Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pOjKdr7tEcrosP8bgd6duGdhVVw.roa
File: pOjKdr7tEcrosP8bgd6duGdhVVw.roa (raw, json)
Hash identifier: mNn31AZa868/ASYPlAG+mVy+QWFuE9IfAL4q1BVeK0o=
Subject key identifier: A4:E8:CA:76:BE:ED:11:CA:E8:B0:FF:1B:81:DE:9D:B8:67:61:55:5C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01942220130D9A9A53B5D6F61F23C3C8DACD
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pOjKdr7tEcrosP8bgd6duGdhVVw.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55286
IP address blocks: 94.229.209.0/24 maxlen: 24
94.229.211.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:13:0d:9a:9a:53:b5:d6:f6:1f:23:c3:c8:da:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4e8ca76beed11cae8b0ff1b81de9db86761555c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:27:1a:03:38:7e:cf:e0:91:b9:c3:c6:55:
ec:58:7a:86:c7:d8:24:1b:a2:dd:e2:13:25:a3:ee:
7e:a4:44:18:e6:e4:4a:c0:ea:86:73:38:bc:9c:08:
a6:25:11:b1:02:8f:45:b1:d9:4b:89:0e:75:7b:f9:
ac:c8:39:95:a3:a5:1d:da:7e:15:84:cd:19:72:7c:
13:da:6c:5a:6a:cd:f0:a4:23:04:50:f0:e1:70:b3:
7e:b4:cf:88:62:86:37:7f:0a:87:d0:43:0e:0a:75:
7d:19:8f:4e:d4:da:f4:10:85:b6:bb:61:a5:e5:cf:
a9:a2:1c:da:5a:51:a5:bf:d9:56:e3:28:ea:a9:8b:
6c:e8:a2:75:47:55:72:68:c2:a5:3e:49:ab:d8:71:
f9:5c:31:b0:c8:78:46:f3:90:b2:d0:87:a4:d2:0c:
05:26:0b:b3:58:1a:c5:38:a6:63:8d:29:3b:6c:8e:
6b:cc:e8:8d:29:6f:9f:b7:cb:65:c8:2b:65:24:b9:
3e:fa:48:58:0f:c0:ef:54:aa:fe:b0:08:60:c9:2e:
dd:80:d0:e1:2c:dd:29:75:f6:86:3c:42:f9:c7:4b:
a0:37:b6:e4:67:21:4c:7f:cf:57:32:96:14:df:23:
3d:39:11:fb:b9:dc:18:32:9b:bc:39:57:61:3f:73:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E8:CA:76:BE:ED:11:CA:E8:B0:FF:1B:81:DE:9D:B8:67:61:55:5C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pOjKdr7tEcrosP8bgd6duGdhVVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.209.0/24
94.229.211.0/24
94.229.213.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:0d:59:60:97:67:41:0e:a8:a6:53:6e:b8:e8:27:b3:b7:bc:
ac:b6:a1:08:33:2e:bc:6c:33:89:33:a7:1b:ed:e2:f0:9a:e3:
74:dd:bc:16:6f:00:a2:e7:38:f4:d9:e1:17:6e:58:a0:f3:72:
eb:2f:f5:60:0f:8f:2b:ed:bf:aa:01:4b:c7:6c:e2:74:3a:24:
8c:27:1e:6d:c2:83:02:72:89:ed:9f:01:f7:8d:6f:97:c8:31:
98:f3:89:01:b9:1f:51:1a:50:e8:09:ee:f0:38:73:a0:29:c3:
33:e7:72:5d:21:da:65:1d:f3:c9:c2:1e:a0:e8:63:54:2f:f1:
3a:1f:d2:ac:af:a8:20:34:d1:2e:28:90:95:89:44:2c:ff:16:
a7:12:b1:60:d7:5e:20:04:5a:4d:6d:db:56:82:c0:52:cd:c2:
e4:47:35:b3:70:9f:ea:f3:ba:4f:80:68:c0:6a:b9:05:47:0e:
2f:40:2a:f2:71:aa:1b:d2:ae:1e:0d:1e:90:0d:9e:de:bc:35:
4c:75:df:cd:c8:66:da:5f:b9:7e:46:d7:d3:2c:d0:aa:64:c8:
f2:17:fa:31:54:65:cd:a1:31:6b:01:b8:51:e3:a1:9f:aa:01:
c0:6c:c4:95:87:d2:d4:9a:ee:ee:5b:3c:36:90:59:3e:8a:ed:
1d:02:ea:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:54 2025 by rpki-client