Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/lwR-xqdqGHytHbBjRkdou2KJbz0.roa
File: lwR-xqdqGHytHbBjRkdou2KJbz0.roa (raw, json)
Hash identifier: mssVbZwG0GWhRq8sWk9K4o6iIRPhCdicZ8tv5Akecrs=
Subject key identifier: 97:04:7E:C6:A7:6A:18:7C:AD:1D:B0:63:46:47:68:BB:62:89:6F:3D
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019422200E7E7EC1EC0B80F16F30C5B665C6
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/lwR-xqdqGHytHbBjRkdou2KJbz0.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 85.208.8.0/24 maxlen: 24
94.229.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0e:7e:7e:c1:ec:0b:80:f1:6f:30:c5:b6:65:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97047ec6a76a187cad1db063464768bb62896f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:14:a9:d1:b8:94:c1:a6:9d:2e:ff:69:9d:
40:02:e9:eb:e6:72:4d:29:cf:9a:ac:3d:13:c1:50:
06:69:c6:68:f5:4b:aa:1a:c0:62:eb:83:4e:9e:09:
d8:da:7b:a9:e3:be:96:a4:ac:f2:cf:97:44:6e:c6:
93:eb:95:95:f8:10:7d:b9:56:d5:c4:4e:e1:ea:30:
aa:d8:ed:b7:b1:04:a9:f1:b0:5e:f8:35:42:81:78:
c7:ab:c5:d3:ff:64:70:4c:81:da:3b:17:bb:59:94:
8c:7d:05:9e:ec:fc:8e:0f:53:55:60:83:f3:6d:42:
53:5f:dd:61:aa:cf:0b:b9:8d:64:2b:c6:59:16:fd:
35:51:4b:6f:b7:a4:7c:7d:56:43:e3:41:63:13:88:
22:0e:05:8f:fb:6e:63:7e:05:5a:0b:9d:6f:42:cf:
85:4e:cb:45:32:66:7c:10:da:82:10:88:f3:ba:de:
bb:4f:24:a3:64:ac:9f:91:ea:03:41:e6:48:6e:db:
55:33:07:d8:c4:b8:76:03:e6:28:81:b3:4a:67:d0:
20:02:c9:d5:94:41:d6:88:87:72:9d:e0:da:15:b4:
6b:fa:b7:0d:d2:32:79:ed:9d:67:d5:c7:8c:43:33:
cd:e2:a4:83:81:ee:20:0c:84:e8:89:41:51:8c:ec:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:04:7E:C6:A7:6A:18:7C:AD:1D:B0:63:46:47:68:BB:62:89:6F:3D
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/lwR-xqdqGHytHbBjRkdou2KJbz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.8.0/24
94.229.221.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:29:54:e9:8b:c6:a8:52:29:92:bd:42:13:24:84:17:92:55:
0b:a3:5e:0d:84:fd:3f:a0:3b:d8:20:60:f2:fe:c2:43:7f:33:
0d:54:c5:bf:5d:c5:1b:9b:68:83:37:88:fc:8b:42:20:6a:71:
9c:c0:04:7b:a5:0e:af:6f:ea:3d:ea:63:62:58:c2:fd:40:cc:
49:08:da:42:b8:87:58:5e:3a:2a:bc:e9:89:78:0a:a2:ee:93:
f5:4c:bd:34:17:28:d6:eb:12:49:fc:0f:26:68:95:d4:46:74:
14:1e:e7:f7:86:72:0b:60:a1:31:21:c9:8f:1d:cd:dd:92:ab:
18:12:d7:06:1a:10:dc:8a:2b:55:65:93:33:e0:c9:11:e9:d3:
8d:79:1e:75:f4:4a:82:8a:47:ae:6d:12:c6:dc:25:ac:20:c9:
4b:c1:ab:d5:32:68:c6:3a:2c:a5:06:da:e9:3c:5f:56:34:3a:
7d:e7:7a:84:42:7e:7b:d9:32:aa:0f:39:ac:2f:ff:4f:d4:db:
56:98:05:76:f1:cd:0f:29:70:2c:60:b2:0f:a9:cd:8c:f8:2e:
15:ed:69:4a:75:65:09:63:1e:5c:ea:65:02:3f:78:a8:8f:42:
1f:f4:3d:ff:05:af:dc:c7:bb:b4:5d:cc:cf:2c:ef:cf:7b:16:
61:49:6e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:01 2025 by rpki-client