Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/E8wf4fv2dab9Cy07uV9CMrfCXGA.roa
File: E8wf4fv2dab9Cy07uV9CMrfCXGA.roa (raw, json)
Hash identifier: NhAdBhVFSBlmq/Et5bxJ5DmR6Qq06ZQVNC/X7LzuWGM=
Subject key identifier: 13:CC:1F:E1:FB:F6:75:A6:FD:0B:2D:3B:B9:5F:42:32:B7:C2:5C:60
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0194705F615410B79886F11C3AC0F267A14C
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/E8wf4fv2dab9Cy07uV9CMrfCXGA.roa
Signing time: Thu 16 Jan 2025 18:28:06 +0000
ROA not before: Thu 16 Jan 2025 18:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4766
IP address blocks: 194.36.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:5f:61:54:10:b7:98:86:f1:1c:3a:c0:f2:67:a1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 16 18:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13cc1fe1fbf675a6fd0b2d3bb95f4232b7c25c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:e9:f2:db:fa:0b:6b:02:f9:6f:79:ef:9c:
34:1d:79:48:66:d2:da:48:8c:34:fc:67:d2:0e:1b:
86:f9:7a:a1:29:1a:f4:0f:80:48:28:20:df:e7:fd:
70:fd:fe:7c:f8:70:67:dc:ab:b7:54:b6:e4:3d:4b:
72:16:b1:5d:e7:f2:43:89:fe:15:c4:54:b8:5b:03:
fb:35:be:7a:06:cb:6f:e3:b3:0f:69:eb:7c:2e:65:
5c:0f:ff:0b:e3:ea:f8:18:ba:bc:87:af:59:61:0b:
71:75:fe:6b:2c:f0:99:8f:d0:b2:19:6e:dc:a9:e2:
75:ce:2a:81:df:91:6a:e6:c7:08:74:89:6f:e7:d6:
56:d1:e3:de:4a:de:9b:fa:e9:cf:16:33:17:90:8e:
d6:b5:b7:7c:58:ea:dc:0f:03:b5:d2:2c:63:84:84:
b8:33:a3:af:4d:01:5e:81:48:ab:ae:b7:90:09:13:
2d:2b:46:90:fd:5a:30:83:d7:5a:12:ad:91:13:4c:
3e:d0:39:31:e5:35:04:c2:3e:56:8a:bf:60:0a:0d:
16:1f:e6:25:e2:4e:08:e9:0b:8e:a0:74:08:ef:04:
a0:0f:3d:86:ad:6d:f9:cd:d3:52:ec:8e:09:87:62:
c8:5b:c4:7b:f1:44:d0:85:92:5f:65:f9:09:15:af:
4b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CC:1F:E1:FB:F6:75:A6:FD:0B:2D:3B:B9:5F:42:32:B7:C2:5C:60
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/E8wf4fv2dab9Cy07uV9CMrfCXGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.34.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:45:a1:2e:4e:3d:52:73:6c:03:7d:e2:da:fb:6a:54:11:a6:
5f:60:5c:e9:ae:4c:a3:e3:9e:b3:c6:72:9c:a7:d5:66:11:77:
bd:9f:63:a0:2b:49:5d:fd:b3:31:06:10:9e:da:60:23:ad:bf:
d1:1f:46:3c:51:12:50:af:15:3d:c7:09:c9:aa:ff:ee:0f:0c:
e1:16:4a:40:8d:8b:26:9b:2d:a4:ee:ef:f6:2f:2e:f1:e3:f9:
be:f2:98:bb:a1:01:9a:03:2b:29:bd:c6:dd:1b:f8:4b:c2:f7:
28:6b:34:8a:97:90:48:4d:81:6f:de:f5:9d:90:53:70:07:20:
0a:6c:fd:1b:21:c5:32:34:8d:70:85:5d:b4:61:47:4c:2a:bf:
b1:f3:1e:89:ab:a3:a3:02:31:d0:b9:b2:8f:a5:7d:6f:4e:7f:
51:1b:11:ff:96:81:e7:9f:fc:9a:fb:f5:df:cc:0f:14:39:97:
27:b4:76:a7:4e:16:86:77:55:77:de:4c:69:fa:c9:47:ff:90:
48:54:f8:2e:63:36:5e:68:a6:57:32:9b:31:4f:de:07:e5:72:
28:ff:80:d7:8a:d7:93:ff:54:b9:d4:1d:09:33:f5:7d:1b:9f:
34:ef:74:2a:ca:4d:d4:f1:59:4c:68:31:64:eb:c2:2d:86:b6:
82:04:46:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:52 2025 by rpki-client