Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/eWric6r-5T_Rp4hV5FAy7I4IoJY.roa
File: eWric6r-5T_Rp4hV5FAy7I4IoJY.roa (raw, json)
Hash identifier: NkPTqBN+TTAOu9SJvsMG3iRYoMiT60DbDNclBXlGKDo=
Subject key identifier: 79:6A:E2:73:AA:FE:E5:3F:D1:A7:88:55:E4:50:32:EC:8E:08:A0:96
Certificate issuer: /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial: 0194266B7718B281DE32861EF7B6BBA545B1
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/eWric6r-5T_Rp4hV5FAy7I4IoJY.roa
Signing time: Thu 02 Jan 2025 09:49:24 +0000
ROA not before: Thu 02 Jan 2025 09:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57954
IP address blocks: 192.162.19.0/24 maxlen: 24
193.105.210.0/24 maxlen: 24
194.1.159.0/24 maxlen: 24
2001:67c:13a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:77:18:b2:81:de:32:86:1e:f7:b6:bb:a5:45:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Validity
Not Before: Jan 2 09:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=796ae273aafee53fd1a78855e45032ec8e08a096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:f8:28:d3:95:4c:b0:98:00:64:d9:75:b0:
c5:3b:d4:97:ef:64:84:61:1b:06:db:d3:93:b6:78:
ad:ee:d5:b5:07:b4:7e:24:5e:b5:8c:ad:ca:12:9b:
aa:3d:d1:b8:d2:11:64:59:77:16:b3:ec:80:fe:50:
32:cf:c2:56:91:f5:4d:c1:f3:51:0b:f9:5d:62:59:
f0:0e:a7:61:71:aa:99:e8:c9:9b:66:e7:dd:07:ae:
ac:cf:8e:bb:af:f0:05:00:c7:fc:2e:11:fb:8d:37:
5f:d6:c6:eb:fe:b9:6c:45:72:d1:02:c9:a3:2a:db:
f4:db:2c:6d:12:11:4b:61:fa:9e:30:91:2c:31:c0:
97:74:39:75:60:99:68:6e:31:b4:77:1e:36:f6:0f:
36:0b:d8:09:ba:9a:70:e7:e0:e2:c2:02:71:13:9b:
4f:7e:e6:66:02:60:5f:bd:63:7f:80:7f:95:10:df:
8c:4b:c9:8e:2d:93:9e:8c:b4:2f:2e:13:d5:86:41:
82:fb:5f:c4:77:83:2e:9d:c4:30:2e:82:02:6c:74:
23:f6:7b:de:1b:08:87:e3:d0:52:c9:fc:92:94:a8:
97:71:84:1f:2a:5b:e3:d9:2c:c9:f7:a9:66:3d:82:
3e:30:69:cd:7e:7c:d5:fc:6d:8d:d7:99:9c:5a:1b:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6A:E2:73:AA:FE:E5:3F:D1:A7:88:55:E4:50:32:EC:8E:08:A0:96
X509v3 Authority Key Identifier:
keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/eWric6r-5T_Rp4hV5FAy7I4IoJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.19.0/24
193.105.210.0/24
194.1.159.0/24
IPv6:
2001:67c:13a0::/48
Signature Algorithm: sha256WithRSAEncryption
21:56:3f:e2:4c:54:6d:dd:00:6c:0c:06:9f:37:62:31:f9:de:
b9:d8:fc:71:eb:8f:d8:f5:5f:e1:69:8b:9b:70:d7:7d:0f:4b:
e5:be:6c:6c:86:69:00:8e:f9:36:93:ee:82:89:ab:de:a7:d4:
e3:57:f2:aa:e6:f7:c6:1f:da:50:77:ef:07:4f:24:bb:ec:9f:
1c:6f:84:02:2d:28:aa:76:88:4a:d4:65:86:27:23:4e:cf:0f:
33:1f:f2:c1:f8:16:cd:f4:5e:f9:74:fa:85:a6:23:0e:cf:1e:
59:39:15:d0:15:d0:2b:de:f0:67:60:44:f7:fd:ce:1d:da:f0:
36:53:95:07:9b:3d:17:2b:07:6c:f9:c1:b1:a4:0d:33:f2:2d:
8b:00:7d:b0:a4:5b:db:03:f9:ea:af:cd:51:b2:f0:b4:fa:4e:
a5:51:e6:2b:d8:20:0c:c2:40:59:25:15:f7:44:cd:f0:ff:8a:
39:12:5f:7b:24:6d:2a:28:88:1e:8d:b5:ec:c9:e7:84:0e:6f:
05:1d:e3:b4:17:01:f7:0a:7f:1c:4d:2c:f3:5a:9b:90:83:63:
89:f6:fb:d2:bb:5b:1e:6b:64:94:1a:a2:b7:f4:7d:c7:65:1e:
28:1b:cc:2d:2c:75:c8:87:d3:8e:9c:1b:d3:65:0a:6e:fd:e9:
8d:1d:09:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:57:49 2025 by rpki-client