Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/EkUIGjWiNAunJ0m4VD6N0lbMIt8.roa
File: EkUIGjWiNAunJ0m4VD6N0lbMIt8.roa (raw, json)
Hash identifier: APmjj8E3v76VLgRg+v7SdezJbT5vDpWvktN4FM1/GHk=
Subject key identifier: 12:45:08:1A:35:A2:34:0B:A7:27:49:B8:54:3E:8D:D2:56:CC:22:DF
Certificate issuer: /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Certificate serial: 019425FD685D91D12202EFD73F4C496AD16D
Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/EkUIGjWiNAunJ0m4VD6N0lbMIt8.roa
Signing time: Thu 02 Jan 2025 07:49:11 +0000
ROA not before: Thu 02 Jan 2025 07:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142275
IP address blocks: 84.33.12.0/23 maxlen: 24
84.33.15.0/24 maxlen: 24
84.33.16.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:68:5d:91:d1:22:02:ef:d7:3f:4c:49:6a:d1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d
Validity
Not Before: Jan 2 07:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1245081a35a2340ba72749b8543e8dd256cc22df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ed:17:e8:77:42:cf:16:71:dc:5b:ae:5b:b4:
73:2c:79:95:45:76:78:8f:a5:50:54:13:1f:ec:9f:
49:8f:95:66:ad:38:64:6d:cc:69:b0:72:2c:8c:f4:
21:f6:b7:54:45:e3:22:33:25:2b:c5:61:7e:e0:c8:
bb:6a:7b:0f:42:f7:e3:e3:d7:7d:d7:53:19:26:04:
3f:97:9d:99:79:48:9e:14:da:86:32:f6:6a:ec:07:
e6:78:a5:98:0e:45:33:d6:b9:45:a8:d2:18:cd:ee:
c0:31:22:38:09:88:04:3a:d9:59:ce:4f:a1:51:ce:
e7:2a:6d:30:55:d7:bb:77:d7:4d:25:bf:1f:b3:e9:
4c:5c:ab:89:86:6c:fb:19:26:d0:7d:a0:e7:c7:33:
a0:fb:cc:9c:c6:16:01:ea:0a:0d:52:90:c0:57:51:
43:72:d5:01:3b:06:c7:65:27:dc:83:e0:85:ef:85:
9f:eb:a4:a5:2d:ab:fc:52:12:5b:f6:e0:7e:8a:ff:
fa:6a:f1:7a:73:e5:44:cc:48:57:e9:53:47:9f:71:
9b:3f:33:20:8e:13:c3:2b:05:e5:6d:6b:73:23:b6:
c6:63:04:0e:87:6a:f0:19:44:80:7d:44:1d:26:7d:
09:20:e1:0b:7f:08:53:26:f1:57:c4:c2:b4:d9:5f:
56:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:45:08:1A:35:A2:34:0B:A7:27:49:B8:54:3E:8D:D2:56:CC:22:DF
X509v3 Authority Key Identifier:
keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/EkUIGjWiNAunJ0m4VD6N0lbMIt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.33.12.0/23
84.33.15.0-84.33.17.255
Signature Algorithm: sha256WithRSAEncryption
90:e1:51:2c:cb:e6:cc:d6:ff:23:d3:fe:32:2e:17:c5:9f:a0:
24:cd:78:0a:46:84:51:a4:6a:c3:93:ab:4a:2d:aa:db:f4:82:
65:b0:dc:69:72:86:71:28:e2:48:cf:ae:40:6c:3b:e9:90:b1:
