Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/Eyx-nlRpe0-godGFL3xYlKtLlbQ.roa
File: Eyx-nlRpe0-godGFL3xYlKtLlbQ.roa (raw, json)
Hash identifier: 9oeY/MAa6lvwYN19OiXxeJ1LVR37sI0FzCd1Eq/rgTE=
Subject key identifier: 13:2C:7E:9E:54:69:7B:4F:A0:A1:D1:85:2F:7C:58:94:AB:4B:95:B4
Certificate issuer: /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial: 0194228E082459C363005C3D934492F370B8
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/Eyx-nlRpe0-godGFL3xYlKtLlbQ.roa
Signing time: Wed 01 Jan 2025 15:48:41 +0000
ROA not before: Wed 01 Jan 2025 15:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12519
IP address blocks: 81.31.64.0/20 maxlen: 24
82.148.32.0/19 maxlen: 24
87.252.32.0/19 maxlen: 24
185.10.100.0/22 maxlen: 24
212.42.160.0/19 maxlen: 24
2a02:13a0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:08:24:59:c3:63:00:5c:3d:93:44:92:f3:70:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Validity
Not Before: Jan 1 15:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=132c7e9e54697b4fa0a1d1852f7c5894ab4b95b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:25:29:c5:62:cf:b3:9f:f8:41:a8:c5:28:
ac:bc:1f:55:e4:30:c5:07:3c:45:bb:33:80:7c:e9:
c4:e1:d3:17:7f:75:24:67:02:48:f8:9e:f8:72:d5:
65:4c:04:ce:5c:c8:2d:80:1f:15:db:64:fd:a8:3c:
c5:b1:9b:0f:6e:04:08:99:79:87:67:cb:d2:17:5e:
cc:56:75:b6:d0:bf:f1:82:38:70:b8:85:1e:3f:b0:
ae:1d:2e:f8:fd:7f:33:ec:29:a2:36:b1:3a:50:34:
c3:bc:5d:8d:94:07:9a:a7:ec:e6:1b:0a:00:f5:d9:
60:d0:8c:c4:25:b0:f1:9a:ff:3b:f1:97:1c:56:01:
cf:47:bb:a8:09:8f:bb:af:2a:9a:68:dd:c0:1a:ee:
56:9f:60:7e:bb:60:9c:df:1e:21:25:b5:46:3a:27:
aa:58:12:26:f2:cc:62:ab:26:bc:13:06:c1:b3:2d:
f8:4d:87:43:28:fa:02:01:4f:cc:61:2e:d3:fd:a3:
5d:15:8d:ce:9e:ce:ee:55:3b:c2:2f:58:b7:be:91:
7b:f8:7c:4b:aa:a4:7a:a8:72:09:8a:8b:41:b1:a7:
b6:c8:42:26:6c:64:dd:5d:43:a6:64:00:f0:d4:dd:
27:ee:e5:57:8f:5a:2f:37:ab:b9:cb:7c:a8:03:99:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2C:7E:9E:54:69:7B:4F:A0:A1:D1:85:2F:7C:58:94:AB:4B:95:B4
X509v3 Authority Key Identifier:
keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/Eyx-nlRpe0-godGFL3xYlKtLlbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.64.0/20
82.148.32.0/19
87.252.32.0/19
185.10.100.0/22
212.42.160.0/19
IPv6:
2a02:13a0::/32
Signature Algorithm: sha256WithRSAEncryption
43:65:71:fa:0f:00:f9:17:05:16:3e:1a:aa:4c:a2:65:7e:bd:
