Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-wSEEiaCgK5K9r-qIoXy8FZ7c7A.roa
File: 1-wSEEiaCgK5K9r-qIoXy8FZ7c7A.roa (raw, json)
Hash identifier: YGv4r3iXNcszqtCZW2Pv8d2XV4xQIkWyNaY7ARgqqmY=
Subject key identifier: FB:04:84:12:26:82:80:AE:4A:F6:BF:AA:22:85:F2:F0:56:7B:73:B0
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01935A9B56D456740CFC2E173B433299D8A4
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-wSEEiaCgK5K9r-qIoXy8FZ7c7A.roa
Signing time: Sat 23 Nov 2024 19:59:09 +0000
ROA not before: Sat 23 Nov 2024 19:59:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.111.106.0/24 maxlen: 24
85.208.9.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:9b:56:d4:56:74:0c:fc:2e:17:3b:43:32:99:d8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 23 19:59:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb048412268280ae4af6bfaa2285f2f0567b73b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:4a:0e:25:d9:4b:69:45:8c:8c:69:ad:d8:
65:19:de:a7:43:df:4b:71:48:ba:ec:aa:48:5f:de:
c5:9c:ef:7c:ef:f9:7f:a6:e5:5a:b8:3f:18:2a:c8:
6d:3c:a2:c3:7a:ed:ff:99:da:6f:f0:ba:c1:e1:7c:
72:df:b2:61:c4:a4:fa:9a:f0:dd:eb:00:ff:b3:c8:
8c:ba:51:69:82:6c:d3:d5:8e:63:3e:dc:aa:62:08:
39:a7:2a:6d:1a:e3:a6:e5:70:ab:01:5e:ba:22:d5:
d3:18:07:8e:75:95:89:ca:71:ba:40:f2:c2:50:d4:
98:8e:6b:18:b5:39:1c:cd:94:50:90:77:01:f7:af:
a0:af:71:21:6c:05:74:79:be:55:b9:de:5a:da:83:
3a:7d:03:37:1a:c0:54:aa:bf:c5:ca:27:86:ca:80:
a4:ad:76:71:92:65:a0:26:59:5e:3b:f6:2d:cc:d4:
29:f3:a3:ec:a4:41:97:23:b9:3b:6d:55:38:a5:a3:
54:d1:43:66:22:24:71:6a:35:98:db:da:41:32:55:
10:2a:12:77:ea:9d:48:b5:96:d3:6e:1e:eb:aa:eb:
0f:d7:b9:fc:ee:5a:ff:78:45:a9:ed:b2:e6:3f:ce:
50:34:86:1e:85:90:6a:98:6d:2b:32:30:d0:27:f9:
76:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:04:84:12:26:82:80:AE:4A:F6:BF:AA:22:85:F2:F0:56:7B:73:B0
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-wSEEiaCgK5K9r-qIoXy8FZ7c7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.106.0/24
85.208.9.0/24
94.229.212.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:87:e9:46:9e:9d:d7:32:d0:32:22:16:19:6b:3f:09:d1:d9:
b0:de:6c:fc:c5:48:31:7f:dd:5a:4a:1b:6c:56:34:44:a3:26:
3f:5f:9b:a0:34:d5:2b:d8:b8:ae:6a:cf:8c:25:d1:98:ce:70:
9d:42:a1:03:13:c0:d7:ef:bd:e8:30:48:ae:ac:91:b0:c0:b1:
fe:66:17:05:d3:f4:98:a2:7b:92:d7:d4:f5:37:9f:c8:46:35:
f3:05:27:ee:de:11:94:45:76:47:e0:8c:4f:2a:13:c5:a8:73:
15:68:28:d4:7c:c3:47:27:cf:02:bd:16:c4:f9:09:ce:1d:0f:
ff:c6:fb:ac:0f:1e:39:be:29:8a:63:1b:69:41:5e:87:2a:72:
58:6b:f8:25:b7:b9:22:4e:51:d8:b7:6d:6c:42:12:c6:27:62:
91:be:e3:3a:3e:d1:1c:c6:82:75:69:76:b0:0d:1e:ff:d2:c0:
cb:84:41:cb:60:00:7c:50:62:0a:c0:d8:ba:43:a8:34:6c:31:
15:49:c4:77:3f:79:9b:cc:68:9f:f3:7d:11:d8:98:0a:86:07:
c0:49:f7:6c:07:36:38:0c:1c:cc:70:ca:d1:4d:3d:2a:ef:24:
fd:d8:92:e3:43:57:18:86:bd:9a:02:f2:59:0e:17:b9:a6:e3:
2d:88:aa:2d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:25 2025 by rpki-client