Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa
File: EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa (raw, json)
Hash identifier: oERKMEQ/M129kNgVvoyFhR9aTD1YFXrhdgiUJ9nGJ/4=
Subject key identifier: 11:E2:6E:67:A6:6E:60:C7:8F:F8:DE:00:02:AE:F6:78:19:4E:72:93
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019427B5DAD77820F8FC0E1DD1A996D149A8
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa
Signing time: Thu 02 Jan 2025 15:50:16 +0000
ROA not before: Thu 02 Jan 2025 15:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 77.232.128.0/22 maxlen: 22
77.232.128.0/24 maxlen: 24
77.232.129.0/24 maxlen: 24
77.232.130.0/24 maxlen: 24
77.232.131.0/24 maxlen: 24
77.232.132.0/22 maxlen: 22
77.232.132.0/24 maxlen: 24
77.232.133.0/24 maxlen: 24
77.232.134.0/24 maxlen: 24
77.232.135.0/24 maxlen: 24
77.232.136.0/22 maxlen: 22
77.232.136.0/24 maxlen: 24
77.232.137.0/24 maxlen: 24
77.232.138.0/24 maxlen: 24
77.232.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:da:d7:78:20:f8:fc:0e:1d:d1:a9:96:d1:49:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jan 2 15:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11e26e67a66e60c78ff8de0002aef678194e7293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d4:4a:2f:83:c8:3b:0b:bb:da:07:5c:59:10:
7e:a7:ca:39:ee:3d:3a:44:b1:f2:b7:e4:f4:6c:b5:
b4:c0:fd:38:e9:6b:d1:e7:c2:de:84:f3:c0:42:36:
c3:88:49:1a:36:c5:3a:5b:73:78:3e:df:57:f8:19:
02:77:fb:39:b9:8e:99:51:8d:5b:70:0d:15:fc:15:
e7:25:cd:00:dc:b5:8d:46:d4:8d:df:4e:ec:72:47:
e0:fd:95:f5:8a:46:20:b1:f0:59:62:ca:c0:bb:e3:
63:26:8b:eb:f9:53:ee:a6:55:9d:2a:b7:69:19:79:
ea:54:08:e7:fa:25:38:53:95:b9:a0:5e:18:85:b7:
ab:96:14:b7:b8:49:29:60:34:ff:25:b7:3e:d4:e4:
6a:d6:c0:b1:18:03:73:58:b5:4e:d3:de:e7:49:7c:
8e:78:06:e8:13:1e:fb:c1:a6:c7:3d:70:79:00:dc:
48:43:df:74:38:b4:af:d0:9e:07:c5:65:64:06:4f:
b4:54:e9:e3:2a:89:09:69:a1:0c:ea:59:11:2d:1c:
fb:42:77:81:7f:70:96:88:49:f6:b4:28:04:d5:b1:
88:74:89:11:73:87:6b:bf:0b:48:9f:23:d6:7c:a3:
dd:fd:0b:8c:dd:19:21:9f:3e:ff:13:1d:12:e9:45:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E2:6E:67:A6:6E:60:C7:8F:F8:DE:00:02:AE:F6:78:19:4E:72:93
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.128.0-77.232.139.255
Signature Algorithm: sha256WithRSAEncryption
e1:6d:d3:cc:c0:95:02:00:e4:37:ec:9e:8e:7f:f7:ff:c9:04:
fb:2a:fc:0c:bb:f5:fd:e6:88:49:5e:15:e5:2c:12:dc:47:95:
c0:a1:5d:16:86:80:dd:01:af:0d:a4:bc:a6:d7:5c:cd:0c:44:
be:9a:be:63:5f:c5:30:1c:cf:1f:b5:53:52:b9:ee:c6:bd:27:
2e:69:29:28:9e:d9:7e:8d:c5:78:e1:27:89:2e:b4:11:f4:76:
51:57:94:98:6f:4f:ae:53:65:c7:42:ed:e0:b3:2f:7b:17:0d:
27:f1:ce:ab:1e:99:1b:fc:4e:89:e4:58:21:55:ed:ba:a2:0b:
e7:91:51:88:33:88:87:fa:6c:71:c0:41:c8:c8:16:0d:6a:39:
e9:73:0f:6a:bd:0c:d3:5f:8e:c4:11:fa:b8:dc:55:37:65:a2:
6e:bb:a0:85:1a:d5:a9:a4:e4:cb:9b:26:8d:74:66:3d:ba:81:
08:bb:0d:ff:8b:1a:16:64:22:59:fb:99:47:93:cd:ea:84:de:
9e:fd:97:4a:01:27:18:c8:da:2e:b0:76:35:c4:b1:f5:91:ca:
e3:4d:40:1a:68:8b:df:64:78:22:33:11:ab:70:c4:ed:f0:bb:
7e:f3:f2:3c:25:30:dc:38:90:d0:f2:8c:e7:6d:9b:49:7c:fc:
0d:89:be:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:22:54 2025 by rpki-client