Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/2BUGiRoL3RcSi7pY5f5xCjUN0VE.roa
File: 2BUGiRoL3RcSi7pY5f5xCjUN0VE.roa (raw, json)
Hash identifier: 6n3B6T6zOS7/ZMATij6xHm3dHxmihydJs8pSIyJdQOo=
Subject key identifier: D8:15:06:89:1A:0B:DD:17:12:8B:BA:58:E5:FE:71:0A:35:0D:D1:51
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 0194221FB1687E2D90CCBF462A290FA65D92
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/2BUGiRoL3RcSi7pY5f5xCjUN0VE.roa
Signing time: Wed 01 Jan 2025 13:48:09 +0000
ROA not before: Wed 01 Jan 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5550
IP address blocks: 153.19.0.0/16 maxlen: 16
2001:4070::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b1:68:7e:2d:90:cc:bf:46:2a:29:0f:a6:5d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d81506891a0bdd17128bba58e5fe710a350dd151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:60:43:ab:6d:39:a3:a3:04:c3:a2:0d:6a:
77:41:f4:57:73:c5:97:4a:50:04:b4:ab:36:32:cd:
9a:ee:f5:9c:dc:01:38:db:49:9f:ff:85:b2:0e:fc:
73:99:e9:1b:64:36:ee:9f:3d:39:33:eb:a9:ab:4a:
00:bc:6d:f7:4a:d1:6e:6b:7e:f9:ad:aa:ec:c4:73:
4c:ce:a8:ad:56:b3:25:b7:17:30:f7:af:80:9f:fb:
df:fc:b4:52:38:8c:ef:96:47:91:45:2b:e4:a8:39:
09:1c:09:61:88:11:8c:52:b9:d8:5e:11:0a:46:fb:
4b:1f:f1:7e:6f:46:ba:41:ce:6c:6a:df:36:98:c2:
d8:1e:60:ec:37:c7:bd:ea:b3:5b:c8:4c:b9:4d:3f:
2f:b1:2c:11:e6:34:f7:ec:21:85:42:31:db:2a:2a:
7a:97:42:c5:6d:f6:c7:5d:63:3f:e4:5e:da:54:2b:
19:be:15:c8:fc:ab:b3:28:05:20:10:e2:2a:34:09:
dc:68:21:30:ec:2d:59:b4:be:32:f2:9d:74:cb:2b:
b7:ee:da:f8:ab:2a:78:a0:0c:2a:a6:62:d4:a6:10:
d2:27:18:1f:89:29:71:d9:30:af:81:e4:23:80:78:
89:4b:58:ec:98:22:d3:1d:13:ae:16:70:82:41:62:
91:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:15:06:89:1A:0B:DD:17:12:8B:BA:58:E5:FE:71:0A:35:0D:D1:51
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/2BUGiRoL3RcSi7pY5f5xCjUN0VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.19.0.0/16
IPv6:
2001:4070::/33
Signature Algorithm: sha256WithRSAEncryption
36:bb:1e:78:13:97:c9:15:2c:b5:3b:02:8d:97:19:ab:f9:99:
78:f5:3a:a9:a4:38:03:eb:cc:95:7d:32:43:31:69:fb:df:36:
40:b7:95:18:9f:72:b5:22:9f:b3:c4:62:b0:f1:f3:f0:4d:77:
8d:b2:98:8a:a0:06:bd:15:d5:10:28:81:b8:28:17:97:b0:a1:
6c:b1:3c:79:74:9a:1a:fd:2c:08:39:5c:66:c5:21:c3:6f:a8:
44:60:94:6b:2a:6c:ca:c7:eb:2e:53:7d:a7:d0:3d:e8:ef:77:
aa:76:30:00:54:f0:15:8b:bb:8b:e2:b1:d4:15:ec:54:b0:7a:
81:ba:b1:65:47:e9:ce:21:fa:49:54:88:24:06:18:4d:6b:2c:
d6:c7:e3:b5:58:4c:47:b0:5f:74:72:8b:1e:3f:cf:d4:9d:22:
aa:5e:e0:0f:74:e2:22:8f:d6:6c:72:8f:07:33:1d:07:e4:0a:
62:e8:b4:b6:de:77:75:7c:b2:48:fd:f7:89:94:43:78:1a:8b:
4c:07:9d:b5:08:99:ff:de:d3:0a:ea:9f:62:8a:9b:43:0f:f8:
ac:97:a1:13:50:6f:07:9d:f9:93:c4:c1:08:45:b5:b4:22:db:
69:88:46:83:ff:2c:92:12:9e:a1:0f:cd:94:9e:39:32:59:9e:
66:5c:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:20 2025 by rpki-client