2d:6d:24:bc:b3:33:32:86:96:79:98:d7:4b:43:a5:8e:34:48:
16:cc:a8:e1:09:57:78:b3:15:96:99:de:63:ce:a6:61:42:98:
ee:7a:7e:5f:11:c5:12:bc:5e:14:6e:a0:7f:1d:6e:ad:28:27:
b7:c1:75:93:36:08:24:32:7a:94:e7:4d:f8:55:d3:9a:9b:f5:
23:44:3b:f3:73:e0:55:0e:3f:ab:8f:a7:df:4a:fd:f8:98:5b:
81:30:8c:7e:9e:80:d2:28:c3:6e:ec:22:80:0b:2e:b6:23:84:
34:ff:47:86:a4:f5:9d:25:56:09:1a:95:e7:f0:63:6a:1b:11:
be:27:93:4a:5e:5e:2a:c7:2e:94:1e:6e:82:12:a8:0c:43:11:
bf:99:3c:b8:df:81:0a:d6:21:e1:55:49:de:a1:9b:d5:76:99:
da:5c:92:c2:5e:30:99:e7:e7:cd:32:41:f5:8a:53:57:a4:b0:
8c:8c:6c:d8:d4:cf:de:b5:b5:5d:e0:70:13:7b:b4:27:90:f7:
2c:00:55:a6:28:d6:e9:d0:21:1c:d2:ad:cf:20:85:7d:a3:eb:
fe:cb:9c:9b:44:b1:7f:bb:9d:02:07:9d:12:0e:69:70:d9:1f:
af:01:ae:a0
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZQijggkWcNjAFw9k0SS83C4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYzcwY2MyZDIxZGE4YzJlYTY0ODE1MzRmNDhkYTQ5NWFh
ODRiZGQwHhcNMjUwMTAxMTU0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzJjN2U5ZTU0Njk3YjRmYTBhMWQxODUyZjdjNTg5NGFiNGI5NWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD0lKcViz7Of+EGoxSisvB9V5DDF
BzxFuzOAfOnE4dMXf3UkZwJI+J74ctVlTATOXMgtgB8V22T9qDzFsZsPbgQImXmH
Z8vSF17MVnW20L/xgjhwuIUeP7CuHS74/X8z7CmiNrE6UDTDvF2NlAeap+zmGwoA
9dlg0IzEJbDxmv878ZccVgHPR7uoCY+7ryqaaN3AGu5Wn2B+u2Cc3x4hJbVGOieq
WBIm8sxiqya8EwbBsy34TYdDKPoCAU/MYS7T/aNdFY3Ons7uVTvCL1i3vpF7+HxL
qqR6qHIJiotBsae2yEImbGTdXUOmZADw1N0n7uVXj1ovN6u5y3yoA5ltdwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFBMsfp5UaXtPoKHRhS98WJSrS5W0MB8GA1UdIwQY
MBaAFODHDMLSHajC6mSBU09I2klaqEvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83MTAzM2MtMGI2YS00NmU2LWE1ZmUt
MzI5YTk5ZjBmMWI1LzEvRXl4LW5sUnBlMC1nb2RHRkwzeFlsS3RMbGJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC83MTAzM2MtMGI2YS00NmU2LWE1ZmUtMzI5YTk5ZjBmMWI1
LzEvNE1jTXd0SWRxTUxxWklGVFQwamFTVnFvUzkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQEUR9AAwQF
UpQgAwQFV/wgAwQCuQpkAwQF1CqgMA0EAgACMAcDBQAqAhOgMA0GCSqGSIb3DQEB
CwUAA4IBAQBDZXH6DwD5FwUWPhqqTKJlfr0tbSS8szMyhpZ5mNdLQ6WONEgWzKjh
CVd4sxWWmd5jzqZhQpjuen5fEcUSvF4UbqB/HW6tKCe3wXWTNggkMnqU5034VdOa
m/UjRDvzc+BVDj+rj6ffSv34mFuBMIx+noDSKMNu7CKACy62I4Q0/0eGpPWdJVYJ
GpXn8GNqGxG+J5NKXl4qxy6UHm6CEqgMQxG/mTy434EK1iHhVUneoZvVdpnaXJLC
XjCZ5+fNMkH1ilNXpLCMjGzY1M/etbVd4HATe7QnkPcsAFWmKNbp0CEc0q3PIIV9
o+v+y5ybRLF/u50CB50SDmlw2R+vAa6g
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:31 2025 by rpki-client