9f:d8:6b:bb:b1:bb:db:a7:0e:f7:1c:12:7f:a0:dd:f5:f5:2b:
3d:cd:0e:b4:03:6b:ef:cb:a5:22:af:2b:1c:2e:47:65:7f:70:
0a:00:93:45:b5:be:99:f9:a2:59:6c:6c:a0:5f:06:91:dc:42:
21:e6:cc:4c:a5:3c:b5:a3:e2:4f:91:9e:9d:b5:ed:0c:a1:83:
19:04:ba:60:8e:37:08:bd:45:e7:2d:2b:c5:24:28:88:8b:3a:
23:14:96:26:69:65:a0:4b:a5:5f:f2:44:ed:d5:aa:70:94:8e:
fc:3f:b2:92:75:49:de:09:a7:2e:ea:e5:a3:f2:4c:22:a7:32:
9a:de:af:e1:b2:97:e1:00:25:c8:19:e7:64:44:51:1e:2a:bb:
c2:7c:25:3b:6b:79:53:46:72:f7:52:87:85:60:26:de:cc:ac:
53:bd:dd:83:cd:c8:1e:4d:00:90:40:57:c2:57:b7:c9:c5:db:
1c:e3:1d:bf:84:5b:62:8b:51:cf:bb:a3:78:36:5a:e8:bd:02:
ba:b0:bb:63
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQl/WhdkdEiAu/XP0xJatFtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZWJjOWJmZWYyYjRkMjNmMTk1MTNiZmQ0ZDYwYmI3OThm
NWE1OWQwHhcNMjUwMTAyMDc0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjQ1MDgxYTM1YTIzNDBiYTcyNzQ5Yjg1NDNlOGRkMjU2Y2MyMmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u0X6HdCzxZx3FuuW7RzLHmVRXZ4
j6VQVBMf7J9Jj5VmrThkbcxpsHIsjPQh9rdUReMiMyUrxWF+4Mi7ansPQvfj49d9
11MZJgQ/l52ZeUieFNqGMvZq7AfmeKWYDkUz1rlFqNIYze7AMSI4CYgEOtlZzk+h
Uc7nKm0wVde7d9dNJb8fs+lMXKuJhmz7GSbQfaDnxzOg+8ycxhYB6goNUpDAV1FD
ctUBOwbHZSfcg+CF74Wf66SlLav8UhJb9uB+iv/6avF6c+VEzEhX6VNHn3GbPzMg
jhPDKwXlbWtzI7bGYwQOh2rwGUSAfUQdJn0JIOELfwhTJvFXxMK02V9WOwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBJFCBo1ojQLpydJuFQ+jdJWzCLfMB8GA1UdIwQY
MBaAFKrryb/vK00j8ZUTv9TWC7eY9aWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXV2SnYtOHJUU1B4bFJPXzFOWUx0NWoxcFowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9mYjEyODktNGQxNC00MGYwLTk2Nzkt
MTFhZmI0OTkyZWVmLzEvRWtVSUdqV2lOQXVuSjBtNFZENk4wbGJNSXQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9mYjEyODktNGQxNC00MGYwLTk2NzktMTFhZmI0OTkyZWVm
LzEvcXV2SnYtOHJUU1B4bFJPXzFOWUx0NWoxcFowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBVCEMMAwD
BABUIQ8DBAFUIRAwDQYJKoZIhvcNAQELBQADggEBAJDhUSzL5szW/yPT/jIuF8Wf
oCTNeApGhFGkasOTq0otqtv0gmWw3GlyhnEo4kjPrkBsO+mQsZ/Ya7uxu9unDvcc
En+g3fX1Kz3NDrQDa+/LpSKvKxwuR2V/cAoAk0W1vpn5ollsbKBfBpHcQiHmzEyl
PLWj4k+Rnp217QyhgxkEumCONwi9RectK8UkKIiLOiMUliZpZaBLpV/yRO3VqnCU
jvw/spJ1Sd4Jpy7q5aPyTCKnMprer+Gyl+EAJcgZ52REUR4qu8J8JTtreVNGcvdS
h4VgJt7MrFO93YPNyB5NAJBAV8JXt8nF2xzjHb+EW2KLUc+7o3g2Wui9Arqwu2M=
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:09:37 2025 by rpki-client