Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/eZOZdw0xvypBF51rN4RfpY5h6vA.roa
File: eZOZdw0xvypBF51rN4RfpY5h6vA.roa (raw, json)
Hash identifier: Rrqkszl7rnzrAJTcRtFLjvZXJPc9ZovjcSYFWUvutzY=
Subject key identifier: 79:93:99:77:0D:31:BF:2A:41:17:9D:6B:37:84:5F:A5:8E:61:EA:F0
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 0194228DD5A6AE7D81E99C29673342DC52B3
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/eZOZdw0xvypBF51rN4RfpY5h6vA.roa
Signing time: Wed 01 Jan 2025 15:48:27 +0000
ROA not before: Wed 01 Jan 2025 15:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39151
IP address blocks: 213.175.128.0/24 maxlen: 24
213.175.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d5:a6:ae:7d:81:e9:9c:29:67:33:42:dc:52:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Jan 1 15:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=799399770d31bf2a41179d6b37845fa58e61eaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2f:27:67:87:82:3f:92:7b:a8:02:5d:9c:16:
f6:0c:3d:ec:69:3f:da:b4:ff:ff:ee:9a:06:84:cd:
00:15:70:7c:8a:0a:88:0a:69:41:bf:89:4f:5c:ca:
9c:b8:fd:56:75:e4:bc:3f:41:7a:eb:8e:a0:21:ab:
8e:3f:39:53:23:20:ca:aa:3a:b0:f8:60:8d:92:e7:
b9:40:a2:4f:cb:bc:f1:36:2a:66:dc:29:bd:b2:73:
7c:ae:db:52:f7:66:23:c0:22:e5:0f:46:3a:34:51:
25:74:3e:f6:cf:ea:5d:b0:14:ff:39:5d:2e:81:5a:
45:e7:36:4f:ab:61:88:d6:df:d9:74:a3:ea:7b:a3:
8d:8a:92:bb:1e:db:a9:2d:b1:9a:57:e7:74:3b:8c:
6b:93:44:1c:0f:03:ef:fa:da:d1:e3:a5:68:7b:97:
3e:2f:77:65:0a:01:be:3c:b4:62:07:99:6e:67:ca:
d5:98:20:53:8b:53:a0:0c:4a:67:d8:f6:62:e5:83:
7b:fc:89:7a:ef:35:c3:07:1a:2f:7f:32:e2:7b:ec:
b0:29:41:68:7a:a2:d5:1f:83:2f:fb:2d:6a:41:b8:
37:83:3d:0d:fa:83:28:37:ab:ce:8e:d7:f0:4f:39:
f3:17:ab:f0:42:48:3b:b2:c4:37:4f:9f:f0:2d:22:
16:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:93:99:77:0D:31:BF:2A:41:17:9D:6B:37:84:5F:A5:8E:61:EA:F0
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/eZOZdw0xvypBF51rN4RfpY5h6vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.128.0/24
213.175.132.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ef:98:05:a3:f4:9f:2f:69:32:8a:86:15:8d:a5:03:cd:03:
9c:4b:a8:21:1d:8f:93:0e:f6:6b:d2:b6:29:ff:a0:15:10:7e:
bd:09:10:27:79:07:3f:0f:51:97:46:e1:fa:b7:89:15:62:6a:
60:06:b6:94:b8:d2:82:df:9f:78:82:00:83:5d:91:01:51:b4:
c1:1d:c6:07:fc:b7:c6:90:7f:f1:6d:dc:12:25:db:8a:ab:31:
d7:49:d5:eb:a4:66:b8:d7:4d:9c:7f:2a:57:35:88:91:1d:00:
33:c7:a1:45:f3:64:a3:58:96:2e:18:f6:b3:14:83:77:40:c6:
3f:1b:25:2d:f4:b6:9b:7e:27:57:89:1f:ee:4a:a7:2d:b7:91:
54:42:f0:b0:bf:67:21:7a:51:77:9c:95:d9:98:97:3d:ff:46:
97:16:2d:f1:d4:b1:97:f2:fe:fa:6c:9b:5e:d3:b4:5e:b7:30:
51:b6:3f:59:8b:44:35:6e:50:0c:0a:59:7e:ed:6a:5c:20:14:
1a:38:d1:48:9a:2e:1f:a2:55:09:38:48:56:1e:c8:d0:68:ed:
e7:bb:e6:d7:c7:e1:02:08:e6:4c:a7:d6:7a:84:86:10:f3:a4:
8a:7d:92:08:f0:b0:8b:b5:bf:1b:de:05:8c:43:24:95:e2:23:
dd:32:47:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:11:40 2025 by rpki-client