Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/0lEY9zpi-7BkR5-cKklWMyBsLyM.roa
File: 0lEY9zpi-7BkR5-cKklWMyBsLyM.roa (raw, json)
Hash identifier: FC6XHYclBVzH43tm1x5dwkNsn6Or/MOidVXMmwND+io=
Subject key identifier: D2:51:18:F7:3A:62:FB:B0:64:47:9F:9C:2A:49:56:33:20:6C:2F:23
Certificate issuer: /CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Certificate serial: 01942444AABA2EE05374D875DFD03B88FAB5
Authority key identifier: E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/0lEY9zpi-7BkR5-cKklWMyBsLyM.roa
Signing time: Wed 01 Jan 2025 23:47:47 +0000
ROA not before: Wed 01 Jan 2025 23:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214977
IP address blocks: 194.11.239.0/24 maxlen: 24
2a14:4800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:aa:ba:2e:e0:53:74:d8:75:df:d0:3b:88:fa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d608e0f7a1086c8451de5d637847b52217abb4
Validity
Not Before: Jan 1 23:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d25118f73a62fbb064479f9c2a495633206c2f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:bd:f7:e5:58:17:18:26:8a:64:4e:c1:ca:
19:fa:28:38:cd:35:ae:58:fa:3a:78:a1:62:42:1c:
39:4e:7c:aa:f0:42:95:b1:60:ab:8c:0c:74:d0:d2:
43:8c:5a:ca:ff:bd:c4:76:7e:3e:c8:19:24:de:9a:
e2:84:02:e2:5e:17:6c:9a:98:18:58:17:dc:25:de:
5e:26:86:31:c0:96:fa:3a:da:59:c1:ed:a2:ac:08:
e0:7b:dd:d1:eb:df:d2:97:d4:39:0f:09:41:14:3a:
71:ec:47:c3:eb:05:bd:97:f8:f1:92:00:c7:8c:52:
3f:d0:5e:8d:3b:4e:ec:71:b5:36:1c:80:51:91:d1:
b4:54:00:dc:f1:58:e8:95:20:b3:35:e7:cf:3b:e3:
d2:08:b5:3c:c6:f9:6d:64:0d:67:1b:ab:76:79:b3:
1f:2a:a7:8c:8e:67:42:7d:4e:9a:a3:92:b3:45:5d:
dd:2d:e2:84:2e:93:51:a0:37:59:e5:dd:52:25:b5:
1c:15:6a:df:11:2b:4f:66:d8:91:9d:8b:a1:2e:da:
24:08:50:0b:9d:26:f2:13:46:ad:f9:ce:84:87:36:
26:43:b8:d3:e4:ec:af:97:88:10:04:ec:85:6f:a5:
e3:32:fc:62:65:b2:a6:c6:38:d5:af:8c:7b:f0:01:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:51:18:F7:3A:62:FB:B0:64:47:9F:9C:2A:49:56:33:20:6C:2F:23
X509v3 Authority Key Identifier:
keyid:E4:D6:08:E0:F7:A1:08:6C:84:51:DE:5D:63:78:47:B5:22:17:AB:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NYI4PehCGyEUd5dY3hHtSIXq7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/0lEY9zpi-7BkR5-cKklWMyBsLyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eec70a-aa9f-42ae-8ad6-b7bbf5a1ac73/1/5NYI4PehCGyEUd5dY3hHtSIXq7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.239.0/24
IPv6:
2a14:4800::/29
Signature Algorithm: sha256WithRSAEncryption
b2:bc:86:ef:55:04:2c:88:a2:29:3d:aa:cc:8e:91:89:93:b2:
36:b3:7d:0b:6e:7b:bd:fb:06:01:5e:15:35:f7:56:bd:58:03:
6b:30:e5:eb:8e:49:00:b6:21:89:c6:20:9f:82:10:f2:e7:1a:
8e:15:84:c1:fd:8d:9e:bb:ec:30:50:fa:53:09:d1:81:fb:58:
42:3f:cc:dc:ca:3e:7a:fd:f2:55:40:ce:e6:8a:4b:54:62:60:
c1:95:95:76:9b:55:f1:a2:08:19:80:43:76:f3:89:54:ac:d0:
40:a2:5b:b8:df:95:e5:42:bf:9e:17:0d:22:55:f3:60:3d:b4:
a5:c6:c7:30:54:d0:01:fe:a5:8d:10:bc:d4:91:fb:43:fd:1a:
36:48:78:90:34:3c:b0:aa:9c:e9:69:6e:60:1c:43:5b:8c:d8:
58:6f:34:eb:f7:b1:9a:b5:54:e5:96:1a:14:70:06:a5:36:10:
ae:07:6c:3a:02:7c:14:64:3c:05:86:4d:64:7e:1b:0e:92:ed:
5e:a3:68:3d:f5:7d:c9:24:11:08:35:db:3f:af:21:4a:58:97:
86:dc:de:d7:fe:f8:ad:9e:61:86:fe:f6:9f:7e:d8:13:1b:18:
0c:b0:e7:d7:3b:5e:94:ea:71:eb:c6:e1:52:f2:dd:16:90:dc:
b7:f6:eb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:28 2025 by rpki-client