Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/EcvpEe6KcBt993JKLu8YO04Un5I.roa
File: EcvpEe6KcBt993JKLu8YO04Un5I.roa (raw, json)
Hash identifier: 7xYAacsPzggqlf+PnqOQYKnKBIIQsMXOuun1bs1Hcdk=
Subject key identifier: 11:CB:E9:11:EE:8A:70:1B:7D:F7:72:4A:2E:EF:18:3B:4E:14:9F:92
Certificate issuer: /CN=331706b915bab8dac2b5547fbc87adeb61e6aede
Certificate serial: 01946912DCCFD92A104A5E1315DEEFC607CA
Authority key identifier: 33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/EcvpEe6KcBt993JKLu8YO04Un5I.roa
Signing time: Wed 15 Jan 2025 08:27:11 +0000
ROA not before: Wed 15 Jan 2025 08:27:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24989
IP address blocks: 89.110.128.0/18 maxlen: 32
185.7.71.0/24 maxlen: 32
2a05:c700::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:12:dc:cf:d9:2a:10:4a:5e:13:15:de:ef:c6:07:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331706b915bab8dac2b5547fbc87adeb61e6aede
Validity
Not Before: Jan 15 08:27:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11cbe911ee8a701b7df7724a2eef183b4e149f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:6a:14:ac:5b:f1:02:03:a6:b8:94:61:f1:
bd:6a:49:d8:07:c7:03:c3:19:b2:a6:47:c8:43:bb:
92:be:61:07:50:1f:51:63:ba:9e:56:70:ba:40:d1:
1b:4b:64:eb:48:51:fb:5b:17:d5:f5:0a:c8:18:2c:
3f:9d:d6:39:37:08:d7:f9:e3:1a:88:2f:39:85:2e:
b1:07:2c:64:5c:f7:60:f7:51:4c:9c:72:87:ec:5b:
ee:bc:68:86:16:df:61:1b:88:a8:4d:0a:72:a5:ef:
56:8c:20:d4:47:99:28:ec:4a:54:f8:df:5a:5c:7a:
45:cd:93:1a:d2:89:a5:23:8e:d9:28:f4:64:85:73:
eb:57:69:4a:2a:80:da:01:ab:ca:d9:66:ea:3a:48:
de:e8:21:c8:32:4a:a7:8a:f1:bf:c0:ff:32:76:db:
53:72:e0:99:09:fb:b0:e6:5f:4c:09:0b:2a:23:7f:
76:10:af:e0:e0:77:b2:9f:bf:60:bb:b9:59:b8:8c:
5f:51:f7:b4:0a:05:3b:75:04:8b:4a:97:0d:27:53:
f0:b3:ae:99:c8:30:a3:90:f4:a9:d3:5d:c3:97:97:
de:b5:cc:9a:66:1b:8c:d1:3e:7a:aa:6a:d5:c4:15:
c6:53:08:02:54:ef:7e:d2:0e:9c:b5:c1:53:ec:83:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CB:E9:11:EE:8A:70:1B:7D:F7:72:4A:2E:EF:18:3B:4E:14:9F:92
X509v3 Authority Key Identifier:
keyid:33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/EcvpEe6KcBt993JKLu8YO04Un5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.110.128.0/18
185.7.71.0/24
IPv6:
2a05:c700::/32
Signature Algorithm: sha256WithRSAEncryption
a2:08:9f:cd:e8:92:5a:64:69:b5:b4:4e:1e:eb:58:0a:b1:a6:
c9:db:43:cb:f8:31:6f:63:54:43:48:70:00:5f:3a:7b:cd:1d:
2c:47:78:88:65:31:23:b0:7d:1b:92:d3:4e:f4:72:0c:46:8f:
47:7e:79:77:ef:94:de:a6:15:93:72:b4:32:46:8b:9e:6d:03:
6f:bf:6e:05:10:3a:c7:a9:9b:83:a1:ba:42:c5:0e:0a:96:b7:
d1:91:d2:47:cc:27:0e:77:1b:b8:e0:70:e0:d4:9e:8a:28:2d:
99:e1:8e:d7:34:6e:16:a5:36:60:42:63:5e:0b:c6:84:a9:53:
7a:0a:7f:58:3d:97:9b:e7:50:62:58:35:14:be:ea:16:77:9d:
ba:6a:d7:c7:99:12:59:af:88:47:ee:6f:a7:b8:f0:3c:0a:80:
3d:be:da:01:64:73:61:93:9b:e2:98:dc:05:2a:90:ad:4e:53:
9a:47:8f:15:16:c4:b3:63:f7:91:42:bd:39:5e:53:ec:dc:b5:
45:00:ae:36:56:02:e0:82:fd:bf:8b:e8:96:3d:e1:b6:fe:4c:
d1:4f:c2:9d:2b:c9:f0:08:4b:a5:22:2c:dd:e6:e7:78:37:5b:
f8:84:e3:01:52:ca:67:18:63:9b:ca:d9:67:a4:de:2c:e2:9d:
07:a1:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:21 2025 by rpki-client