Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/e59Q5uAikuwepkQlBorbDoh6GEA.roa
File: e59Q5uAikuwepkQlBorbDoh6GEA.roa (raw, json)
Hash identifier: FWnFt7JCwdzMEevcH6cLQ4KdTvGZxD0ZnORgpMEp0gM=
Subject key identifier: 7B:9F:50:E6:E0:22:92:EC:1E:A6:44:25:06:8A:DB:0E:88:7A:18:40
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019364608F38BA772C47792625B663A9C12E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/e59Q5uAikuwepkQlBorbDoh6GEA.roa
Signing time: Mon 25 Nov 2024 17:31:09 +0000
ROA not before: Mon 25 Nov 2024 17:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.111.96.0/22 maxlen: 22
77.111.106.0/24 maxlen: 24
94.229.210.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:60:8f:38:ba:77:2c:47:79:26:25:b6:63:a9:c1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 25 17:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b9f50e6e02292ec1ea64425068adb0e887a1840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:28:94:a0:c5:1c:59:47:2b:38:68:35:fb:
4b:73:e5:bb:d1:97:47:9a:d8:1e:86:6e:a3:1e:f0:
8d:77:10:29:3a:44:fd:e5:17:f2:b8:38:a2:32:be:
23:32:f9:56:a6:6a:2c:11:d6:a7:3f:51:a4:88:a1:
d7:eb:f1:93:4b:de:f9:65:a1:49:27:2b:f2:15:5c:
97:9b:3d:d9:28:25:30:57:35:c7:e8:45:2c:5f:47:
f6:b8:6b:a2:4b:7c:d8:3a:ce:78:a3:cf:96:b5:7c:
d2:27:dc:26:c2:6d:6d:bb:47:20:23:ef:2a:6d:4f:
9d:7b:d0:4e:6f:f2:30:81:66:2a:e5:70:ab:51:c8:
f8:39:f3:e1:4c:65:61:f8:aa:6b:6f:a0:2c:ee:d9:
e3:a1:50:6c:8b:00:0f:4a:18:c4:e9:35:af:b2:4a:
d2:2a:21:00:46:e2:f3:98:f3:f6:ef:42:42:d6:0c:
69:1b:69:62:f9:53:b9:6d:3d:b3:6e:c6:a6:81:00:
ee:74:bd:cb:cc:86:a8:d7:9d:e6:2a:24:00:05:dd:
4c:f0:6b:a6:27:9b:ac:6a:f6:68:bf:de:ac:e3:14:
14:e5:a0:00:f2:9a:82:07:d7:81:f0:8d:36:a8:e6:
f8:dd:3c:1c:34:fe:9a:39:a0:ce:f0:ad:62:43:a1:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9F:50:E6:E0:22:92:EC:1E:A6:44:25:06:8A:DB:0E:88:7A:18:40
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/e59Q5uAikuwepkQlBorbDoh6GEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.96.0/22
77.111.106.0/24
94.229.210.0/24
94.229.212.0/24
Signature Algorithm: sha256WithRSAEncryption
17:6f:f0:4a:60:8b:2d:c1:d6:21:57:bd:71:26:49:b4:b6:5d:
a5:e1:9d:c7:68:4e:da:24:08:9f:b8:16:38:9c:3b:65:4a:4c:
ea:b0:8b:e3:d6:e5:5b:88:e0:3a:b5:cd:b0:a6:a5:89:0d:9b:
c6:1d:62:d8:53:b3:d9:42:e8:db:7d:78:37:18:20:ff:2b:6b:
8c:05:7e:4b:3a:83:96:73:ed:27:9a:f8:18:fe:69:42:63:ae:
e3:20:e5:10:5b:a3:54:10:b4:41:48:20:ea:79:e7:b3:c1:1d:
6f:02:fe:38:26:b5:17:0e:eb:14:bb:d5:e5:cc:0b:85:0c:6a:
84:55:ad:1b:56:a1:fb:d0:a3:70:f2:b1:97:b4:bb:73:19:37:
c2:d2:26:25:ca:2f:d1:5b:70:03:f7:92:8f:ae:92:77:f4:37:
51:86:33:c3:64:66:47:97:ad:74:40:07:fb:c4:cd:5b:89:98:
6f:8f:d8:84:24:87:a1:00:d9:96:72:43:b3:84:6d:64:9a:a3:
44:d0:95:21:8e:7d:ee:65:fd:c8:3b:42:3f:fb:ce:4d:bd:6c:
9b:03:3c:c4:f4:96:31:a4:e1:ec:38:d0:d7:1e:4e:7a:93:0e:
20:55:15:f3:e6:34:d2:33:a6:88:83:17:9f:72:cc:e5:9b:15:
c4:1d:39:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:16 2025 by rpki-client