Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/neYZOrxBE8QuDwtbnZaUQzKb-os.roa
File: neYZOrxBE8QuDwtbnZaUQzKb-os.roa (raw, json)
Hash identifier: WOOphyfPbg9f7M9M2Sfl2LRl5WLoYny6XoWWlcbxaJQ=
Subject key identifier: 9D:E6:19:3A:BC:41:13:C4:2E:0F:0B:5B:9D:96:94:43:32:9B:FA:8B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019460C7C196F0D7A57DE05AA2EEC98596B9
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/neYZOrxBE8QuDwtbnZaUQzKb-os.roa
Signing time: Mon 13 Jan 2025 17:48:11 +0000
ROA not before: Mon 13 Jan 2025 17:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212150
IP address blocks: 94.229.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:60:c7:c1:96:f0:d7:a5:7d:e0:5a:a2:ee:c9:85:96:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 13 17:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9de6193abc4113c42e0f0b5b9d969443329bfa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:38:1e:5a:2d:97:90:20:be:62:58:6d:00:
d2:2e:95:f6:6f:3a:8a:8c:0b:d5:23:ac:a3:21:3f:
4c:eb:30:df:ed:67:6a:b1:0e:dd:6d:df:49:51:b2:
fb:3c:a4:05:df:fe:0c:2a:5c:7c:09:14:f2:a0:10:
0b:ad:f8:2a:e0:bf:75:0d:d6:2e:3f:0d:ed:96:c8:
c6:23:8a:56:59:08:3c:4b:0e:12:42:14:5c:27:90:
bb:4a:14:30:aa:3a:26:0d:9a:a0:aa:dc:e5:68:f9:
bc:23:d5:f4:1e:96:02:0d:99:a9:0d:fb:a1:94:b5:
fd:62:3b:9f:34:51:22:a2:2b:ce:b1:db:01:15:a4:
9e:5d:ce:83:09:2f:64:a5:60:39:4e:80:6f:75:16:
4c:af:e4:37:69:76:7a:fc:05:72:c5:c7:7f:4d:59:
88:23:6e:31:e6:33:3d:3d:63:93:92:8f:79:8c:0b:
da:78:5e:7e:58:08:cd:fd:64:0a:90:96:fc:aa:a6:
93:ed:c2:d1:e9:29:19:07:6d:1d:5a:d2:90:7a:93:
55:8e:73:c5:7f:5f:61:39:c5:a3:c0:ce:66:f4:15:
e4:65:a2:32:a6:27:71:7c:a4:c5:26:08:59:49:ba:
36:b2:b3:92:6d:35:89:53:9c:b2:a7:7f:e1:34:59:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E6:19:3A:BC:41:13:C4:2E:0F:0B:5B:9D:96:94:43:32:9B:FA:8B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/neYZOrxBE8QuDwtbnZaUQzKb-os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.222.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ef:6f:04:24:fd:e9:09:4d:ad:0e:88:49:dc:cb:1f:7d:39:
0e:59:d4:7e:07:d1:96:0b:9e:1b:bc:19:2b:fd:63:26:63:3a:
83:b2:9d:d5:2f:11:a0:97:ec:12:a8:7e:59:c0:2a:07:25:0d:
92:8d:22:81:7e:c8:2a:1e:6d:cd:2b:c5:ac:7f:06:9c:cf:04:
24:17:51:0f:90:17:a2:e0:fb:e6:0a:be:3b:90:66:22:3f:47:
33:d8:01:4c:8f:d3:9e:77:5c:d7:44:f0:e6:d7:b6:58:26:fc:
52:08:5f:7c:0d:cd:a4:3c:7f:ed:9b:3a:5e:df:6a:81:cb:ac:
ea:a3:52:24:06:6f:95:0a:04:08:30:4d:2f:e3:0f:7b:a9:5c:
f4:7a:1b:95:c6:46:0f:77:90:8f:13:c1:43:01:9d:d9:65:e8:
36:b8:2d:63:f1:12:ce:32:e8:d0:7a:70:cb:2e:e3:06:41:f4:
6d:b6:d3:80:4d:0c:7c:d3:fe:91:4f:e4:7c:43:fb:7a:31:89:
d9:1a:88:53:f2:a0:3a:e5:3d:d2:c1:47:21:45:49:05:e0:b8:
7f:da:7d:78:e5:31:f4:58:e4:57:34:ac:fa:46:7b:c1:7c:7f:
8a:24:07:9f:83:d5:5a:52:d2:ac:ce:2c:14:8d:e9:da:cf:c0:
b2:e3:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:32 2025 by rpki-client