Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/EJIUsUOKvSLerwNQFS-Out5zZuM.roa
File: EJIUsUOKvSLerwNQFS-Out5zZuM.roa (raw, json)
Hash identifier: D433E6UiMyX9KdcjAcomX19JFn+CfTOeAqT8DsBwSkY=
Subject key identifier: 10:92:14:B1:43:8A:BD:22:DE:AF:03:50:15:2F:8E:BA:DE:73:66:E3
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 019421B1C3F512092E61333402D13B8047CF
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/EJIUsUOKvSLerwNQFS-Out5zZuM.roa
Signing time: Wed 01 Jan 2025 11:48:05 +0000
ROA not before: Wed 01 Jan 2025 11:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20943
IP address blocks: 194.58.206.0/24 maxlen: 24
2001:67c:2558::/48 maxlen: 48
2a01:3f7:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c3:f5:12:09:2e:61:33:34:02:d1:3b:80:47:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Jan 1 11:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=109214b1438abd22deaf0350152f8ebade7366e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:21:5f:c4:51:9d:2d:fd:8a:40:5a:b5:95:
d0:f8:4c:9d:14:c3:49:32:08:9a:5a:5b:72:e7:6e:
d9:e3:b0:5f:f8:0c:46:e9:d5:03:13:c4:47:bc:93:
c0:c2:0c:87:ee:46:b6:5e:78:fc:d2:35:ef:91:bf:
9e:96:63:ce:25:31:ad:eb:e9:a9:6b:21:e9:ff:62:
1b:b1:40:bb:87:45:29:be:3f:8f:34:84:b8:7d:31:
2f:b5:3b:fa:48:4c:59:9e:de:75:7c:35:c5:ea:fb:
9b:2d:82:51:2d:96:c1:c9:e2:f2:fd:27:89:7f:1e:
dd:6d:76:d7:4f:3a:74:3e:52:c6:cd:ae:02:7f:8f:
2e:ba:a6:95:6a:64:e7:90:29:9f:ec:4f:5a:10:33:
f0:2a:f8:90:e9:7f:39:a6:54:e5:37:20:17:e4:29:
cb:23:11:b5:16:19:c3:33:27:2a:08:e5:d3:68:ef:
28:7a:fb:a8:bd:cf:e0:d4:d0:f3:3e:3d:de:8f:3f:
ee:c0:50:cc:11:1c:d5:cf:5a:b1:d6:f5:68:0b:ed:
c6:19:34:41:4d:dd:0f:c7:2f:43:d8:a0:4d:48:80:
9d:ff:a2:64:01:50:93:10:e5:99:c0:90:49:d4:5d:
d4:eb:f2:e5:d4:d2:42:33:4b:3c:5b:06:b7:fe:e3:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:92:14:B1:43:8A:BD:22:DE:AF:03:50:15:2F:8E:BA:DE:73:66:E3
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/EJIUsUOKvSLerwNQFS-Out5zZuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.206.0/24
IPv6:
2001:67c:2558::/48
2a01:3f7:6::/48
Signature Algorithm: sha256WithRSAEncryption
36:e1:7f:05:18:01:da:42:f4:0a:e8:2b:40:f3:78:61:41:b4:
4d:a1:40:bd:10:59:59:bb:3d:cb:5a:5f:51:4c:33:4d:49:15:
1f:b1:20:51:3a:fd:49:6a:36:42:40:df:20:16:41:77:de:48:
ef:03:05:e4:0a:98:0d:38:05:f0:ea:68:12:64:4a:95:13:d0:
36:62:44:8e:eb:94:b4:16:9c:66:f7:53:8f:23:6d:82:ac:2e:
22:f9:63:41:94:2b:f3:c9:50:c1:44:19:bc:a3:e9:d6:39:32:
45:0f:89:50:c6:9d:81:5d:d2:0e:61:6c:40:65:be:a1:3e:b9:
c5:f7:b9:b0:8a:c2:43:a3:cd:4c:05:fd:15:11:fd:03:ad:f1:
bb:c4:f6:92:e0:cf:99:9d:00:3b:3c:53:f4:e8:60:66:7b:cd:
18:0d:83:d6:07:55:cc:bd:d4:dc:0c:34:0b:b7:9b:13:5e:b3:
26:c3:6d:01:f2:e6:a6:20:e7:c5:78:f7:82:19:b0:0d:ac:4c:
4d:b8:28:08:fc:8f:40:e7:ad:ed:e7:b2:52:c6:f2:56:5e:cd:
fb:f2:f1:ad:96:0a:f1:1e:cb:43:5c:aa:85:7b:9f:96:4a:50:
04:c4:53:4c:8f:e2:9b:6d:73:cf:a6:c2:4a:3a:f5:95:65:ac:
8e:f7:8d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:51 2025 by rpki-client