Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/e_aGKHwtUDp2OKphS3CK9hJY9Vg.roa
File: e_aGKHwtUDp2OKphS3CK9hJY9Vg.roa (raw, json)
Hash identifier: Wz27SP0RAbS85Qllg5w2rti2zZPlmD77B1BtuS9y4Xo=
Subject key identifier: 7B:F6:86:28:7C:2D:50:3A:76:38:AA:61:4B:70:8A:F6:12:58:F5:58
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0194CCA2280AA503752A6874B32124F97597
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/e_aGKHwtUDp2OKphS3CK9hJY9Vg.roa
Signing time: Mon 03 Feb 2025 16:26:06 +0000
ROA not before: Mon 03 Feb 2025 16:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 77.111.101.0/24 maxlen: 24
94.229.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:a2:28:0a:a5:03:75:2a:68:74:b3:21:24:f9:75:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 3 16:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bf686287c2d503a7638aa614b708af61258f558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:d0:65:5f:75:59:ff:f9:3e:da:4b:c9:22:
57:64:71:5b:28:81:23:30:b1:4b:5c:5a:8e:39:44:
22:31:b6:42:81:b6:03:d6:b9:53:16:4f:72:db:e8:
c0:d8:71:5f:4a:85:91:f6:59:6f:f1:6f:14:8f:2a:
10:e9:3f:3d:92:76:01:b0:2d:b2:dd:53:b2:35:4c:
9e:83:8b:5d:d9:2a:a0:10:ae:0d:77:6a:7e:a0:64:
5a:0e:5a:38:d6:17:64:d1:32:78:6a:eb:d8:1f:aa:
36:04:3d:c2:54:cb:21:70:b3:f9:fd:32:f5:ed:c7:
4d:fd:10:a0:b8:e0:b9:64:ec:9e:33:d6:be:66:9c:
09:96:c7:c8:a0:60:63:90:a3:86:33:6b:2b:ab:77:
7d:77:42:51:8f:ac:be:28:93:d7:da:a6:b8:8c:f2:
89:eb:c9:a4:cd:39:1d:d6:4f:cd:dd:c8:66:0b:9b:
20:54:31:00:91:08:c5:7e:b1:be:c1:c6:95:2b:2d:
d8:e6:d5:81:05:c2:14:80:b5:67:39:68:77:e5:1f:
90:99:24:17:52:4d:fc:8f:b4:f6:e7:2d:bb:90:21:
b0:a3:0d:29:38:45:8e:bc:25:50:26:5b:bb:e9:cd:
b3:ae:74:fb:1a:b1:29:fa:4f:4b:ed:83:ca:33:7d:
14:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F6:86:28:7C:2D:50:3A:76:38:AA:61:4B:70:8A:F6:12:58:F5:58
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/e_aGKHwtUDp2OKphS3CK9hJY9Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.101.0/24
94.229.221.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:da:3d:1b:21:0a:37:25:00:f5:6e:3b:bc:89:14:24:12:b6:
25:40:06:21:e9:35:60:15:af:46:e1:40:62:cc:13:21:2e:21:
eb:3e:13:06:25:98:67:68:0f:eb:a2:8e:c1:cb:19:36:da:4b:
83:4f:e8:f2:72:e7:1a:69:12:9a:ad:f1:c4:fb:2c:4c:01:8a:
be:f0:29:c8:21:96:46:75:9d:42:3d:54:e9:bc:4e:eb:94:66:
db:ee:f0:0b:3a:ce:3d:8a:af:9f:4e:e8:83:4b:23:65:57:e9:
14:50:f1:da:9c:f3:5e:74:c3:3e:b4:88:55:9c:5b:a1:a1:e0:
32:f6:33:ab:27:f5:dc:17:0c:cf:58:b8:f8:f3:38:9e:36:a7:
c7:bd:2a:58:2a:93:71:33:77:8e:71:f2:00:8f:20:82:72:8c:
24:2e:5d:64:fa:3c:d7:7a:62:80:23:81:8c:4c:c4:f4:d3:f6:
a9:8b:dd:c1:e2:4c:de:2d:1c:74:c1:7b:8b:74:01:43:d9:bc:
6d:7b:86:17:ae:ba:15:74:80:5a:b1:04:ce:1d:61:63:f9:82:
cb:13:d2:c8:a4:3c:57:14:4e:e5:0f:87:15:eb:97:0c:fd:7b:
eb:70:42:e3:ac:f7:52:48:93:7c:b7:d1:a4:fe:e3:8c:1b:3a:
0c:21:da:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:48 2025 by rpki-client