c2a6f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:1e:70:fa:2a:37:88:6d:26:dc:6e:b5:4f:
5a:15:24:44:35:1d:1f:6f:43:18:6f:e4:91:15:17:
4f:75:14:e7:7c:46:1b:37:74:d2:da:68:5d:8d:47:
fe:d0:ef:0f:71:30:a1:92:05:8c:5b:77:56:a1:ac:
dd:05:b1:13:e4:c5:7e:46:11:d0:e3:6d:e0:b7:2c:
82:6c:0f:00:a7:7a:bd:3c:9d:97:ae:59:78:7e:e1:
79:40:2d:7c:12:be:6f:00:ff:b4:82:6b:82:92:70:
9f:ef:f1:63:d9:3d:73:69:69:4e:cf:c5:6a:da:18:
d9:0e:d5:cd:3c:6b:fd:7b:94:1d:fb:31:f5:cd:2a:
59:ff:43:47:9e:57:52:d8:53:6e:22:31:da:35:34:
49:d7:ea:31:5c:d3:f6:98:df:ef:5e:35:f1:47:1c:
65:96:cb:ff:a1:ec:cf:20:f2:ec:70:87:3c:6a:c6:
b0:b3:5b:cd:08:ff:2a:5d:70:15:42:2a:15:93:89:
88:77:02:8f:c5:a2:94:c8:75:07:60:8d:b7:66:9c:
8e:08:bf:7b:a5:b8:16:06:73:c8:c3:16:73:e7:cb:
40:63:35:bc:03:4a:64:30:f5:3e:92:2d:e6:72:c0:
b6:fc:fc:e8:ed:01:c5:64:37:9b:f0:d7:80:5d:21:
f8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6E:C4:48:F2:68:A6:DF:CD:F5:6E:21:BC:F1:D6:97:6C:2A:6F:24
X509v3 Authority Key Identifier:
keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/s27ESPJopt_N9W4hvPHWl2wqbyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.184.0/22
IPv6:
2001:67c:2af4::/48
Signature Algorithm: sha256WithRSAEncryption
73:76:3c:0b:ad:5d:12:ce:17:91:d6:db:f8:d6:ca:8e:56:22:
96:e9:93:08:7f:de:80:3b:9d:ba:b1:3a:c6:b7:31:56:e7:99:
1e:08:c0:92:45:0f:b1:0a:a2:91:20:6b:13:55:18:d3:19:b1:
bc:0b:d5:90:d3:20:5d:d9:3d:f0:4d:a9:61:7a:81:41:2f:be:
17:9f:48:2c:fd:de:32:88:83:92:1b:a7:d5:83:a2:1d:6c:84:
fc:61:2a:f5:b7:40:b0:12:58:41:96:6b:23:76:6f:ab:2b:32:
49:1c:c7:9a:e4:d3:b8:d5:ba:94:53:10:7a:e6:0c:35:85:e4:
e4:80:d9:d3:a3:1a:11:b8:e3:e9:c7:1f:17:54:4e:ee:36:95:
6f:62:4d:78:d7:4e:b4:e2:bb:94:c8:87:91:24:7e:90:7c:55:
02:ed:b3:40:12:6c:79:b9:05:09:e8:5a:b8:84:6a:49:56:25:
8d:09:bf:e7:e8:36:da:e0:bd:1c:51:f4:ce:45:ad:3e:af:6a:
f7:04:6b:ac:54:b7:db:a4:36:f4:3a:1d:82:87:6e:3e:b9:97:
06:be:b5:30:cc:f0:d9:66:ff:5d:68:60:96:0a:eb:e0:2e:f8:
b9:6e:46:05:cb:87:8d:7c:40:00:d3:a7:20:d1:8c:81:cd:8e:
f3:6e:54:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:20 2025 by rpki-client