Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/EIKOgQFi5mojMPucev_-8ewm_-E.roa
File: EIKOgQFi5mojMPucev_-8ewm_-E.roa (raw, json)
Hash identifier: a2bhdKBZ8yPIzwYvUQAAVhbdMilJSR3ugkNV2LMmk80=
Subject key identifier: 10:82:8E:81:01:62:E6:6A:23:30:FB:9C:7A:FF:FE:F1:EC:26:FF:E1
Certificate issuer: /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial: 01942823C397C0DE1415A049D471C6D4F415
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/EIKOgQFi5mojMPucev_-8ewm_-E.roa
Signing time: Thu 02 Jan 2025 17:50:19 +0000
ROA not before: Thu 02 Jan 2025 17:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204213
IP address blocks: 86.106.142.0/24 maxlen: 24
89.32.248.0/24 maxlen: 24
89.32.249.0/24 maxlen: 24
89.32.250.0/24 maxlen: 24
89.32.251.0/24 maxlen: 24
89.39.208.0/24 maxlen: 24
89.42.208.0/24 maxlen: 24
89.42.209.0/24 maxlen: 24
89.42.210.0/24 maxlen: 24
89.42.211.0/24 maxlen: 24
89.45.89.0/24 maxlen: 24
185.94.96.0/24 maxlen: 24
185.94.97.0/24 maxlen: 24
185.94.98.0/24 maxlen: 24
185.94.99.0/24 maxlen: 24
188.212.22.0/24 maxlen: 24
217.144.104.0/24 maxlen: 24
217.144.105.0/24 maxlen: 24
217.144.106.0/24 maxlen: 24
217.144.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:c3:97:c0:de:14:15:a0:49:d4:71:c6:d4:f4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Validity
Not Before: Jan 2 17:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10828e810162e66a2330fb9c7afffef1ec26ffe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:ad:d7:70:55:b6:0c:be:f8:41:1d:27:3a:
43:3e:98:e7:c9:bc:52:fe:5e:49:1a:eb:15:34:09:
39:f4:9e:4f:da:36:9b:fe:8c:03:9c:b2:92:25:1f:
7f:a1:5c:80:18:11:8f:54:4a:3e:46:66:63:eb:f2:
4a:2b:1c:cc:63:fd:f6:2f:9e:3d:f4:00:e4:a9:0c:
60:78:22:2d:e0:84:e5:73:75:ae:8d:d1:18:e2:ba:
a3:f9:de:44:96:ee:bf:f8:82:10:f7:7e:fc:a3:10:
e9:de:66:01:45:8c:b6:16:b5:6a:8a:01:17:c3:6d:
b0:73:1b:b7:65:5d:86:77:88:ad:1e:d5:15:45:d3:
66:fa:42:44:7b:68:d0:a4:29:60:d8:7c:d9:5e:33:
f6:08:c6:80:68:ac:27:20:f7:3b:ca:6c:d1:01:4d:
21:71:02:f0:e3:8b:dd:56:7d:2e:c8:2b:50:3e:fd:
c1:61:01:bb:bc:60:21:94:90:fc:74:07:5a:c0:66:
b0:4d:a1:65:fa:c7:00:f5:4a:8f:e9:57:db:56:0f:
79:d1:66:a0:b5:f5:3a:63:37:9d:18:67:17:98:7c:
1a:82:e0:b2:eb:cf:1a:78:70:9d:9f:b5:37:50:dc:
42:67:3c:c1:bf:26:48:6d:5f:c4:7a:f9:11:b4:82:
86:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:82:8E:81:01:62:E6:6A:23:30:FB:9C:7A:FF:FE:F1:EC:26:FF:E1
X509v3 Authority Key Identifier:
keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/EIKOgQFi5mojMPucev_-8ewm_-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.142.0/24
89.32.248.0/22
89.39.208.0/24
89.42.208.0/22
89.45.89.0/24
185.94.96.0/22
188.212.22.0/24
217.144.104.0/22
Signature Algorithm: sha256WithRSAEncryption
23:31:39:09:45:b9:e5:cd:ad:9c:13:a1:df:17:aa:04:20:4e:
aa:18:aa:ce:29:5e:91:f9:98:d1:a6:e3:c5:02:c0:0e:0d:68:
e5:36:f1:35:37:10:5e:6a:33:65:e1:95:db:8a:12:09:5a:f5:
4c:f4:00:96:eb:49:2d:72:39:7a:09:b5:3b:ce:f1:8d:a4:88:
35:03:5a:96:f1:04:03:e1:63:d1:c9:0e:3f:0a:ce:a6:5a:18:
d2:2a:1c:ae:1f:e2:d9:b4:4f:9b:55:9c:80:bf:f6:53:92:b1:
c3:2e:41:bb:0a:dc:33:ec:04:2b:fe:64:dc:8f:8d:69:ed:e1:
99:27:08:63:c3:ca:60:fa:e5:92:14:c7:cc:03:aa:42:76:c7:
97:3b:52:6e:f6:1d:d1:eb:98:78:e2:d2:c9:d7:58:be:00:c7:
6c:e6:89:71:8c:cf:5c:b7:0d:af:68:40:0b:45:20:42:79:1d:
ce:0a:48:63:38:cf:7f:36:4c:f8:8b:cb:8d:e6:cb:c3:99:7c:
8c:5d:63:3b:de:a9:c4:44:2d:dc:ce:6b:07:f0:a0:b3:c6:d7:
08:b6:bc:27:77:c0:4e:dc:7e:49:b9:d8:b8:54:86:56:e3:af:
44:f7:48:82:60:c2:ec:f9:91:3f:c8:84:a5:54:78:e5:d0:15:
bd:91:aa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:16 2025 by rpki-client