Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Eg5cB0gFbZt-mtb2g5DlnYfptYU.roa
File: Eg5cB0gFbZt-mtb2g5DlnYfptYU.roa (raw, json)
Hash identifier: N8GnHFT4fRhNM3nodSxCZOH18KkVNRyweY1llmfoJHs=
Subject key identifier: 12:0E:5C:07:48:05:6D:9B:7E:9A:D6:F6:83:90:E5:9D:87:E9:B5:85
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019427B5FEC9B61D0CC2C7A44E4A5A6AFF95
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Eg5cB0gFbZt-mtb2g5DlnYfptYU.roa
Signing time: Thu 02 Jan 2025 15:50:26 +0000
ROA not before: Thu 02 Jan 2025 15:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204203
IP address blocks: 85.133.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:fe:c9:b6:1d:0c:c2:c7:a4:4e:4a:5a:6a:ff:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 15:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=120e5c0748056d9b7e9ad6f68390e59d87e9b585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:6e:5b:ff:60:6f:16:05:41:6c:34:8a:14:
9f:7a:65:c4:8e:2b:2d:56:7b:6c:ba:df:8c:97:b7:
c9:ba:e8:e7:25:fb:dc:d3:1d:f5:fd:4c:e1:d9:a4:
87:f5:ad:4b:42:be:a8:c5:bc:26:7a:b5:44:30:bd:
60:64:98:66:da:d0:a2:2b:00:ec:99:ff:88:04:75:
5e:9b:cd:07:96:31:4c:66:27:f5:26:0e:36:84:5c:
28:f4:b2:34:b3:bf:c8:13:ca:c4:5a:b6:6e:0c:4a:
0d:6c:84:81:60:ee:e1:34:2f:d1:9f:68:88:0d:d9:
ef:52:8e:d2:6a:3c:fe:e7:4f:62:18:19:02:aa:db:
2c:4e:21:90:62:d0:1c:cc:38:23:89:2b:b6:3b:cb:
d5:9a:32:56:09:50:4e:6a:6d:fc:52:18:7d:ec:ca:
6e:6d:7e:cd:82:62:c9:40:47:73:22:99:5e:c1:1d:
02:14:85:14:99:6d:33:25:6d:e1:f6:37:64:76:70:
00:93:64:9f:5b:e7:74:09:99:9f:64:9f:92:01:03:
b6:54:ca:20:d5:28:04:83:61:a6:cb:6a:5b:fc:61:
ca:e9:dd:d3:e4:fc:58:70:86:57:b4:2a:16:99:ee:
b1:26:ae:20:3a:4b:da:89:76:59:0f:78:b2:31:10:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0E:5C:07:48:05:6D:9B:7E:9A:D6:F6:83:90:E5:9D:87:E9:B5:85
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Eg5cB0gFbZt-mtb2g5DlnYfptYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.206.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:43:6c:13:f1:0d:1c:fa:18:57:b2:2c:67:33:ee:26:e3:ac:
f9:9b:f7:02:c4:a6:c1:b9:ea:bf:06:f2:78:94:7d:f0:e9:f1:
da:7c:65:31:aa:39:41:a4:2b:b4:61:e4:97:62:72:95:ae:a2:
d0:37:48:01:e9:6b:f7:d2:b9:cf:c0:de:c4:d6:ee:93:38:b2:
a5:12:d8:1f:9e:93:e2:e0:4a:19:7f:6d:85:4b:75:61:ad:6d:
40:11:8f:d7:a0:57:a4:79:49:f5:db:67:6c:84:de:59:31:79:
70:88:ba:8d:c9:30:0f:7a:81:9f:6a:70:e9:89:47:15:a4:d7:
1a:3b:fb:bc:68:09:ed:42:a4:6b:f8:c1:73:dd:e2:84:c3:b9:
ba:97:4b:3f:da:c0:aa:64:ef:93:e0:18:0a:d3:27:4c:45:77:
33:12:a1:87:9a:02:d8:54:0c:cb:40:4b:c7:f9:54:67:e8:1a:
f8:8c:90:d5:87:95:2c:b3:91:5f:e4:5a:03:a3:14:fb:0e:83:
28:44:2b:34:0e:8d:bd:0b:66:84:f6:69:d6:c7:86:69:06:1f:
a4:da:81:b9:1b:e7:bc:35:5f:97:fc:71:7c:02:a2:60:25:01:
bb:eb:37:a7:be:81:71:07:24:55:bf:87:2a:6b:68:47:81:e1:
ae:78:2a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:08 2025 by rpki-client