Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/7ut39nDY5rv5Se7wwlOpxKsRN38.roa
File: 7ut39nDY5rv5Se7wwlOpxKsRN38.roa (raw, json)
Hash identifier: T38kEZlJJOWtX13bv0pjv6eTHzUXA4juujWye9qIGUI=
Subject key identifier: EE:EB:77:F6:70:D8:E6:BB:F9:49:EE:F0:C2:53:A9:C4:AB:11:37:7F
Certificate issuer: /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Certificate serial: 019421B1B35701846978B9D465BA2668CDFE
Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/7ut39nDY5rv5Se7wwlOpxKsRN38.roa
Signing time: Wed 01 Jan 2025 11:48:01 +0000
ROA not before: Wed 01 Jan 2025 11:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197107
IP address blocks: 178.20.192.0/24 maxlen: 24
178.20.193.0/24 maxlen: 24
178.20.194.0/24 maxlen: 24
178.20.195.0/24 maxlen: 24
178.20.196.0/24 maxlen: 24
178.20.197.0/24 maxlen: 24
178.20.198.0/24 maxlen: 24
178.20.199.0/24 maxlen: 24
185.58.88.0/24 maxlen: 24
185.58.89.0/24 maxlen: 24
185.58.90.0/24 maxlen: 24
185.58.91.0/24 maxlen: 24
195.225.64.0/24 maxlen: 24
195.225.66.0/24 maxlen: 24
195.225.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b3:57:01:84:69:78:b9:d4:65:ba:26:68:cd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Validity
Not Before: Jan 1 11:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eeeb77f670d8e6bbf949eef0c253a9c4ab11377f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ca:c0:3a:d9:2d:7f:ad:2b:40:54:55:e8:e2:
05:1a:8c:6f:f6:55:fa:f4:95:e3:93:51:c6:02:3c:
e9:49:7b:b7:70:49:92:89:ba:dc:d4:05:ce:51:c0:
3a:91:b8:8d:21:79:52:28:1b:7c:54:44:af:a5:bf:
33:f9:63:43:20:2c:6e:fc:45:f7:3a:31:89:bb:0f:
94:c9:56:18:2c:c3:50:8c:d6:f1:c9:33:c5:a1:ca:
27:71:ec:c2:2a:ae:f0:fc:e8:64:9c:30:bb:44:62:
04:d8:6f:30:24:09:ae:ce:ba:29:88:33:16:36:88:
30:f8:98:92:70:f7:ca:e7:db:72:41:e2:42:0e:32:
6e:43:35:1d:cb:45:95:3a:75:7d:3b:30:a4:13:76:
6d:65:f5:1c:cd:01:88:fc:63:b2:e7:49:c0:3c:90:
50:ff:84:9d:51:d2:a1:08:ef:9e:c4:5c:63:68:7b:
b9:73:ec:45:1b:c9:e3:65:74:ca:b6:93:04:c3:bf:
bb:d7:67:36:b9:1b:c1:87:2d:cb:fd:41:98:76:94:
17:14:54:c0:21:10:45:84:09:41:44:0a:7f:f4:4d:
91:8b:34:eb:d5:4a:5e:1d:1d:1f:3d:93:4f:17:0b:
a5:47:de:15:6e:20:2c:77:23:83:e7:af:46:57:f9:
55:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EB:77:F6:70:D8:E6:BB:F9:49:EE:F0:C2:53:A9:C4:AB:11:37:7F
X509v3 Authority Key Identifier:
keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/7ut39nDY5rv5Se7wwlOpxKsRN38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.192.0/21
185.58.88.0/22
195.225.64.0/24
195.225.66.0/23
Signature Algorithm: sha256WithRSAEncryption
24:74:4d:88:52:ab:2c:de:a1:cd:1b:97:a8:c0:85:9f:a6:c3:
7a:84:d2:3f:d5:b6:85:57:2d:80:90:7c:f2:77:95:71:e0:66:
96:76:66:95:90:47:9c:a3:a5:67:c8:38:19:30:6b:d5:91:00:
84:14:07:59:91:b5:47:1f:65:66:f4:e3:f3:f1:55:d5:dd:64:
17:db:22:7c:35:2f:95:23:ad:7c:88:69:be:ef:b1:be:32:82:
8a:b1:54:db:6d:60:86:3c:3f:6d:d4:1d:64:06:28:2a:c9:e1:
cb:c2:55:40:3e:2c:9c:e5:27:fd:25:87:00:62:14:66:b5:53:
1c:3b:de:76:62:ff:f9:5b:15:5a:73:94:a9:c8:45:6b:48:f8:
9c:7f:9b:72:a2:b4:a0:63:21:76:49:7c:d4:88:3a:2e:b1:82:
8e:d3:1b:bc:ad:b5:39:4c:6a:c7:3c:95:b7:be:c3:b6:f4:5e:
89:f4:46:be:79:62:da:d5:40:24:1a:e1:7f:0c:50:fb:ca:fc:
b4:11:3a:28:eb:db:9f:76:8f:fd:b8:92:c5:21:86:69:13:ce:
cd:7d:65:77:21:97:fe:7e:8f:07:aa:b5:24:16:c3:6e:87:9d:
c5:1a:09:fa:c3:e8:7a:01:76:ec:16:5e:33:c2:e7:e7:d5:39:
fd:55:f6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:11 2025 by rpki-client