Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/Eax-YG047Te5n0m45RUjhbrR1oI.roa
File: Eax-YG047Te5n0m45RUjhbrR1oI.roa (raw, json)
Hash identifier: iDlk1T+vVuMTMOmIBdx2Kl0rk1EldiQCxibfcQYd5i0=
Subject key identifier: 11:AC:7E:60:6D:38:ED:37:B9:9F:49:B8:E5:15:23:85:BA:D1:D6:82
Certificate issuer: /CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Certificate serial: 019421B190AA8E7D05DAA291ECF9A9832868
Authority key identifier: A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/Eax-YG047Te5n0m45RUjhbrR1oI.roa
Signing time: Wed 01 Jan 2025 11:47:52 +0000
ROA not before: Wed 01 Jan 2025 11:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59778
IP address blocks: 91.232.124.0/24 maxlen: 24
91.232.125.0/24 maxlen: 24
95.215.224.0/24 maxlen: 24
95.215.225.0/24 maxlen: 24
95.215.226.0/24 maxlen: 24
95.215.227.0/24 maxlen: 24
178.216.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:90:aa:8e:7d:05:da:a2:91:ec:f9:a9:83:28:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Validity
Not Before: Jan 1 11:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11ac7e606d38ed37b99f49b8e5152385bad1d682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:37:6f:89:82:41:f2:ac:d7:95:94:bc:82:
17:e9:6b:36:99:04:dc:3f:45:30:6e:40:74:00:cc:
d4:d4:3d:1b:58:cb:2d:66:5c:04:e4:27:7a:be:97:
34:5e:fa:0e:23:d7:21:89:6b:b7:af:40:dc:70:34:
08:d3:14:ec:7a:b3:39:b3:d2:09:db:74:08:ce:a7:
97:c1:ec:af:11:ca:31:3a:c0:c4:e3:6f:d5:d4:3c:
24:74:9a:6c:94:52:75:7c:88:6e:e2:61:bf:28:59:
22:bf:74:6e:81:bf:dd:3c:db:2b:ff:89:83:9d:dd:
ba:4f:82:d1:0f:05:cc:cc:9f:b6:9b:56:e4:f6:89:
f6:84:17:04:95:0c:d1:03:fe:30:f8:9f:48:72:cb:
9e:7f:26:ee:02:76:72:1d:f9:2b:8e:d6:8d:62:9b:
96:b5:cf:f3:4d:5e:94:0a:6a:c2:5d:d9:37:46:fe:
09:83:89:5c:f0:e7:ae:29:0f:22:52:bf:c8:36:d6:
ca:5b:e7:8a:4e:2d:72:ed:12:54:a5:b6:f0:ce:c6:
5b:ce:f8:1a:6f:66:9e:3d:78:47:70:92:7a:d3:a5:
4e:65:a3:fa:2c:07:55:27:7c:44:bf:72:c6:61:c1:
0b:28:66:ac:96:f5:9f:fb:9a:5b:91:04:8f:3c:8c:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AC:7E:60:6D:38:ED:37:B9:9F:49:B8:E5:15:23:85:BA:D1:D6:82
X509v3 Authority Key Identifier:
keyid:A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/Eax-YG047Te5n0m45RUjhbrR1oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.124.0/23
95.215.224.0/22
178.216.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:dd:33:a9:c0:56:e3:bd:27:1a:c3:2d:9c:e7:17:60:97:1b:
b3:66:fc:80:e0:ef:64:39:80:64:64:66:93:87:e1:d3:11:0e:
cd:1c:12:94:6b:27:ca:e4:31:0c:30:f6:2d:16:fd:92:a6:20:
03:26:13:5a:9e:5b:05:22:f7:1a:39:f5:43:d4:82:f4:7e:fd:
77:f7:c4:91:0e:88:41:b3:ff:38:d4:c1:7a:56:d6:a2:06:7b:
4f:fb:97:2b:73:dc:53:ae:c0:8f:f3:67:96:08:9d:a8:b5:17:
f0:41:2d:97:c2:af:96:d3:bc:4d:5c:c4:93:9e:33:a6:e6:92:
48:de:a8:e3:e3:9b:6d:d9:f5:2a:e1:47:81:07:d0:bd:87:73:
02:4b:6b:9f:0a:a2:f9:d5:33:dc:c5:04:96:4f:17:3e:69:4e:
07:6e:4a:9f:b9:bf:52:00:b9:6f:73:c5:d2:08:1d:ce:40:0f:
d9:3a:58:a6:ef:79:32:b1:f1:d9:2a:34:f2:da:45:0f:f0:73:
14:73:a6:84:c0:c1:10:71:90:0d:0f:ed:a4:a9:46:89:8c:9b:
eb:44:af:91:d0:d9:42:ea:57:d9:51:a3:2a:3e:a8:34:51:5f:
47:47:cf:f5:ad:a8:3e:a7:d0:50:82:9d:09:b7:06:c8:44:57:
85:dc:50:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:16 2025 by rpki-client