Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/eSlIjU--zzeljHxDb7Lmc0oTcr0.roa
File: eSlIjU--zzeljHxDb7Lmc0oTcr0.roa (raw, json)
Hash identifier: 29lnhAvQJG6lXbXS0KcxL34Q9L1+10qH6WOklcnahZ4=
Subject key identifier: 79:29:48:8D:4F:BE:CF:37:A5:8C:7C:43:6F:B2:E6:73:4A:13:72:BD
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0195A43323CCC6AF73968A4C6C49771DC7CD
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/eSlIjU--zzeljHxDb7Lmc0oTcr0.roa
Signing time: Mon 17 Mar 2025 13:02:49 +0000
ROA not before: Mon 17 Mar 2025 13:02:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63023
IP address blocks: 194.143.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a4:33:23:cc:c6:af:73:96:8a:4c:6c:49:77:1d:c7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Mar 17 13:02:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7929488d4fbecf37a58c7c436fb2e6734a1372bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:b6:e9:4d:6e:68:ab:d2:86:83:00:44:f1:
c8:a3:f7:43:7a:57:d5:cd:6c:79:84:72:37:f3:9c:
ad:5e:4c:dd:22:14:94:c7:89:5e:a3:c6:93:60:7c:
3c:0e:a8:b6:bd:65:a6:9f:6c:2f:7a:50:b0:6c:d0:
b9:af:31:95:d6:76:6e:3e:03:d3:d5:b3:ac:d2:a4:
3b:d7:25:d0:53:a8:73:40:e8:98:34:1f:9b:62:a3:
53:83:b7:5c:a6:9d:83:56:de:d5:f9:a5:78:ad:74:
53:a5:35:54:76:10:90:dd:dd:a0:fa:9b:76:2c:bb:
94:70:f9:7a:82:bd:46:24:51:c8:da:4d:3c:60:ea:
f6:ca:7c:85:e8:55:49:70:7a:06:67:66:54:29:5c:
17:68:23:15:c7:f9:be:34:61:22:fe:df:70:8a:2a:
c7:df:d1:d1:96:c0:e9:0b:ef:b8:b3:a4:fa:da:27:
b0:3b:3d:6c:44:f7:32:f9:44:c4:8a:6a:01:a7:95:
52:0d:a2:39:3b:4d:46:8c:04:05:65:f7:06:89:bf:
a3:bb:8f:20:6e:55:f9:3e:e6:12:0d:e2:f2:51:31:
63:fd:7b:d2:65:01:5e:b1:4d:67:93:5d:85:f1:dd:
6b:0b:91:eb:d2:c3:c7:99:96:51:d7:83:ba:43:39:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:29:48:8D:4F:BE:CF:37:A5:8C:7C:43:6F:B2:E6:73:4A:13:72:BD
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/eSlIjU--zzeljHxDb7Lmc0oTcr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.207.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e8:b9:26:63:69:1f:a9:6d:56:b1:1a:81:e7:95:b5:fd:78:
c5:90:26:5c:31:ef:46:c5:37:48:06:81:aa:fb:8e:ca:2c:34:
3b:92:b0:6d:ae:f8:aa:8c:f6:7f:66:98:c3:3c:2f:e8:7a:47:
8b:14:18:33:35:29:1e:fd:f6:9e:85:02:9b:4f:a2:eb:df:47:
0f:86:82:35:14:d4:71:93:d1:20:4b:6b:4e:15:a5:31:23:eb:
1c:39:47:d7:53:ff:19:4a:4b:30:86:e9:2e:c8:cb:a3:90:61:
08:82:38:7c:13:2f:3c:e5:d5:d0:8d:4b:5a:32:99:d2:9c:87:
22:40:0f:88:2e:a1:99:7b:fd:34:01:a0:82:20:54:4d:29:1a:
0b:e9:36:ef:0d:27:86:b7:c9:2b:5d:48:7f:36:f1:0a:7d:5e:
f0:4d:2c:f4:8e:31:27:11:a5:4a:c9:61:d1:db:b1:e6:57:50:
36:5b:a7:a0:97:e0:ff:80:86:d8:d8:6d:6a:71:47:19:60:41:
ee:d1:60:f1:11:42:8b:cc:93:be:88:8e:64:49:6c:96:da:a2:
da:55:b1:d4:81:08:d2:61:00:87:97:84:47:dc:dc:6b:0b:f3:
47:26:95:6c:13:8d:ac:f0:f9:6b:ef:6e:88:f0:c7:28:3a:39:
14:46:a6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:05 2025 by rpki-client