Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/u_wGMevG4nhnT3zLqd4DZVJxmuI.roa
File: u_wGMevG4nhnT3zLqd4DZVJxmuI.roa (raw, json)
Hash identifier: mti4nWmHR7opKWk2ngtcPJibYiXtw8tW9QxbzfkMPdQ=
Subject key identifier: BB:FC:06:31:EB:C6:E2:78:67:4F:7C:CB:A9:DE:03:65:52:71:9A:E2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019422200A7E9B1BC4987B85531F8F8CF5C6
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/u_wGMevG4nhnT3zLqd4DZVJxmuI.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 94.229.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0a:7e:9b:1b:c4:98:7b:85:53:1f:8f:8c:f5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbfc0631ebc6e278674f7ccba9de036552719ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:62:8f:33:b1:bf:36:26:27:04:2d:ee:3a:
25:a0:9e:69:62:ae:b6:df:ae:91:94:37:29:a3:7d:
7f:ca:02:61:a2:ff:63:7a:44:c6:a0:f2:25:e0:01:
57:a5:82:b9:a9:be:9c:0f:71:ce:01:01:6e:4a:cc:
1e:ef:b9:89:fa:df:35:a9:cd:02:9c:be:74:ab:cd:
ca:4f:fd:a1:c8:92:bd:b7:d5:f3:ec:53:f5:ff:bc:
9c:39:07:ca:b7:10:e8:e7:0a:b0:44:95:ac:49:07:
eb:7d:7e:b5:ca:23:88:dc:c0:4d:7a:34:92:81:f3:
2c:72:4c:0d:c3:56:99:5c:6b:5c:26:1f:ae:d6:65:
06:76:05:fd:84:76:43:81:45:b5:92:ba:d2:32:01:
43:2a:3a:d4:d0:90:1d:5f:39:41:9d:65:e8:dd:3c:
c8:0d:87:ec:7e:a5:e1:85:75:79:a3:53:33:40:96:
35:ae:27:b5:b3:cd:04:a7:de:12:56:b6:f3:2b:0d:
f8:96:92:a9:d2:5c:86:2b:ce:21:4f:8b:79:f6:29:
49:76:d3:87:77:78:b0:f3:7c:9b:76:19:54:11:ea:
d3:b4:03:63:6a:00:3c:b3:2c:33:f7:df:85:a5:c5:
8c:fd:2f:d7:6d:1b:39:cc:ab:cc:dd:e7:0c:c6:2e:
b0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FC:06:31:EB:C6:E2:78:67:4F:7C:CB:A9:DE:03:65:52:71:9A:E2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/u_wGMevG4nhnT3zLqd4DZVJxmuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.210.0/24
Signature Algorithm: sha256WithRSAEncryption
54:92:43:ff:e0:16:38:23:81:ac:ac:3c:89:46:69:77:8b:8d:
60:03:8a:66:5a:a3:17:16:5c:df:ef:31:0a:93:42:5e:d0:64:
ce:6e:a1:e3:1c:9a:2b:f6:86:97:2a:91:d6:9d:92:8c:d4:28:
e6:af:39:f9:1d:7e:81:7c:63:de:d6:e1:3d:95:5e:5d:ec:cf:
8e:0b:d5:f7:1d:94:bd:44:d1:85:01:7b:6f:8f:8f:2e:c4:2e:
9b:15:0d:c3:5a:05:ff:cc:58:5d:21:50:51:d2:5f:3e:e4:f8:
9a:58:34:fd:88:50:69:51:da:d4:68:61:81:10:23:3b:18:fb:
04:73:7f:f1:1e:92:d2:68:19:ea:03:37:e9:c1:a9:7a:cc:88:
1d:ed:2c:c4:05:dd:98:c6:cc:e5:cc:1e:9b:f2:be:55:ea:eb:
c1:1d:2b:4c:32:a7:6b:b7:ec:3d:89:d0:de:00:05:0d:bb:e7:
9c:43:1f:ca:eb:fb:9a:54:a9:9b:0b:c5:b3:ee:f1:6b:2f:5a:
61:2b:a7:96:15:6e:88:bd:f9:c3:d0:32:d0:67:57:e4:d5:d3:
3a:b9:03:90:cf:ab:18:f0:96:dd:04:cc:40:2a:c8:65:b2:7b:
1f:8c:a4:6e:ee:16:d0:52:7c:fc:e6:49:0d:f0:26:67:19:1a:
31:b0:43:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:24 2025 by rpki-client