Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-VXnbBJ_jThiXw6U8fjAHy2xbnc.roa
File: 1-VXnbBJ_jThiXw6U8fjAHy2xbnc.roa (raw, json)
Hash identifier: fw0GiyQDHsU5T7LWaSm9z1hPnBi3yiBFP7boDm2wMvU=
Subject key identifier: F9:55:E7:6C:12:7F:8D:38:62:5F:0E:94:F1:F8:C0:1F:2D:B1:6E:77
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01915224A7F899F3E00C59ABC0C0AFDEEF97
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-VXnbBJ_jThiXw6U8fjAHy2xbnc.roa
Signing time: Wed 14 Aug 2024 18:26:59 +0000
ROA not before: Wed 14 Aug 2024 18:26:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 94.229.220.0/24 maxlen: 24
94.229.221.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
194.36.32.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
194.36.34.0/24 maxlen: 24
194.36.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:52:24:a7:f8:99:f3:e0:0c:59:ab:c0:c0:af:de:ef:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 14 18:26:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f955e76c127f8d38625f0e94f1f8c01f2db16e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:9a:4b:f5:99:58:56:02:07:6e:08:d3:75:
55:4f:ed:ad:98:a6:9f:de:58:b1:6f:36:21:10:58:
8b:b0:3a:c5:f7:7b:54:68:b8:39:0b:fc:eb:45:74:
5b:eb:f8:d7:40:a4:3c:61:3c:10:3d:06:6b:d5:58:
f2:6b:b2:06:50:50:44:77:9f:d4:2f:65:8b:d2:59:
0a:5f:12:08:7c:05:41:25:26:b3:33:e2:78:02:0c:
40:75:58:f1:4d:04:76:f3:40:93:d3:e8:96:9e:f9:
0f:88:43:ac:b6:09:f8:ad:1c:94:2f:99:2c:e1:1b:
9e:d4:4d:0f:a0:63:0c:13:e9:e5:bd:43:fc:71:d8:
a9:ec:6d:d4:5f:ef:c2:2d:7d:f9:af:83:ab:93:80:
2a:12:95:2c:f8:2f:ab:c9:5b:b9:96:4d:cd:fc:fc:
e4:d1:c1:5c:8b:c0:1c:50:dc:e2:58:c5:51:5d:52:
43:98:4e:8e:0f:4b:b1:36:f3:2f:54:94:14:5b:9a:
d7:22:6e:25:3f:01:5a:02:d0:46:17:e4:99:0f:aa:
95:08:56:cb:26:ce:e6:ff:d8:99:b5:9e:0c:14:22:
a3:bb:25:51:01:cf:39:8f:e7:aa:3b:f0:7a:97:85:
70:ec:37:e0:f9:69:ec:30:bc:e6:c0:43:10:73:0c:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:55:E7:6C:12:7F:8D:38:62:5F:0E:94:F1:F8:C0:1F:2D:B1:6E:77
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-VXnbBJ_jThiXw6U8fjAHy2xbnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.220.0/22
194.36.32.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:c3:b0:5b:28:ff:d7:1d:52:ef:9b:24:d0:60:d3:44:03:0f:
58:e4:44:d8:d3:ca:46:d1:24:a8:3f:5d:e8:93:67:db:17:94:
89:24:a2:08:89:64:bb:c1:ff:2b:42:87:f0:b4:d9:51:1f:62:
9e:25:e2:3d:69:ac:8b:88:45:fe:75:83:8e:e8:6a:2e:73:6b:
7d:7d:14:50:07:97:8b:58:7a:6e:79:6f:68:37:92:86:e5:61:
97:be:92:05:1c:df:5d:e0:3c:1f:53:16:c7:30:67:06:63:58:
2f:d1:e4:c0:7e:bf:e5:d2:06:0f:32:9a:f8:95:47:19:9a:42:
c9:f8:cc:0d:5c:ce:2a:0e:db:ae:74:7d:b4:9a:16:18:61:3a:
26:fa:ac:4a:17:76:e8:6c:39:5e:01:ed:50:1d:3b:4e:fb:98:
f6:e3:16:dd:9d:9b:12:c3:b0:21:36:7a:27:a9:3d:17:5e:fd:
a6:a0:23:f9:a5:ae:c1:93:1e:f3:ce:6e:e4:f2:96:f8:be:b2:
c7:e7:69:86:bf:67:af:cb:87:54:ae:df:c0:0a:cd:db:4b:30:
8a:4c:34:3c:65:05:a1:2f:b9:82:ac:ff:34:a0:f3:b6:37:22:
b0:c1:ff:56:39:0d:7d:b9:39:37:00:7e:49:a7:af:d5:e0:da:
6b:d1:69:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:54 2025 by rpki-client